GHSA-862M-5253-832R Auth0 Wordpress Plugin vulnerable to Deserialization of Untrusted Data

Overview The Auth0 Wordpress plugin contains a critical vulnerability due to insecure deserialization of cookie data. If exploited, since SDKs process cookie content without prior authentication, a threat actor could send a specially crafted cookie containing malicious serialized data. Am I...

WordPress oik plugin <= 4.15.1 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by Aiden in WordPress Plugin oik versions = 4.15.1...

PT-2025-23948

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue is being actively exploited. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...

PT-2025-23950 · Hewlett Packard · Hpe Insight Remote Support

Name of the Vulnerable Software and Affected Versions: HPE Insight Remote Support IRS versions prior to 7.15.0.646 Description: A path traversal issue exists. Recommendations: For versions prior to 7.15.0.646, update to version 7.15.0.646 or later to resolve the issue...

PT-2025-23917

Name of the Vulnerable Software and Affected Versions HyperComments plugin for WordPress versions up to, and including, 1.2.2 Description The HyperComments plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability che...

PT-2025-23977 · Unknown · Uncanny Automator

Name of the Vulnerable Software and Affected Versions: Uncanny Automator versions through 6.4.0.2 Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For versions through 6.4.0....

PT-2025-23970 · Hewlett Packard · Hp Support Assistant

Name of the Vulnerable Software and Affected Versions: HP Support Assistant versions prior to 9.44.18.0 Description: A potential security issue has been identified that could allow a local attacker to escalate privileges via an arbitrary file write. Recommendations: For versions prior to 9.44.18....

Security Bulletin: Security vulnerabilities were discovered in IBM Verify Identity Access Digital Credentials (CVE-2024-56342, CVE-2024-56343)

Summary Security vulnerabilities were addressed in IBM Verify Identity Access Digital Credentials. Vulnerability Details CVEID:CVE-2024-56342 DESCRIPTION: IBM Verify Identity Access Digital Credentials could allow a remote attacker to obtain sensitive information when a detailed technical error...

CVE-2025-47289

CE Phoenix is a free, open-source eCommerce platform. A stored cross-site scripting XSS vulnerability was discovered in CE Phoenix versions 1.0.9.9 through 1.1.0.2 where an attacker can inject malicious JavaScript into the testimonial description field. Once submitted, if the shop owner admin...

RHSA-2025:8493 Red Hat Security Advisory: nodejs22 security update

Bulletin has no description...

RHSA-2025:8480 Red Hat Security Advisory: libsoup security update

Bulletin has no description...

RHSA-2025:8465 Red Hat Security Advisory: firefox security update

Bulletin has no description...

PT-2025-23745

Name of the Vulnerable Software and Affected Versions AudioService versions prior to SMR Jun-2025 Release 1 Description The issue is related to improper access control in the AudioService, allowing local attackers to access sensitive information. Recommendations For versions prior to SMR Jun-2025...

PT-2025-23805 · Acronis · Acronis Cyber Protect

Name of the Vulnerable Software and Affected Versions: Acronis Cyber Protect 16 versions prior to build 39938 Description: The issue is related to a Server-Side Request Forgery SSRF vulnerability, which can lead to sensitive information disclosure. Recommendations: For Acronis Cyber Protect 16...

PT-2025-23752

Name of the Vulnerable Software and Affected Versions Android versions prior to SMR Jun-2025 Release 1 Description The issue concerns the improper export of Android application components in Bluetooth, allowing local attackers to make devices discoverable. Recommendations For Android versions pri...

PT-2025-23747

Name of the Vulnerable Software and Affected Versions ThemeManager versions prior to SMR Jun-2025 Release 1 Description The issue is related to improper privilege management, allowing local privileged attackers to reuse trial items. This could potentially be exploited by attackers with local...

PT-2025-23742 · Zscaler · Zscaler Client Connector

Name of the Vulnerable Software and Affected Versions: Zscaler Client Connector versions prior to 4.2.0.241 Description: The issue is related to an improper verification of a loaded library, which may allow a local attacker to elevate their privileges. Recommendations: For versions prior to...

PT-2025-23804 · Acronis · Acronis Cyber Protect 16

Name of the Vulnerable Software and Affected Versions: Acronis Cyber Protect 16 Windows versions before build 39938 Description: The issue is related to local privilege escalation due to insecure folder permissions. Recommendations: For Acronis Cyber Protect 16 Windows versions before build 39938...

PT-2025-23794

Name of the Vulnerable Software and Affected Versions Wireshark versions 4.2.0 through 4.4.6 Description The issue is a crash in the column handling functionality of Wireshark. This can be triggered by injecting packets or using a crafted capture file, leading to a denial of service. The root cau...

PT-2025-23846 · Freshrss · Freshrss

Name of the Vulnerable Software and Affected Versions: FreshRSS versions prior to 1.26.2 Description: FreshRSS is a self-hosted RSS feed aggregator. An attacker can gain additional information about the server by checking if certain directories exist, potentially discovering older PHP versions or...