PT-2025-32004 · Unknown · Onion-Site-Template

Name of the Vulnerable Software and Affected Versions: onion-site-template versions including commit 3196bd89 Description: onion-site-template, a complete and scalable Tor hidden service self-hosting sample, contains a baked-in Tor image when secrets are copied from an existing onion domain. A...

PT-2025-31954 · Halo · Halo

Name of the Vulnerable Software and Affected Versions: Halo versions prior to 2.20.18LTS Description: The reconcile method within the AttachmentReconciler class is susceptible to Cross-Site Scripting XSS attacks. Recommendations: Update to a version of Halo later than 2.20.18LTS...

PT-2025-31932 · Emsisoft · Emsisoft Anti-Malware

Name of the Vulnerable Software and Affected Versions: Emsisoft Anti-Malware versions prior to 2024.12 Description: A vulnerability in the scanning module of Emsisoft Anti-Malware allows attackers on a remote server to obtain Net-NTLMv2 hash information by using a specially crafted A2S Emsisoft...

PT-2025-31973 · Seacms · Seacms

Name of the Vulnerable Software and Affected Versions: seacms versions prior to 13.2 Description: The software contains a cross site scripting issue. The issue is located in the vid parameter within the path Upload/js/player/dmplayer/player. Recommendations: Update seacms to version 13.2 or later...

PT-2025-31887 · Russh · Russh

Name of the Vulnerable Software and Affected Versions: Russh versions 0.54.0 and earlier Description: Russh is a Rust SSH client & server library. The implementation of the SSH protocol's channel window adjust message does not properly validate the incoming value, leading to a potential integer...

PT-2025-31708 · Files · Files

Name of the Vulnerable Software and Affected Versions: Files versions 0.16.9 and below Description: The File Move functionality does not contain logic that prevents injection of arbitrary JavaScript, potentially leading to Browser JS code execution in the context of the user’s session...

PT-2025-31701 · Cursor · Cursor

Name of the Vulnerable Software and Affected Versions: Cursor versions 1.17 through 1.2 Description: Cursor is a code editor built for programming with AI. A UI information disclosure exists in Cursor's MCP Model Context Protocol deeplink handler, enabling attackers to execute arbitrary system...

PT-2025-31710

Name of the Vulnerable Software and Affected Versions Copyparty versions prior to 1.18.9 Description Copyparty is a portable file server. The filter parameter for the "Recent Uploads" page allows arbitrary Regular Expressions RegExes. If this feature is enabled by default, an attacker can craft a...

PT-2025-31603 · WordPress · Youtube +8

Name of the Vulnerable Software and Affected Versions: Photos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal or Stripe, Social Share Buttons, OpenAI plugin for WordPress versions prior to 26.1.0 Description: The WordPress plugin is susceptib...

PT-2025-31703 · 1Panel · 1Panel

Name of the Vulnerable Software and Affected Versions: 1Panel versions 2.0.5 and below Description: 1Panel is a web interface and MCP Server that manages websites, files, containers, databases, and LLMs on a Linux server. The HTTPS protocol used for communication between the Core and Agent...

PT-2025-31706 · Microsoft · Himmelblau +2

Name of the Vulnerable Software and Affected Versions: Himmelblau version 1.0.0 versions prior to 1.1.0 Description: Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. When debugging is enabled for Himmelblau, the himmelblaud tasks service leaks an Intune service...

PT-2025-31604 · Elementor +1 · Elementor +1

Name of the Vulnerable Software and Affected Versions: Stratum – Elementor Widgets versions up to and including 1.6.0 Description: The Stratum – Elementor Widgets plugin for WordPress is susceptible to Stored Cross-Site Scripting through the Advanced Google Maps and Image Hotspot widgets...

PT-2025-31588

Name of the Vulnerable Software and Affected Versions OpenEXR versions 3.3.2 Description OpenEXR is an image storage format used in the motion picture industry. A NULL pointer dereference can occur in a write operation when reading a deep scanline image with a large sample count in reduceMemory...

Wireshark 3.6.x < 3.6.10, 4.0.x < 4.0.3 Multiple Vulnerabilities (Jul 2025) - Windows

Wireshark is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"; ifdescripti...

PT-2025-31219 · Grandstream · Grandstream Ucm6510

Name of the Vulnerable Software and Affected Versions: Grandstream UCM6510 versions prior to 1.0.20.53 Description: An issue allows a remote attacker to obtain sensitive information via the Login function. The vulnerable endpoints are /cgi and /webrtccgi. Recommendations: Update to version...

PT-2025-31314 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.6 Description: The issue involves improved memory handling. An application may be able to cause a denial-of-service. Recommendations: Update to version 15.6...

PT-2025-31347 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.6 Description: An out-of-bounds read issue was addressed through improved input validation. Processing a maliciously crafted USD file may lead to the disclosure of memory contents. Recommendations: Update to macOS...

PT-2025-31281 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.6 Description: A memory corruption issue was addressed with improved validation. Processing a maliciously crafted file may lead to heap corruption. Recommendations: Update to version 15.6...

PT-2025-31702

Name of the Vulnerable Software and Affected Versions Cursor versions 1.2.4 and earlier Description Cursor is a code editor designed for AI-assisted programming. A flaw, dubbed MCPoison CVE-2025-54136, allows attackers to achieve remote and persistent code execution. This is accomplished by...

PT-2025-31284 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.6 Description: A flaw allows an application to potentially access protected user data due to a downgrade issue. This issue was addressed with additional code-signing restrictions. Recommendations: Update to macOS...