PT-2025-44726

Name of the Vulnerable Software and Affected Versions BLU-IC2 versions through 1.19.5 BLU-IC4 versions through 1.19.5 Description Multiple devices are sharing the same secrets for SDKSocket, which uses TCP port 5000. This could allow unauthorized access or compromise of devices utilizing this...

PT-2025-44699

Name of the Vulnerable Software and Affected Versions Liferay Portal versions 7.4.0 through 7.4.3.111 Liferay DXP versions 2023.Q4.0 through 2023.Q4.10 Liferay DXP versions 2023.Q3.1 through 2023.Q3.10 Liferay Portal versions 7.4 GA through update 92 Description The application does not properly...

CVE-2025-30189

CVE-2025-30189 affects Open-Xchange OX Dovecot Pro (and dovecot-based components) where enabling authentication caching causes incorrect caching: multiple users sharing the same cache key leads to the cached entry being reused for subsequent logins. The issue is described in multiple advisories (...

PT-2025-44655

Name of the Vulnerable Software and Affected Versions Totolink A7000R version 9.1.0u.6115 B20201022 Description The Totolink A7000R device has a stack overflow issue. This occurs through the ssid5g parameter within the sub 421CF0 function. A specially crafted request can trigger this, leading to ...

PT-2025-44602

Name of the Vulnerable Software and Affected Versions Rank Math SEO versions through 1.0.252.1 Description An authorization issue exists in Rank Math SEO that allows exploitation of incorrectly configured access control security levels. The issue allows unauthorized access. Recommendations Update...

SUSE: Security Advisory (SUSE-SU-2025:3855-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2025-44587

Name of the Vulnerable Software and Affected Versions Abis Technology BAPSIS versions prior to 202510271606 Description An Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' issue exists in Abis Technology BAPSIS, allowing for Blind SQL Injection. This allows...

Debian: Security Advisory (DSA-6046-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-52665

The UniFi Access door access application (versions 3.3.22 through 3.4.31 ) is vulnerable to a broken access control flaw caused by a misconfiguration that exposes a management API without proper authentication. A malicious actor with access to the management network can exploit this to access man...

Fedora: Security Advisory (FEDORA-2025-fe61a6ad60)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2025-44528

Name of the Vulnerable Software and Affected Versions Nagios XI versions prior to 2011R1.9 Description Nagios XI versions prior to 2011R1.9 are susceptible to cross-site scripting XSS due to inadequate validation or escaping of user-supplied input when handling xiwindow variables. This can allow ...

PT-2025-44373

Name of the Vulnerable Software and Affected Versions NS Maintenance Mode for WP WordPress plugin versions through 1.3.1 Description The plugin does not properly sanitize and escape certain settings, potentially allowing users with high privileges, such as administrators, to carry out Stored...

PT-2025-44503

Name of the Vulnerable Software and Affected Versions Nagios XI versions prior to 2024R1.2 Description Nagios XI versions prior to 2024R1.2 have a privilege escalation issue related to how NagVis configuration data specifically, nagvis.conf is handled. An authenticated user may be able to gain...

CVE-2025-62796

PrivateBin is an online pastebin where the server has zero knowledge of pasted data. Versions 1.7.7 through 2.0.1 allow persistent HTML injection via the unsanitized attachment filename attachmentname when attachments are enabled. An attacker can modify attachmentname before encryption so that,...

PT-2025-44252

Name of the Vulnerable Software and Affected Versions StylemixThemes MasterStudy LMS Pro versions prior to 4.7.16 Description The software contains a missing authorization issue related to incorrectly configured access control security levels. This allows for potential exploitation. Recommendatio...

PT-2025-44254

Name of the Vulnerable Software and Affected Versions Business Directory versions through 6.4.18 Description A missing authorization issue exists in Strategy11 Team Business Directory business-directory-plugin. This allows exploitation due to incorrectly configured access control security levels...

PT-2025-44372

Name of the Vulnerable Software and Affected Versions Site Checkup Debug AI Troubleshooting with Wizard and Tips for Each Issue plugin for WordPress versions prior to 1.48 Description The software is susceptible to log file poisoning, allowing unauthenticated attackers to insert arbitrary content...

PT-2025-44249

Name of the Vulnerable Software and Affected Versions TieLabs Jannah - Extensions versions through 1.1.4 Description The software contains a flaw related to improper input handling during web page generation, specifically a DOM-Based Cross-site Scripting issue. This allows for the execution of...

PT-2025-44342

Name of the Vulnerable Software and Affected Versions Zitadel versions prior to 4.6.0 Zitadel versions prior to 3.4.3 Zitadel versions prior to 2.71.18 Description Zitadel, an open-source identity infrastructure software, is susceptible to online brute-force attacks targeting OTP, TOTP, and...

Google Chrome Security Update (stable-channel-update-for-desktop_28-2025-10) - Linux

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...