PT-2025-45386

Name of the Vulnerable Software and Affected Versions Jellysweep versions 0.12.1 and below Description Jellysweep is a cleanup tool for the Jellyfin media server. The /api/images/cache API endpoint accepts a URL parameter that is directly passed to a cache package, allowing the server to download...

PT-2025-44994

Name of the Vulnerable Software and Affected Versions Cursor versions 1.7.23 and below Description Cursor, a code editor built for programming with AI, contains a flaw where a malicious agent can access sensitive files that should be protected by the cursorignore mechanism. An attacker, having...

PT-2025-45060

Name of the Vulnerable Software and Affected Versions Cursor versions 1.7.28 and below Description Cursor is a code editor designed for programming with AI. An input validation issue within Cursor’s MCP server installation allows maliciously crafted deep-links to circumvent standard security...

PT-2025-50993

Name of the Vulnerable Software and Affected Versions macOS versions prior to 26.1 Description An application may be able to access protected user data due to insufficient validation of symlinks. Recommendations Update to macOS version 26.1 or later...

PT-2025-51003

Name of the Vulnerable Software and Affected Versions macOS versions prior to 26.1 Description An issue existed where an application could potentially escape its sandbox restrictions. This could allow an application to gain broader access to the system than intended. Recommendations Update to mac...

PT-2025-44860

Name of the Vulnerable Software and Affected Versions iOS versions prior to 26.1 iPadOS versions prior to 26.1 Description A maliciously crafted HID Human Interface Device may lead to an unexpected process crash. Improved bounds checks were implemented to resolve this issue. Recommendations Updat...

PT-2025-44851

Name of the Vulnerable Software and Affected Versions macOS versions prior to 14.8.2 macOS versions prior to 15.7.2 Description An application may be able to access user-sensitive data due to insufficient entitlement checks. The issue was resolved by implementing additional entitlement checks...

PT-2025-50986

Name of the Vulnerable Software and Affected Versions macOS versions prior to 26.1 Description A flaw exists where an application may be able to bypass its intended security restrictions and operate outside of its designated sandbox. This could allow an application to access resources or perform...

PT-2025-44705

Name of the Vulnerable Software and Affected Versions Community Events plugin for WordPress versions up to and including 1.5.2 Description The Community Events plugin for WordPress is susceptible to Stored Cross-Site Scripting through the event details parameter. Insufficient input sanitization a...

PT-2025-44707

Name of the Vulnerable Software and Affected Versions Service Finder Bookings plugin for WordPress versions up to and including 6.0 Description The Service Finder Bookings plugin for WordPress is susceptible to privilege escalation, potentially leading to account takeover. This occurs because the...

PT-2025-44695

Name of the Vulnerable Software and Affected Versions Document Library Lite versions prior to 1.1.7 Description The Document Library Lite plugin for WordPress has an issue with authorization. An unauthenticated AJAX action, dll load posts, exposes a JSON table of document data without proper...

PT-2025-44636

Name of the Vulnerable Software and Affected Versions Kitware VTK Visualization Toolkit versions through 9.5.0 Description The software contains a heap buffer overflow issue within the vtkGLTFDocumentLoader. This occurs when processing specifically designed GLTF files, where the copy constructor ...

PT-2025-44586

Name of the Vulnerable Software and Affected Versions WooCommerce Designer Pro versions up to and including 1.9.28 Description The WooCommerce Designer Pro theme for WordPress is susceptible to an arbitrary file read issue. This allows unauthenticated attackers to read arbitrary files on the...

PT-2025-44557

Name of the Vulnerable Software and Affected Versions Nagios XI versions prior to 2024R1.1.3 Description Nagios XI is susceptible to cross-site scripting XSS through the Capacity Planning Report component. A lack of proper input validation or escaping could enable an attacker to inject and execut...

PT-2025-44435

Name of the Vulnerable Software and Affected Versions BusinessNext CRMnext version 10.8.3.0 Description An issue in BusinessNext CRMnext version 10.8.3.0 allows a remote attacker to execute arbitrary code via the comments input parameter. The issue involves the comments parameter, which can be...

PT-2025-44558

Name of the Vulnerable Software and Affected Versions Nagios XI versions prior to 2024R1.1.3 Description Nagios XI is susceptible to cross-site scripting XSS through the Executive Summary Report component. A lack of proper input validation or escaping could allow an attacker to inject and execute...

PT-2025-44516

Name of the Vulnerable Software and Affected Versions Nagios Log Server versions prior to 2024R2.0.3 Description The application does not correctly enforce authorization checks for global dashboard deletion, allowing non-administrator users to delete global dashboards. This impacts other users an...

PT-2025-44700

Name of the Vulnerable Software and Affected Versions Post SMTP – Complete SMTP Solution with Logs, Alerts, Backup SMTP & Mobile App versions prior to 3.6.1 Description The Post SMTP plugin for WordPress has a flaw due to a missing capability check within the construct function. This allows...

PT-2025-44232

Name of the Vulnerable Software and Affected Versions Facebook for WooCommerce versions through 3.5.7 Description A missing authorization issue exists in Facebook for WooCommerce, allowing exploitation of incorrectly configured access control security levels. Recommendations Update Facebook for...

PT-2025-44317

Name of the Vulnerable Software and Affected Versions BLU-IC2 versions through 1.19.5 BLU-IC4 versions through 1.19.5 Description The software exhibits a non-compliant TLS configuration. Recommendations Update BLU-IC2 to a version later than 1.19.5. Update BLU-IC4 to a version later than 1.19.5...