PT-2025-24290

Name of the Vulnerable Software and Affected Versions License Center versions prior to 1.9.49 Description A cross-site scripting XSS vulnerability has been reported. If exploited, the vulnerability could allow remote attackers who have gained user access to bypass security mechanisms or read...

PT-2025-24293 · Qnap · Qsync Central

Name of the Vulnerable Software and Affected Versions: Qsync Central versions prior to 4.5.0.6 Description: A use of externally-controlled format string vulnerability has been reported. If exploited, the vulnerability could allow remote attackers who have gained user access to obtain secret data ...

PT-2025-24189

Name of the Vulnerable Software and Affected Versions ThemeHunk versions 1.1.1 and earlier Description The issue is related to missing authorization, allowing exploitation of incorrectly configured access control security levels. Recommendations For ThemeHunk versions 1.1.1 and earlier, update to...

PT-2025-24186 · WordPress · Wp-Recall

Name of the Vulnerable Software and Affected Versions: WP-Recall versions prior to 16.26.14 Description: A Cross-Site Request Forgery CSRF issue allows Privilege Escalation. This is a type of attack where an attacker tricks a user into performing unintended actions on a web application that the...

PT-2025-24111 · Unknown · Whassan Ki Live Video Conferences

Name of the Vulnerable Software and Affected Versions: whassan KI Live Video Conferences versions 5.5.15 and earlier Description: The issue is related to a Missing Authorization vulnerability that allows exploiting incorrectly configured access control security levels. This can be exploited in...

PT-2025-24196 · Blocksera · Blocksera Image Hover Effects Block

Name of the Vulnerable Software and Affected Versions: Blocksera Image Hover Effects Block versions 1.4.5 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an...

PT-2025-24203 · Unknown · Nk Docspress

Name of the Vulnerable Software and Affected Versions: nK DocsPress versions through 2.5.2 Description: The issue is related to a Missing Authorization vulnerability, which allows exploitation of incorrectly configured access control security levels. Recommendations: For versions through 2.5.2,...

PT-2025-24090 · Nasa Core · Nasa Core

Name of the Vulnerable Software and Affected Versions: Nasa Core versions prior to 6.4.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This means that an attacker can inject malicious...

JVN#10964289: Multiple surveillance cameras provided by i-PRO Co., Ltd. vulnerable to cross-site request forgery

Multiple surveillance cameras provided by i-PRO Co., Ltd. contain the following vulnerability. Cross-Site Request Forgery CSRF CWE-352 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N Base Score 5.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N Base Score 4.3 CVE-2025-36513 Impact I...

PT-2025-24160 · Mainwp · Wp Compress

Name of the Vulnerable Software and Affected Versions: WP Compress for MainWP versions through 6.30.32 Description: The issue is related to a Missing Authorization vulnerability, allowing exploitation of incorrectly configured access control security levels. Recommendations: For versions through...

PT-2025-24226 · Cozmoslabs · Cozmoslabs Profile Builder

Name of the Vulnerable Software and Affected Versions: Cozmoslabs Profile Builder versions 3.13.8 and earlier Description: The issue is related to improper validation of specified quantity in input, which allows phishing. Recommendations: For Cozmoslabs Profile Builder versions 3.13.8 and earlier...

PT-2025-24091 · Oceanwp · Oceanwp Ocean Extra

Name of the Vulnerable Software and Affected Versions: OceanWP Ocean Extra versions 2.4.8 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This enables attackers to inject malicio...

PT-2025-24185 · Unknown · Alessandro Piconi Simple Keyword To Link

Name of the Vulnerable Software and Affected Versions: Alessandro Piconi Simple Keyword to Link versions 1.5 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. This is a type of attac...

PT-2025-24124

Name of the Vulnerable Software and Affected Versions CubePoints versions n/a through 3.2.1 Description The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows Cross Site Request Forgery. Recommendations For versions n/a through 3.2.1, update to a version that includes a fix fo...

RHSA-2025:8530 Red Hat Security Advisory: webkit2gtk3 security update

Bulletin has no description...

RHSA-2025:8507 Red Hat Security Advisory: thunderbird security update

Bulletin has no description...

CVE-2025-5683

CVE-2025-5683 : A vulnerability in Qt image loading (qtimageformats) exists when parsing ICNS image files in QImage, leading to a crash. The issue affects Qt 6.3.0–6.5.9, 6.6.0–6.8.4, and 6.9.0. A fixed patch is available in Qt releases 6.5.10, 6.8.5, and 6.9.1. The connected security advisory/ N...

GHSA-862M-5253-832R Auth0 Wordpress Plugin vulnerable to Deserialization of Untrusted Data

Overview The Auth0 Wordpress plugin contains a critical vulnerability due to insecure deserialization of cookie data. If exploited, since SDKs process cookie content without prior authentication, a threat actor could send a specially crafted cookie containing malicious serialized data. Am I...

WordPress oik plugin <= 4.15.1 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by Aiden in WordPress Plugin oik versions = 4.15.1...

PT-2025-23950 · Hewlett Packard · Hpe Insight Remote Support

Name of the Vulnerable Software and Affected Versions: HPE Insight Remote Support IRS versions prior to 7.15.0.646 Description: A path traversal issue exists. Recommendations: For versions prior to 7.15.0.646, update to version 7.15.0.646 or later to resolve the issue...