CVE-2025-23374

Dell Networking Switches running Enterprise SONiC OS, versions prior to 4.4.1 and 4.2.3, contains an Insertion of Sensitive Information into Log File vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure...

EmbedAI 跨站脚本漏洞

EmbedAI is a platform from EmbedAI that enables users to use their data to create AI chatbots powered by ChatGPT. A cross-site scripting vulnerability exists in EmbedAI version 2.1 and prior versions. An attacker exploiting this vulnerability could inject malicious JavaScript code...

kube-audit-rest 安全漏洞

kube-audit-rest is a Kubernetes audit logging by Richard Tweed Personal Developer. A security vulnerability exists in kube-audit-rest versions prior to 1.0.16, which stems from the fact that previous values of kubernetes secrets are leaked in audit messages if the full-elastic-stack example vecto...

PT-2025-5380 · Akamai · Akamai Enterprise Application Access

Name of the Vulnerable Software and Affected Versions: Akamai Enterprise Application Access EAA versions prior to 2025-01-17 Description: An issue was discovered in Akamai Enterprise Application Access EAA. If an administrator knows another tenant's 128-bit connector GUID, they can execute debug...

CVE-2024-50252 affecting package kernel for versions less than 6.6.64.2-1

CVE-2024-50252 affecting package kernel for versions less than 6.6.64.2-1. An upgraded version of the package is available that resolves this issue...

Google Chrome < 132.0.6834.160 Vulnerability

The version of Google Chrome installed on the remote macOS host is prior to 132.0.6834.160. It is, therefore, affected by a vulnerability as referenced in the 202501stable-channel-update-for-desktop28 advisory. - Use after free in DevTools. CVE-2025-0762 Note that Nessus has not tested for this...

PT-2025-5279 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.3 Description: The issue is related to the insecure storage of confidential information in the Messages component of the MacOs operating system. Exploitation of this issue may allow an attacker to gain unauthorized...

PT-2025-5558 · Houzez · Houzez

Name of the Vulnerable Software and Affected Versions: Houzez versions prior to 3.4.0 Description: The issue is related to a lack of authorization in Houzez. This problem affects Houzez, with details about the estimated number of potentially affected devices worldwide not provided. Information...

PT-2025-5384 · Unknown · Metaslider Responsive Slider

Name of the Vulnerable Software and Affected Versions: MetaSlider Responsive Slider versions prior to 3.92.0 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Cross Site Request Forgery. Recommendations: For versions prior to 3.92.0, update to version 3.92.0 or...

PT-2025-5552 · Thimpress · Learnpress

Name of the Vulnerable Software and Affected Versions: ThimPress LearnPress versions prior to 4.2.7.1 Description: The issue is related to a URL redirection to an untrusted site, also known as an "Open Redirect". This problem allows redirection to potentially malicious sites. Recommendations: For...

PT-2025-5554 · Unknown · Wp Go Maps

Name of the Vulnerable Software and Affected Versions: WP Go Maps versions prior to 9.0.41 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability in WP Go Maps, formerly known as WP Google Maps. This vulnerability allows an attacker to trick a user into performing unintended...

WordPress plugin Donate visa 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

Gradle 安全漏洞

Gradle is a set of JVM-based project building tools from Gradle, Inc. that supports maven, Ivy repositories, and more. A security vulnerability exists in Gradle Develocity versions prior to 2024.1.8, which stems from an incorrectly migrated project access control configuration that results in...

WordPress plugin Causes – Donation Plugin 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers. WordPress plugin Causes - A...

WordPress plugin WooCommerce Quick View 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2025-5545 · Ip2Location · Ip2Location Country Blocker

Name of the Vulnerable Software and Affected Versions: IP2Location Country Blocker versions prior to 2.38.3 Description: The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS attacks. This means that an attacker can...

PT-2025-5338 · Updatecli +2 · Updatecli +2

Name of the Vulnerable Software and Affected Versions: Updatecli versions prior to 0.93.0 Description: The issue concerns the leakage of private Maven repository credentials in application logs when an updatecli pipeline execution fails. This occurs when the pipeline contains a maven source...

WordPress plugin ExactMetrics 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2025-3991 · M Files · M-Files Server

Name of the Vulnerable Software and Affected Versions: M-Files Server versions prior to 25.1.14445.5 Description: The condition in M-Files Server allows an unauthenticated user to consume computing resources in certain conditions. This issue can lead to a denial of service. Recommendations: For...

PT-2025-5336 · Directus · Directus

Name of the Vulnerable Software and Affected Versions: Directus versions prior to 11.2.0 Description: The issue allows a typical user to specify an arbitrary role when sharing an item, enabling them to use a higher-privileged role to view fields they should not be able to see. This affects...