PT-2025-28028 · Quest · Quest Kace System Management Appliance

Name of the Vulnerable Software and Affected Versions: Quest KACE Systems Management Appliance SMA versions 14.0.0 through 14.0.96 Quest KACE Systems Management Appliance SMA versions 14.1.0 through 14.1.18 Description: The issue potentially allows privilege escalation on managed systems...

PT-2025-27870 · Lambertgroup · Lambertgroup All In One Slider Responsive

Name of the Vulnerable Software and Affected Versions: LambertGroup All In One Slider Responsive versions 3.7.9 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection...

PT-2025-27900 · Woocommerce · Printcart Web To Print Product Designer

Name of the Vulnerable Software and Affected Versions: Printcart Web to Print Product Designer for WooCommerce versions prior to 2.4.0 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL...

PT-2025-28027

Name of the Vulnerable Software and Affected Versions: MCP Python SDK versions prior to 1.9.4 Description: A validation error in the MCP SDK can cause an unhandled exception when processing malformed requests, resulting in service unavailability until manually restarted. The impact may vary...

PT-2025-27815 · Abb · Abb Rmc-100 Lite +1

Name of the Vulnerable Software and Affected Versions: ABB RMC-100 versions 2105457-043 through 2105457-045 ABB RMC-100 LITE versions 2106229-015 through 2106229-016 Description: The issue allows an attacker to gain access to salted information, which can be used to decrypt MQTT information. This...

PT-2025-27812 · Wire · Wire

Name of the Vulnerable Software and Affected Versions: Wire iOS versions 3.111.1 through 3.124.1 Description: The issue concerns the logging of messages in clear text to the iOS system logs when they are visible in the view port. This occurs due to the canOpenUrl function being called with an...

PT-2025-27680 · WordPress · Peepso Core

Name of the Vulnerable Software and Affected Versions: PeepSo Core: Groups plugin for WordPress versions up to, and including, 6.4.6.0 Description: The PeepSo Core: Groups plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Group Description field due to insufficient input...

PT-2025-27769 · Docker · Docker Desktop

Name of the Vulnerable Software and Affected Versions: Docker Desktop versions prior to 4.43.0 Description: The issue concerns the recording of system environment variables in Docker Desktop diagnostic logs when using shell auto-completion. This leads to the unintentional disclosure of sensitive...

PT-2025-27807 · Mediawiki +1 · Mediawiki +1

Name of the Vulnerable Software and Affected Versions: Mediawiki - GoogleDocs4MW Extension versions 1.42.X through 1.42.6 Mediawiki - GoogleDocs4MW Extension versions 1.43.X through 1.43.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known...

PT-2025-27827 · Pi-Hole · Pi-Hole

Name of the Vulnerable Software and Affected Versions: Pi-hole versions up to 3.3 Description: An authenticated command injection issue exists, allowing an attacker to append OS commands to the domain string when adding a domain to the allowlist via the web interface. These commands are executed ...

PT-2025-27822 · Unknown · Wpcenter Aibud Wp

Name of the Vulnerable Software and Affected Versions: WPCenter AiBud WP versions 1.8.5 and earlier Description: The issue affects WPCenter AiBud WP, allowing an unrestricted upload of a file with a dangerous type, which enables uploading a web shell to a web server. Recommendations: For versions...

PT-2025-27622 · Woocommerce · Mollie Payments For Woocommerce

Name of the Vulnerable Software and Affected Versions: Mollie Payments for WooCommerce versions n/a through 8.0.2 Description: The issue is related to a Missing Authorization vulnerability. There is no information provided about the estimated number of potentially affected devices worldwide or...

PT-2025-27613 · Nokia · Nokia Single Ran Baseband

Name of the Vulnerable Software and Affected Versions: Nokia Single RAN baseband software versions earlier than 24R1-SR 2.1 MP Description: The issue is related to a SOAP message input validation flaw, which could potentially be used for causing resource exhaustion in the Single RAN baseband OAM...

PT-2025-27612 · Nokia · Nokia Single Ran Baseband

Name of the Vulnerable Software and Affected Versions: Nokia Single RAN baseband software versions prior to 23R2-SR 1.0 MP Description: The issue allows an attacker to reveal the exact software release version by sending a specific HTTP POST request through the Mobile Network Operator MNO interna...

PT-2025-27602 · WordPress · The Forminator Forms

Name of the Vulnerable Software and Affected Versions: The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress versions up to, and including, 1.44.2 Description: The issue is related to PHP Object Injection via deserialization of untrusted input in the entry...

PT-2025-27601 · WordPress · The Contact Form By Bit Form

Name of the Vulnerable Software and Affected Versions: The Contact Form by Bit Form plugin for WordPress versions up to and including 2.17.4 Description: The issue allows unauthenticated attackers to extract sensitive data, including files uploaded via a form, due to insufficient directory listin...

PT-2025-27675 · Unknown · Zulip Server

Name of the Vulnerable Software and Affected Versions: Zulip Server versions 2.0.0-rc1 through 10.3 Description: The issue concerns a cross-site scripting XSS vulnerability in Zulip Server, specifically affecting the "/digest/" URL, which displays a preview of the email weekly digest. This...

PT-2025-27643 · Unknown · Modsecurity

Name of the Vulnerable Software and Affected Versions: ModSecurity versions 2.9.8 through 2.9.10 Description: The issue occurs when an empty XML tag is encountered, causing a segmentation fault. This happens if SecParseXmlIntoArgs is set to On or OnlyArgs, the request type is application/xml, and...

PT-2025-27761

Name of the Vulnerable Software and Affected Versions AbuseFilter versions prior to 1.43.2 AbuseFilter version 1.44.0 Description A security issue exists in the Wikimedia Foundation AbuseFilter, specifically within the AuthManager.Php file. The vulnerability is related to program files...

PT-2025-27573 · Glpi +1 · Escalade Glpi Plugin +1

Name of the Vulnerable Software and Affected Versions: Escalade GLPI plugin versions prior to 2.9.11 Description: The issue is related to improper access control, which can lead to data exposure and workflow disruptions. Recommendations: For versions prior to 2.9.11, update to version 2.9.11 to...