PT-2025-31271 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.6 Description: A logic issue existed due to insufficient checks. Processing maliciously crafted web content may lead to an unexpected Safari crash. Recommendations: Update to macOS version 15.6...

PT-2025-31286 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.6 Description: A permissions issue was addressed with additional restrictions. A malicious app may be able to gain root privileges. Recommendations: Update to macOS version 15.6...

PT-2025-31284 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.6 Description: A flaw allows an application to potentially access protected user data due to a downgrade issue. This issue was addressed with additional code-signing restrictions. Recommendations: Update to macOS...

PT-2025-31199 · Sandboxie · Sandboxie

Name of the Vulnerable Software and Affected Versions: Sandboxie versions 1.16.1 and earlier Description: Sandboxie is a sandbox-based isolation software for 32-bit and 64-bit Windows NT-based operating systems. A critical security issue exists in password handling mechanisms. During encrypted...

PT-2025-31183 · WordPress · Fan Page

Name of the Vulnerable Software and Affected Versions: Fan Page plugin for WordPress versions up to and including 1.0.1 Description: The plugin is susceptible to Stored Cross-Site Scripting through the width parameter due to inadequate input sanitization and output escaping. This allows...

PT-2025-31168 · WordPress · Bricks Theme For Wordpress

Name of the Vulnerable Software and Affected Versions: Bricks theme for WordPress versions prior to 1.12.5 Description: The Bricks theme for WordPress is susceptible to a blind SQL Injection issue via the p parameter. Insufficient escaping of user-supplied input and inadequate preparation of...

PT-2025-31189 · WordPress · Appzend

Name of the Vulnerable Software and Affected Versions: Appzend versions prior to 1.2.7 Description: The Appzend theme for WordPress is susceptible to Stored Cross-Site Scripting through the progressbarLayout parameter. Insufficient input sanitization and output escaping allow authenticated...

PT-2025-31269

Name of the Vulnerable Software and Affected Versions BentoML versions 1.4.0 through 1.4.19 Description BentoML contains a Server-Side Request Forgery SSRF issue in the file upload processing system. This allows unauthenticated remote attackers to force the server to make arbitrary HTTP requests...

PT-2025-31048

Name of the Vulnerable Software and Affected Versions ssrfcheck versions prior to 1.2.0 Description The package is vulnerable to Server-Side Request Forgery SSRF due to an incomplete denylist of IP address ranges. The package fails to classify the reserved IP address space 224.0.0.0/4 Multicast a...

PT-2025-31114 · Unknown · User Registry

Name of the Vulnerable Software and Affected Versions: Versions prior to 25.4.270.0 Description: A local authenticated attacker can manipulate user profile files to add illegitimate challenge response codes into the local user registry under certain conditions. This allows users with the ability ...

PT-2025-31127 · Jetbrains · Teamcity

Name of the Vulnerable Software and Affected Versions: TeamCity versions prior to 2025.07 Description: User credentials were stored in plain text in memory snapshots. Recommendations: Update to version 2025.07 or later...

PT-2025-31126 · Jetbrains · Teamcity

Name of the Vulnerable Software and Affected Versions: JetBrains TeamCity versions prior to 2025.07 Description: A Cross-Site Request Forgery CSRF issue was identified in JetBrains TeamCity. The issue affects the GraphQL endpoint /api/graphql. Recommendations: Update JetBrains TeamCity to version...

PT-2025-31122 · Jetbrains · Teamcity

Name of the Vulnerable Software and Affected Versions: TeamCity versions prior to 2025.07 Description: Improper access control allowed the disclosure of build settings via snapshot dependencies. Recommendations: Update to version 2025.07 or later...

PT-2025-31123 · Jetbrains · Teamcity

Name of the Vulnerable Software and Affected Versions: TeamCity versions prior to 2025.07 Description: Improper access control allowed the disclosure of build settings via VCS configuration. Recommendations: Update to TeamCity version 2025.07 or later...

PT-2025-31121 · Jetbrains · Teamcity

Name of the Vulnerable Software and Affected Versions: TeamCity versions prior to 2025.07 Description: A path traversal issue existed in JetBrains TeamCity due to improper handling of plugin unpacking on Windows systems. This allowed for unauthorized access to files and directories...

PT-2025-31154 · Polkadot · Polkadot Frontier

Name of the Vulnerable Software and Affected Versions: Polkadot Frontier versions prior to 0822030 Description: Polkadot Frontier is an Ethereum and EVM compatibility layer for Polkadot and Substrate. The implementation of CallableByContract incorrectly identified contract addresses running under...

PT-2025-31047 · Unknown · Cool Mo Maigcal Number App

Name of the Vulnerable Software and Affected Versions: Cool Mo Maigcal Number App versions up to 1.0.3 Description: A problematic vulnerability has been identified in Cool Mo Maigcal Number App for Android. The issue affects an unknown functionality within the AndroidManifest.xml file of the...

PT-2025-30994 · WordPress · Memory Usage

Name of the Vulnerable Software and Affected Versions: Memory Usage plugin for WordPress versions prior to 3.99 Description: The Memory Usage plugin for WordPress is susceptible to Cross-Site Request Forgery due to missing nonce validation in the wpmemory install plugin function. This allows...

PT-2025-30947 · WordPress · Geodirectory – Wp Business Directory Plugin +1

Name of the Vulnerable Software and Affected Versions: GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress versions prior to 2.8.98 Description: The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is...

PT-2025-30968 · WordPress · Kallyas

Name of the Vulnerable Software and Affected Versions: Kallyas versions prior to 4.21.1 Description: The Kallyas theme for WordPress is susceptible to arbitrary folder deletion due to inadequate file path validation within the delete font function. Authenticated attackers possessing...