PT-2025-27725

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.15.0-rc6-syzkaller-00052-g9f35e33144ae Description: A vulnerability in the Linux kernel has been resolved, related to the resetting of the subrequest iterator in netfs retry write stream. The issue occurs when...

PT-2025-22084 · Jocoxdesign · Tiger

Name of the Vulnerable Software and Affected Versions: jocoxdesign Tiger tiger versions n/a through 2.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. Recommendations: For versions n/a...

PT-2025-21672 · Themeton · Themeton Hotstar – Multi-Purpose Business Theme

Name of the Vulnerable Software and Affected Versions: themeton HotStar – Multi-Purpose Business Theme versions 1.4 and earlier Description: The issue affects the themeton HotStar – Multi-Purpose Business Theme due to a Missing Authorization vulnerability, allowing exploitation of incorrectly...

New Chrome Vulnerability Enables Cross-Origin Data Leak via Loader Referrer Policy

Google on Wednesday released updates to address four security issues in its Chrome web browser, including one for which it said there exists an exploit in the wild. The high-severity vulnerability, tracked as CVE-2025-4664 CVSS score: 4.3, has been characterized as a case of insufficient policy...

PT-2025-21540 · WordPress · Logo Slider

Name of the Vulnerable Software and Affected Versions: Logo Slider WordPress plugin versions prior to 3.7.1 Description: The issue concerns the lack of CSRF check when updating settings, which could allow attackers to make a logged-in administrator change them via a CSRF attack. This could...

PT-2025-21480 · WordPress · Tracking Code Manager

Name of the Vulnerable Software and Affected Versions: The Tracking Code Manager WordPress plugin versions prior to 2.3.0 Description: The issue concerns the lack of sanitization and escaping of certain settings in the plugin, which could allow high-privilege users, such as administrators, to...

PT-2025-21511 · WordPress · Peoplepond

Name of the Vulnerable Software and Affected Versions: PeoplePond WordPress plugin versions 1.1.9 and earlier Description: The issue concerns the lack of CSRF checks in certain areas and missing sanitization as well as escaping in the PeoplePond WordPress plugin. This could allow attackers to mak...

PT-2025-21494 · WordPress · Pvn Auth Popup

Name of the Vulnerable Software and Affected Versions: PVN Auth Popup WordPress plugin versions 1.0.0 and earlier Description: The issue concerns the PVN Auth Popup WordPress plugin, which does not properly validate and escape some of its shortcode attributes before outputting them in a page or...

PT-2025-21347

Name of the Vulnerable Software and Affected Versions: Vyper versions up to and including 0.4.2rc1 Description: The issue arises from the concat function potentially skipping the evaluation of side effects when the length of an argument is zero. This is due to a fastpath in the implementation tha...

PT-2025-21498 · WordPress · Simple Video Directory

Name of the Vulnerable Software and Affected Versions: The Simple Video Directory WordPress plugin versions prior to 1.4.3 Description: The issue arises from the plugin's failure to properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to...

PT-2025-21455 · WordPress · Hd Quiz

Name of the Vulnerable Software and Affected Versions: HD Quiz WordPress plugin version prior to 2.0.0 Description: The issue concerns the HD Quiz WordPress plugin, where versions prior to 2.0.0 do not properly sanitise and escape some of its settings. This could allow high privilege users, such ...

PT-2025-21425 · WordPress · Panorama

Name of the Vulnerable Software and Affected Versions: Panorama WordPress plugin versions 1.5.1 and earlier Description: The issue concerns the Panorama WordPress plugin, which does not properly sanitise and escape some of its settings. This could allow high-privilege users, such as administrator...

PT-2025-21269 · Microsoft +1 · Windows +1

Name of the Vulnerable Software and Affected Versions: Hitachi JP1/IT Desktop Management 2 - Smart Device Manager versions 10-50 through 10-50-06 Hitachi JP1/IT Desktop Management 2 - Smart Device Manager versions 11-00 through 11-00-05 Hitachi JP1/IT Desktop Management 2 - Smart Device Manager...

PT-2025-21481 · WordPress · Dl Yandex Metrika Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: DL Yandex Metrika WordPress plugin versions 1.2 and earlier Description: The issue allows high privilege users, such as admins, to perform Stored Cross-Site Scripting attacks. This is possible because the plugin does not properly sanitise and...

Eclipse Jetty DoS Vulnerability (GHSA-889j-63jv-qhr8) - Windows

Eclipse Jetty is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:eclipse:jetty";...

Google Chrome Security Update (stable-channel-update-for-desktop_14-2025-05) - Mac OS X

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

PT-2025-21500 · WordPress · Stylish Price List

Name of the Vulnerable Software and Affected Versions: The Stylish Price List WordPress plugin versions prior to 7.1.8 Description: The issue allows high privilege users of contributor and above to perform Stored Cross-Site Scripting attacks, even when the unfiltered html capability is disallowed...

PT-2025-44: Remote Code Execution (RCE) in FreeScout

The vulnerability was identified in FreeScout , versions v.1.8.173 and 1.8.174. The discovered vulnerability allows an attacker to execute arbitrary code on the server because input validation is insufficient; the attacker can upload a command‑line interpreter and gain full system control...

PT-2025-21166 · Opentext · Opentext Advance Authentication

Name of the Vulnerable Software and Affected Versions: OpenText Advance Authentication versions prior to 6.5 Description: The issue is related to an SQL Injection vulnerability due to the improper neutralization of special elements used in an SQL command. This allows for potential exploitation by...

PT-2025-21169 · Itop · Itop

Name of the Vulnerable Software and Affected Versions: iTop versions prior to 3.1.3 and 3.2.1 Description: The issue allows a cross-site scripting attack to be performed when importing malicious CSV content. This can be done by filling malicious code in a CSV content. The estimated number of...