PT-2025-28389 · Unknown · Tia Administrator

Name of the Vulnerable Software and Affected Versions: TIA Administrator versions prior to 3.0.6 Description: A vulnerability has been identified in the affected application, where it improperly validates code signing certificates. This could allow an attacker to bypass the check and execute...

PT-2025-28775 · Adobe · Framemaker

Name of the Vulnerable Software and Affected Versions: Adobe Framemaker versions 2020.8, 2022.6 and earlier Description: The issue is a Heap-based Buffer Overflow that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction...

PT-2025-28415 · Unknown · Quiter Gateway

Name of the Vulnerable Software and Affected Versions: Quiter Gateway versions prior to 4.7.0 Description: The issue is a Reflected Cross-site Scripting XSS vulnerability that allows an attacker to execute JavaScript code in the victim's browser. This is achieved by sending a malicious URL throug...

PT-2025-28765

Name of the Vulnerable Software and Affected Versions Adobe Experience Manager MS versions 6.5.23.0 and earlier Adobe Experience Manager AEM Forms on JEE affected versions not specified Description The software is susceptible to a Deserialization of Untrusted Data issue. Successful exploitation o...

PT-2025-28496 · Adobe · Substance3D - Designer

Name of the Vulnerable Software and Affected Versions: Substance3D - Designer versions 14.1 and earlier Description: The issue is an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR...

PT-2025-28331 · WordPress · The Guest Support

Name of the Vulnerable Software and Affected Versions: The Guest Support – Complete customer support ticket system for WordPress plugin versions prior to 1.2.3 Description: The issue is related to a missing capability check on the deleteMassTickets function, allowing unauthenticated attackers to...

PT-2025-28334 · WordPress · Widgets For Google Reviews

Name of the Vulnerable Software and Affected Versions: The Widget for Google Reviews plugin for WordPress versions up to, and including, 1.0.15 Description: The issue allows authenticated attackers with Subscriber-level access and above to include and execute arbitrary PHP files on the server via...

PT-2025-28787 · Adobe · Illustrator 29.5.1 +1

Name of the Vulnerable Software and Affected Versions: Illustrator versions 28.7.6 and earlier Illustrator version 29.5.1 and earlier Description: Illustrator versions 28.7.6 and earlier, and version 29.5.1 and earlier, are affected by an out-of-bounds read issue that may result in the disclosure...

PT-2025-28324 · WordPress · Essential Addons For Elementor

Name of the Vulnerable Software and Affected Versions: The Essential Addons for Elementor – Popular Elementor Templates and Widgets plugin for WordPress versions up to, and including, 6.1.19 Description: The issue is related to Stored Cross-Site Scripting due to insufficient input sanitization an...

PT-2025-28798 · Adobe · Incopy

Name of the Vulnerable Software and Affected Versions: InCopy versions 20.3 and 19.5.3 and earlier Description: InCopy is affected by an Access of Uninitialized Pointer issue that may lead to arbitrary code execution within the current user's context. Successful exploitation requires a user to op...

PT-2025-28362 · WordPress · Woodmart

Name of the Vulnerable Software and Affected Versions: Woodmart theme for WordPress versions up to and including 8.2.3 Description: The issue arises from the software allowing users to execute an action that does not properly validate a value before running do shortcode through the woodmart get...

PT-2025-28409 · Unknown · Quiter Gateway

Name of the Vulnerable Software and Affected Versions: Quiter Gateway versions prior to 4.7.0 Description: The issue allows an attacker to retrieve, create, update, and delete databases through the id factura field in the "/FacturaE/listado facturas ficha.jsp" endpoint. This enables attackers to...

PT-2025-28396 · Sinec Nms · Sinec Nms

Name of the Vulnerable Software and Affected Versions: SINEC NMS versions prior to V4.0 Description: A security issue has been identified in the affected application, where it does not properly validate file paths when extracting uploaded ZIP files. This could allow an attacker to write arbitrary...

PT-2025-28600

Name of the Vulnerable Software and Affected Versions: Microsoft Office Microsoft Word Microsoft 365 Apps for Enterprise Microsoft Office Long Term Servicing Channel Microsoft SharePoint Server versions prior to the July 15, 2025 update Description: A use-after-free issue exists in Microsoft Offi...

PT-2025-28483 · Ivanti · Ivanti Connect Secure +1

Name of the Vulnerable Software and Affected Versions: Ivanti Connect Secure versions prior to 22.7R2.8 Ivanti Policy Secure versions prior to 22.7R1.5 Description: The issue allows a remote authenticated attacker with admin rights to write to a protected configuration file on disk through CLRF...

PT-2025-28485 · Ivanti · Ivanti Connect Secure

Name of the Vulnerable Software and Affected Versions: Ivanti Connect Secure versions prior to 22.7R2.8 Description: The issue allows a local authenticated attacker to obtain sensitive information that has been inserted into a log file. Recommendations: For versions prior to 22.7R2.8, update to...

Siemens TIA Administrator

SUMMARY Siemens TIA Administrator before V3.0.6 contains multiple vulnerabilities which could allow an attacker to escalate privilege or exceute arbitrary code during installations. Siemens has released a new version for TIA Administrator and recommends to update to the latest version. 2...

PT-2025-28243 · Mediawiki · Mediawiki

Name of the Vulnerable Software and Affected Versions: Mediawiki - CheckUser extension versions 1.39.0 through 1.39.12 Mediawiki - CheckUser extension versions 1.42.0 through 1.42.6 Mediawiki - CheckUser extension versions 1.43.0 through 1.43.1 Description: The CheckUser extension’s...

PT-2025-28098 · Curl +1 · Curl +1

Name of the Vulnerable Software and Affected Versions: BoyunCMS versions up to 1.4.20 Description: A critical issue affects some unknown processing of the file /application/pay/controller/Index.php of the component curl, leading to server-side request forgery. The attack may be initiated remotely...

PT-2025-28148

Name of the Vulnerable Software and Affected Versions: llama index versions up to v0.12.22.post1 Description: A vulnerability in the ArxivReader class allows for MD5 hash collisions when generating filenames for downloaded papers. This can lead to data loss as papers with identical titles but...