PT-2025-26203 · Pypi · Pgai

Name of the Vulnerable Software and Affected Versions: pgai versions prior to 8eb3567 Description: The issue concerns the pgai Python library, which transforms PostgreSQL into a retrieval engine for RAG and Agentic applications. Prior to a specific commit, the library was vulnerable to an attack...

PT-2025-26149 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.19-rc5+ Description: A warning has been fixed in the Linux kernel for LoongArch when CONFIG CPUMASK OFFSTACK and CONFIG DEBUG PER CPU MAPS are selected. The issue generated a runtime warning while showing...

PT-2025-26159 · WordPress · Ultimate Addons For Contact Form 7

Name of the Vulnerable Software and Affected Versions: Ultra Addons for Contact Form 7 versions up to and including 3.5.12 Description: The Ultra Addons for Contact Form 7 plugin for WordPress is susceptible to arbitrary file uploads due to the absence of file type validation within the save...

PT-2025-26176 · Ibm · Ibm Sterling File Gateway +1

Name of the Vulnerable Software and Affected Versions: IBM Sterling B2B Integrator and IBM Sterling File Gateway versions 6.0.0.0 through 6.1.2.6 IBM Sterling B2B Integrator and IBM Sterling File Gateway versions 6.2.0.0 through 6.2.0.4 Description: The issue allows a privileged user to embed...

PT-2025-25779 · Cloudways · Cloudways Breeze

Name of the Vulnerable Software and Affected Versions: Cloudways Breeze versions through 2.2.13 Description: The issue is related to a Missing Authorization vulnerability in Cloudways Breeze, allowing exploitation of incorrectly configured access control security levels. Recommendations: For...

PT-2025-25768 · WordPress · Pixabay Images

Name of the Vulnerable Software and Affected Versions: Pixabay Images plugin for WordPress versions up to, and including, 3.4 Description: The Pixabay Images plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the pixabay upload function. This makes...

PT-2025-26071 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.17.0-rc5 Description: A data race issue in the Linux kernel's dmaengine sf-pdma component allows multiple threads to access and modify a DMA channel's descriptor simultaneously, leading to a NULL pointer...

PT-2025-25971 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.19.0-yocto-standard+ Description: A vulnerability in the Linux kernel has been resolved, related to the powerpc/pci component. The issue arises from the get phb number function, which causes a DEBUG ATOMIC SLE...

PT-2025-25865 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.19.0-rc8 Description: A use-after-free bug has been identified in the Linux kernel, specifically in the binder component. This issue arises due to a race condition where a transaction of type BINDER TYPE WEAK...

PT-2025-26168 · Ibm · Ibm Sterling File Gateway +1

Name of the Vulnerable Software and Affected Versions: IBM Sterling B2B Integrator and IBM Sterling File Gateway versions 6.0.0.0 through 6.1.2.6 IBM Sterling B2B Integrator and IBM Sterling File Gateway versions 6.2.0.0 through 6.2.0.4 Description: The issue allows an authenticated user to embed...

PT-2025-26004 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.19.0-rc5-test+ 309 Description: A vulnerability in the Linux kernel has been resolved, related to event probes eprobes in the tracing subsystem. The issue occurs when attempting to retrieve the instruction...

PT-2025-26089

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.18.11 Description A vulnerability has been resolved in the Linux kernel related to incorrect dev tracker usage in the ax25 module. The issue was discovered while investigating a separate rose issue. The...

PT-2025-26188 · Cryptpad · Cryptpad

Name of the Vulnerable Software and Affected Versions: CryptPad versions prior to 2025.3.0 Description: The issue concerns a weak implementation of access controls in CryptPad, allowing an attacker who compromises a user's credentials to gain access to the victim's account, even if the victim has...

PT-2025-25692 · WordPress · Wp Dummy Content Generator

Name of the Vulnerable Software and Affected Versions: WP Dummy Content Generator versions 3.4.6 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploitation of incorrectly configured access control security levels. Recommendations: For WP Dumm...

PT-2025-25658 · Conda Forge · Conda-Forge-Webservices

Name of the Vulnerable Software and Affected Versions: conda-forge-webservices versions prior to 2025.3.24 Description: The conda-forge-webservices web app, used to run conda-forge admin commands and linting, has an issue where the conda forge webservice Docker container executes commands without...

PT-2025-25712 · Unknown · Aeroscroll Gallery

Name of the Vulnerable Software and Affected Versions: Aeroscroll Gallery – Infinite Scroll Image Gallery & Post Grid with Photo Gallery versions 1.0.12 and earlier Description: The issue is a Path Traversal vulnerability that affects Aeroscroll Gallery – Infinite Scroll Image Gallery & Post Grid...

PT-2025-25698 · Unknown · Thembay Sapa

Name of the Vulnerable Software and Affected Versions: thembay Sapa versions 1.1.14 and earlier Description: The issue is related to improper control of filename for include/require statement in PHP program, also known as 'PHP Remote File Inclusion', which allows PHP Local File Inclusion...

PT-2025-25704 · Unknown · Rustaurius Ultimate Reviews

Name of the Vulnerable Software and Affected Versions: Rustaurius Ultimate Reviews versions n/a through 3.2.14 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. Recommendations: For version...

PT-2025-25727 · Noptin · Noptin

Name of the Vulnerable Software and Affected Versions: Noptin versions 3.8.7 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inject malicious...

PT-2025-25668 · Evon · Evon

Name of the Vulnerable Software and Affected Versions: Evon versions 3.4 and earlier Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion', which allows PHP Local File Inclusion. This is a type ...