Security Bulletin: IBM Cloud Pak for Data is vulnerable to Server-Side Request Forgery (SSRF) due to axios ( CVE-2024-39338 )

Summary Potential vulnerabilities in axios module CVE-2024-39338 has been identified that may affect IBM Cloud Pak for Data. Vulnerability Details CVEID:CVE-2024-39338 DESCRIPTION: axios 1.7.2 allows SSRF via unexpected behavior where requests for path relative URLs get processed as protocol...

PT-2025-25705 · WordPress · Coderevolution Echo Rss Feed Post Generator Plugin

Name of the Vulnerable Software and Affected Versions: CodeRevolution Echo RSS Feed Post Generator Plugin for WordPress versions through 5.4.8.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for...

PT-2025-25723 · WordPress · Wp Codeus Advanced Sermons

Name of the Vulnerable Software and Affected Versions: WP Codeus Advanced Sermons versions n/a through 3.6 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can...

PT-2025-25671 · Rapyd · Rapyd Payment Extension For Woocommerce

Name of the Vulnerable Software and Affected Versions: Rapyd Payment Extension for WooCommerce versions 1.2.0 and earlier Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection. This can potentially be exploited, although specific details about the...

Apple MacOSX Security Update (HT122900)

Apple Mac OS X is prone to an unspecified vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

TencentOS Server 3: java-1.8.0-openjdk (TSSA-2023:0210)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2023:0210 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

TencentOS Server 4: python-jinja2 (TSSA-2024:0924)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0924 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

PT-2025-25478 · WordPress · Kk Youtube Video

Name of the Vulnerable Software and Affected Versions: kk Youtube Video plugin for WordPress versions up to, and including, 0.2 Description: The issue is related to Stored Cross-Site Scripting via the plugin's 'kkytv' shortcode due to insufficient input sanitization and output escaping on...

Siemens Mendix Studio Pro

SUMMARY Mendix Studio Pro contains a vulnerability in the module installation process, that could allow an attacker to write or modify arbitrary files in directories outside a developer’s project directory. Siemens has released new versions for several affected products and recommends to update...

Security Bulletin: IBM Verify Identity Access is affected by a security vulnerability (CVE-2025-0163)

Summary IBM Verify Identity Access has addressed this vulnerability in an update. Vulnerability Details CVEID:CVE-2025-0163 DESCRIPTION: IBM Security Verify Access Appliance could allow a remote attacker to enumerate usernames due to an observable response discrepancy of disabled accounts...

PT-2025-25252 · Joomla · Rstickets!

Name of the Vulnerable Software and Affected Versions: RSTickets! component versions 1.9.12 through 3.3.0 for Joomla Description: A stored XSS issue allows attackers to perform cross-site scripting XSS attacks via sending crafted payload. Recommendations: For RSTickets! component versions 1.9.12...

EulerOS 2.0 SP13 : git (EulerOS-SA-2025-1631)

According to the versions of the git packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Git is a source code management tool. When cloning from a server or fetching, or pushing, informational or error messages are transported from the...

CVE-2024-37395

A stored cross-site scripting XSS vulnerability in the Public Survey function of REDCap 13.1.9 allows authenticated users to execute arbitrary web script or HTML by injecting a crafted payload into the 'Survey Title' and 'Survey Instructions' fields. This vulnerability could be exploited by...

PT-2025-24703 · Adobe · Indesign

Name of the Vulnerable Software and Affected Versions: Adobe InDesign Desktop versions ID20.2, ID19.5.3 and earlier Description: The issue is a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such ...

KLA84757 SB vulnerability in Mozilla Thunderbird

Security vulnerability was found in Mozilla Thunderbird. Malicious users can exploit this vulnerability to bypass security restrictions. Original advisories mfsa2025-50 Related products Mozilla-Thunderbird CVE list CVE-2025-5986 high Solution Update to the latest version Download Thunderbird...

KLA84756 SB vulnerability in Mozilla Thunderbird

Security vulnerability was found in Mozilla Thunderbird. Malicious users can exploit this vulnerability to bypass security restrictions. Original advisories mfsa2025-49 Related products Mozilla-Thunderbird CVE list CVE-2025-5986 high Solution Update to the latest version Download Thunderbird...

PT-2025-24915 · Adobe · Acrobat Reader

Name of the Vulnerable Software and Affected Versions: Acrobat Reader versions 24.001.30235, 20.005.30763, 25.001.20521 and earlier Description: The issue is a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue...

PT-2025-24900 · Dell · Dell Wyse Management Suite

Name of the Vulnerable Software and Affected Versions: Dell Wyse Management Suite versions prior to 5.2 Description: The issue is related to an Incorrect Authorization vulnerability. A low-privileged attacker with remote access could potentially exploit this vulnerability, leading to unauthorized...

PT-2025-24902 · Adobe · Substance3D - Sampler

Name of the Vulnerable Software and Affected Versions: Substance3D - Sampler versions 5.0 and earlier Description: The issue is an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user...

PT-2025-24995 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.22 and earlier Description: A stored Cross-Site Scripting XSS issue affects the software, allowing an attacker with limited privileges to inject malicious scripts into vulnerable form fields. This could...