PT-2025-53402

Name of the Vulnerable Software and Affected Versions Aidango versions prior to 2.144.4 Description Aidango is susceptible to a Cross-Site Scripting XSS issue due to improper neutralization of input during web page generation. XSS occurs when an application includes malicious code in a web page...

PT-2025-53410

Name of the Vulnerable Software and Affected Versions UTT 进取 512W versions through 1.7.7-171114 Description A flaw exists in UTT 进取 512W that allows for remote buffer overflow. The issue is related to the strcpy function within the /goform/ConfigExceptMSN file. Manipulation of the remark argument...

PT-2025-53098

Name of the Vulnerable Software and Affected Versions Sunshine Photo Cart versions through 3.5.7.1 Description An authorization issue exists in Sunshine Photo Cart that allows exploitation of incorrectly configured access control security levels. Recommendations Update Sunshine Photo Cart to a...

PT-2025-53078

Name of the Vulnerable Software and Affected Versions bdthemes Prime Slider – Addons For Elementor versions through 4.0.10 Description A Server-Side Request Forgery SSRF issue exists in bdthemes Prime Slider – Addons For Elementor. This allows for Server Side Request Forgery. The issue is present...

PT-2025-53383

Name of the Vulnerable Software and Affected Versions OpenOps versions prior to 0.6.11 Description The software allows for remote code execution within the Terraform block. Recommendations Update to version 0.6.11 or later...

PT-2025-53088

Name of the Vulnerable Software and Affected Versions WpStream versions through 4.9.5 Description A missing authorization issue exists in WpStream, allowing exploitation of incorrectly configured access control security levels. Recommendations Update WpStream to a version newer than 4.9.5...

PT-2025-53329

Name of the Vulnerable Software and Affected Versions FaceSentry version 6.4.8 Description FaceSentry 6.4.8 has a remote command injection issue in the pingTest.php and tcpPortTest.php scripts. An attacker with authentication can inject and execute arbitrary shell commands with root privileges...

PT-2025-53150

Name of the Vulnerable Software and Affected Versions Resoto versions through 1.0.8 Description A missing authorization issue exists in Resoto, allowing exploitation due to incorrectly configured access control security levels. Recommendations Update Resoto to a version later than 1.0.8...

PT-2025-52840

Name of the Vulnerable Software and Affected Versions PMB version 7.4.6 Description The software contains a SQL injection issue in the storage parameter of the ''ajax.php'' endpoint. This allows remote attackers to manipulate database queries. The unsanitized id parameter is exploitable by...

PT-2025-52523

Name of the Vulnerable Software and Affected Versions Dotclear version 2.25.3 Description Dotclear version 2.25.3 contains a remote code execution issue. Authenticated attackers can upload malicious PHP files with a .phar extension through the blog post creation interface. Uploading files...

CVE-2025-40311 affecting package kernel for versions less than 6.6.117.1-1

CVE-2025-40311 affecting package kernel for versions less than 6.6.117.1-1. An upgraded version of the package is available that resolves this issue...

PT-2025-54487

Name of the Vulnerable Software and Affected Versions macOS versions prior to Tahoe 26.2 Description A permissions issue existed where an application could potentially access protected files within an App Sandbox container. This issue was addressed with additional restrictions. Recommendations...

PT-2025-50974

Name of the Vulnerable Software and Affected Versions Atcom 100M IP Phones versions 2.7.x.x Description The software contains an authenticated command injection issue in the web configuration CGI script. This allows attackers to execute arbitrary system commands. The cmd parameter within the 'web...

Withdrawn Advisory: Emby Server API Vulnerability allowing to gain administrative access without precondition

Withdrawn Advisory This advisory has been withdrawn because it incorrectly listed MediaBrowser.Server.Core as vulnerable. CVE-2025-64113 affects Emby Server versions 4.9.1.80 and prior, and Emby Server Beta versions 4.9.2.6 and prior. Original Description Impact This vulnerability affects all Emb...

KLA90892 SB vulnerabilities in Apache Tomcat

Security vulnerabilities were found in Apache Tomcat. Malicious users can exploit these vulnerabilities to bypass security restrictions. Original advisories Fixed in Apache Tomcat 9.0.113 Exploitation Related products Apache-Tomcat CVE list CVE-2025-66614 unknown CVE-2026-24733 unknown Solution...

Python DoS Vulnerability (Dec 2025) - Linux

Python is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:python:python";...

PT-2025-47352

Name of the Vulnerable Software and Affected Versions Fortinet FortiExtender versions 7.0 all versions Fortinet FortiExtender versions 7.2 all versions Fortinet FortiExtender versions 7.4.0 through 7.4.6 Fortinet FortiExtender versions 7.6.0 through 7.6.1 Description An issue exists in Fortinet...

PT-2025-47262

Name of the Vulnerable Software and Affected Versions Top Friends plugin for WordPress versions prior to 0.4 Description The Top Friends plugin for WordPress is susceptible to Cross-Site Request Forgery CSRF. This is caused by a lack of nonce validation within the top friends options subpanel...

PT-2025-46994

Name of the Vulnerable Software and Affected Versions Desktop Alert PingAlert versions 6.1.0.11 through 6.1.1.2 Description A Server-side Request Forgery issue exists in the Application Server component. This allows for probing of internal infrastructure. Recommendations Update to a newer version...

PT-2025-46983

Name of the Vulnerable Software and Affected Versions Desktop Alert PingAlert versions 6.1.0.11 through 6.1.1.2 Description A Reflected Cross Site Scripting XSS issue exists in the Application Server of the software. This allows an attacker to potentially hijack a user’s browser and capture...