PT-2025-45089

Name of the Vulnerable Software and Affected Versions Document Embedder – Embed PDFs, Word, Excel, and Other Files plugin for WordPress versions up to and including 2.0.0 Description The Document Embedder plugin for WordPress is susceptible to unauthorized access, modification, and potential data...

PT-2025-44920

Name of the Vulnerable Software and Affected Versions Label Plugins versions prior to 0.5 Description The Label Plugins plugin for WordPress is susceptible to Cross-Site Request Forgery. This is caused by a lack of, or incorrect, nonce validation within the label plugins options function. An...

PT-2025-44899

Name of the Vulnerable Software and Affected Versions macOS versions prior to Sonoma 14.8.2 macOS versions prior to Sequoia 15.7.2 Description A use after free issue existed due to improper memory management. This could allow an application to cause unexpected system termination. Recommendations...

PT-2025-44842

Name of the Vulnerable Software and Affected Versions macOS versions prior to Sonoma 14.8.2 macOS versions prior to Sequoia 15.7.2 Description A logic issue existed due to insufficient checks, potentially allowing a sandboxed application to access sensitive user data. Recommendations Update to...

PT-2025-55371

Name of the Vulnerable Software and Affected Versions macOS Tahoe versions prior to 26.1 Description A permissions issue exists where an application may be able to access protected user data. This was addressed by implementing additional restrictions. Recommendations Update to macOS Tahoe 26.1...

PT-2025-44798

Name of the Vulnerable Software and Affected Versions Nagios XI versions prior to 5.4.0 Description Nagios XI versions prior to 5.4.0 are susceptible to a cross-site scripting XSS issue due to insufficient validation or escaping of user-supplied input within the jQuery Migrate library. This could...

PT-2025-44754

Name of the Vulnerable Software and Affected Versions Tenda AC10 version 16.03.10.13 Description A flaw exists in the formSysRunCmd function within the /goform/SysRunCmd file. Manipulation of the getui argument can lead to a buffer overflow. This issue can be exploited remotely. The exploit for...

PT-2025-44603

Name of the Vulnerable Software and Affected Versions Rank Math SEO versions through 1.0.252.1 Description Rank Math SEO contains a flaw that allows the retrieval of embedded sensitive data. The issue involves the insertion of sensitive information into sent data. Recommendations Update Rank Math...

PT-2025-44604

Name of the Vulnerable Software and Affected Versions WPDeveloper Essential Addons for Elementor versions through 6.2.4 Description A missing authorization issue exists in WPDeveloper Essential Addons for Elementor essential-addons-for-elementor-lite. This allows exploitation of incorrectly...

PT-2025-44421

Name of the Vulnerable Software and Affected Versions AdForest - Classified Android App version 4.0.12 Description The AdForest - Classified Android App has an issue with how it controls access during authentication. The application utilizes a Base64-encoded email address as an authorization...

PT-2025-44559

Name of the Vulnerable Software and Affected Versions Revive Adserver version 5.5.2 Description A reflected Cross-Site Scripting XSS issue exists in Revive Adserver version 5.5.2. An attacker could potentially cause a user with access to the user interface of a Revive Adserver instance to execute...

PowerDNS Recursor Multiple Cache Pollution Vulnerabilities (2025-06)

PowerDNS Recursor is prone to multiple cache pollution vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

[SECURITY] [DSA 6045-1] pdns-recursor security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6045-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 29, 2025 https://www.debian.org/security/faq -...

PT-2025-44239

Name of the Vulnerable Software and Affected Versions highwarden Super Store Finder versions through 7.5 Description The software contains a Cross-Site Request Forgery CSRF issue. This allows attackers to potentially perform actions on behalf of authenticated users without their knowledge...

PT-2025-44311

Name of the Vulnerable Software and Affected Versions CKAN versions prior to 2.10.9 CKAN versions prior to 2.11.4 Description CKAN, an open-source data management system, contains a flaw in the helpers.markdown extract function. Insufficient input sanitization before wrapping data in an HTML...

KLA89736 ACE vulnerability in Mozilla Firefox

Use-after-free vulnerability was found in Mozilla Firefox. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories MFSA2025-86 Related products Mozilla-Firefox CVE list CVE-2025-12380 unknown Solution Update to the latest version Download Firefox Impacts ACE...

PT-2025-43864

Name of the Vulnerable Software and Affected Versions Waituk Entrada theme versions through 5.7.7 Description A Cross-Site Request Forgery CSRF issue exists in the Waituk Entrada theme. This allows attackers to perform actions on behalf of authenticated users without their knowledge. The...

PT-2025-43966

Name of the Vulnerable Software and Affected Versions privacyIDEA Authenticator version 4.3.0 Description A flaw exists in the handling of OTP/TOTP/HOTP values within the privacyIDEA Authenticator application on Android. A local attacker with root access can bypass two-factor authentication by...

PT-2025-43720

Name of the Vulnerable Software and Affected Versions Advanced Database Cleaner plugin for WordPress versions up to and including 3.1.6 Description The Advanced Database Cleaner plugin for WordPress is susceptible to a Cross-Site Request Forgery CSRF issue. This is caused by insufficient or...

PT-2025-43961

Name of the Vulnerable Software and Affected Versions Docker Desktop versions through 4.48.0 Description The Docker Desktop Installer.exe is susceptible to a DLL hijacking issue stemming from an insecure DLL search order. The installer prioritizes searching for necessary DLLs within the user's...