PT-2025-27517

Name of the Vulnerable Software and Affected Versions: ASR180x versions prior to v1536 ASR190x versions prior to v1536 Falcon Linux versions prior to v1536 Kestrel versions prior to v1536 Lapwing Linux versions prior to v1536 Description: The issue is related to an Improper Resource Shutdown or...

PT-2025-27514

Name of the Vulnerable Software and Affected Versions: ASR Falcon Linux versions prior to v1536 ASR Kestrel versions prior to v1536 ASR Lapwing Linux versions prior to v1536 Description: The issue is related to an Improper Resource Shutdown or Release, which allows Resource Leak Exposure. This is...

PT-2025-27576 · Github · Github Enterprise Server

Name of the Vulnerable Software and Affected Versions: GitHub Enterprise Server version 3.17 Description: An exposure of sensitive information issue was identified that could allow an attacker to disclose the names of private repositories within an organization. This issue could be exploited by...

PT-2025-27518

Name of the Vulnerable Software and Affected Versions: ASR180x versions prior to v1536 ASR190x versions prior to v1536 Falcon Linux versions prior to v1536 Kestrel versions prior to v1536 Lapwing Linux versions prior to v1536 Description: The issue is related to an Improper Resource Shutdown or...

PT-2025-27571 · Restdb · Codehooks-Mcp-Server

Name of the Vulnerable Software and Affected Versions: RestDB's Codehooks.io MCP Server versions prior to 0.2.2 Description: The issue is related to a command injection vulnerability in the MCP Server tools definition and implementation. This could result in a user-initiated remote command...

PT-2025-27580 · Tenable · Tenable Nessus

Name of the Vulnerable Software and Affected Versions: Tenable Nessus versions prior to 10.8.5 Description: A security issue was discovered where a non-administrative user could overwrite arbitrary local system files with log content at SYSTEM privilege on a Windows host. Recommendations: For...

PT-2025-27493 · Unknown · Tiny-Secp256K1

Name of the Vulnerable Software and Affected Versions: tiny-secp256k1 versions prior to 1.1.7 Description: A malicious JSON-stringifyable message can be made to bypass the Buffer.isBuffer check, resulting in strange objects being accepted as a message. This can trick the verify function into...

PT-2025-27412 · Dataease · Dataease

Name of the Vulnerable Software and Affected Versions: DataEase versions prior to 2.10.11 Description: DataEase is an open source business intelligence and data visualization tool. There is a bypass vulnerability in DataEase's PostgreSQL Data Source JDBC Connection Parameters. The sslfactory and...

PT-2025-27492 · Unknown · Tiny-Secp256K1

Name of the Vulnerable Software and Affected Versions: tiny-secp256k1 versions prior to 1.1.7 Description: A private key can be extracted when signing a malicious JSON-stringifiable object, affecting environments where the global Buffer is the buffer package. The Buffer.isBuffer check can be...

PT-2025-27471 · Akamai · Akamai Cloudtest

Name of the Vulnerable Software and Affected Versions: Akamai CloudTest versions prior to 60 2025.06.09 Description: The issue allows for Server-Side Request Forgery SSRF, which is a type of attack where an attacker can trick a server into making requests to internal or external resources. No...

PT-2025-28012

Name of the Vulnerable Software and Affected Versions: MbedTLS versions 3.3.0 through 3.6.3 Description: The issue allows an attacker to bypass LMS signature verification by reusing stale stack data, resulting in the acceptance of an invalid signature. This occurs when unchecked return values in...

PT-2025-27436 · Abb · Abb Lite Panel Pro

Name of the Vulnerable Software and Affected Versions: ABB Lite Panel Pro versions through 1.0.1 Description: The issue is related to Insufficient Session Expiration. This problem affects ABB Lite Panel Pro, allowing potential exploitation due to sessions not expiring as expected. Recommendations...

PT-2025-27346 · WordPress · Db Backup +1

Name of the Vulnerable Software and Affected Versions: EZ SQL Reports Shortcode Widget and DB Backup plugin for WordPress versions up to, and including, 5.25.11 Description: The issue is related to Stored Cross-Site Scripting via the plugin's SQLREPORT shortcode due to insufficient input...

PT-2025-27546 · Intelbras · Intelbras Rx1500 Router

Name of the Vulnerable Software and Affected Versions: Intelbras RX1500 Router versions 2.2.17 and earlier Description: An integer overflow exists in the websReadEvent function when processing the command field of the HTTP header. This can allow a remote attacker to execute arbitrary code or caus...

PT-2025-27126 · Designthemes · Designthemes Lms

Name of the Vulnerable Software and Affected Versions: designthemes LMS versions n/a through 9.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means that an attacker can inject...

PT-2025-27130 · WordPress · Davenport

Name of the Vulnerable Software and Affected Versions: Davenport - Versatile Blog and Magazine WordPress Theme versions 1.3 and earlier Description: The issue is a Path Traversal vulnerability that allows PHP Local File Inclusion. This vulnerability enables an attacker to access and include local...

PT-2025-27156 · Cyberchimps · Cyberchimps Responsive Blocks

Name of the Vulnerable Software and Affected Versions: CyberChimps Responsive Blocks versions n/a through 2.0.6 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows DOM-Based XSS. This means that an...

PT-2025-27153 · Cookiebot · Cookiebot

Name of the Vulnerable Software and Affected Versions: Cookiebot versions through 4.5.8 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. This is a type of attack where an attacker tricks a user...

PT-2025-27220 · Unknown · Beauty Contact Popup Form

Name of the Vulnerable Software and Affected Versions: Dilip kumar Beauty Contact Popup Form versions n/a through 6.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS in the Beauty Contact...

PT-2025-27193 · Unknown · Plationline Payments

Name of the Vulnerable Software and Affected Versions: PlatiOnline Payments versions through 6.3.2 Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For versions through 6.3.2...