PT-2025-17323 · Bw Broadcast · Tx1000 +5

Name of the Vulnerable Software and Affected Versions: BW Broadcast TX600 versions 1.6.0 BW Broadcast TX300 versions 1.6.0 BW Broadcast TX150 versions 1.6.0 BW Broadcast TX1000 versions 1.6.0 BW Broadcast TX30 versions 1.6.0 BW Broadcast TX50 versions 1.6.0 Description: The issue is related to...

PT-2025-17336 · Nessus · Nessus

Name of the Vulnerable Software and Affected Versions: Nessus versions prior to 10.8.4 Description: A non-authenticated attacker could alter Nessus logging entries by manipulating http requests to the application. Recommendations: For versions prior to 10.8.4, update to version 10.8.4 or later to...

PT-2025-17254 · Thimpress · Thimpress Ivy School

Name of the Vulnerable Software and Affected Versions: ThimPress Ivy School versions 1.6.0 and earlier Description: The issue is related to a Path Traversal vulnerability, specifically a '.../...//' vulnerability, which allows PHP Local File Inclusion in ThimPress Ivy School. Recommendations: For...

PT-2025-17293 · Ibm · Ibm Sterling Connect:Direct Web Services

Name of the Vulnerable Software and Affected Versions: IBM Sterling Connect:Direct Web Services versions 6.1.0 through 6.3.0 Description: The issue allows an authenticated user to spoof the identity of another user due to improper authorization, which could enable the user to bypass access...

PT-2025-17321 · Hewlett Packard · Hp Touchpoint Analytics Service

Name of the Vulnerable Software and Affected Versions: HP Touchpoint Analytics Service versions prior to 4.2.2439 Description: A potential security issue has been identified that could allow a local attacker to escalate privileges. Recommendations: For versions prior to 4.2.2439, update to versio...

PT-2025-17295 · 74Cms · 74Cms

Name of the Vulnerable Software and Affected Versions: 74cms versions 3.33 and earlier Description: The issue concerns remote code execution RCE in the background interface apiadmin. Recommendations: For versions 3.33 and earlier, update to a version later than 3.33 to resolve the issue. As a...

PT-2025-17274 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.12.0-rc7 Description: A vulnerability in the Linux kernel has been resolved, related to the dmaengine and specifically the fsl-edma component. The issue was caused by not freeing the irq correctly in the remov...

PT-2025-17333

Name of the Vulnerable Software and Affected Versions NodeBB versions prior to 4.0.5 Description A Cross-Site Scripting XSS issue allows remote attackers to store arbitrary code, potentially rendering the blacklist IP functionality unusable until the content is removed via the database...

PT-2025-17265 · Seacms · Seacms

Name of the Vulnerable Software and Affected Versions: SeaCMS versions prior to 13.4 Description: A critical vulnerability exists in SeaCMS. The issue affects unknown processing within the /admin link.php?action=delall file. Manipulation of the e id argument results in a SQL injection. The attack...

PT-2025-17115 · WordPress · Wp-Hijri

Name of the Vulnerable Software and Affected Versions: WP-Hijri versions 1.5.3 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to inject...

PT-2025-17185 · Unknown · Storecontrl Woocommerce

Name of the Vulnerable Software and Affected Versions: StoreContrl Woocommerce versions n/a through 4.1.3 Description: The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as 'Path Traversal'. This allows for Path Traversal in StoreContrl Woocommerce...

PT-2025-17187 · Dashi · Dashi

Name of the Vulnerable Software and Affected Versions: Dashi versions 3.1.8 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows accessing functionality not properly constrained by ACLs. Recommendations: For versions 3.1.8 and earlier, update to a...

PT-2025-17046 · Unknown · Wp Helper Premium

Name of the Vulnerable Software and Affected Versions: WP Helper Premium versions through 4.6.1 Description: The issue is related to a Missing Authorization vulnerability, which allows accessing functionality not properly constrained by ACLs. Recommendations: For versions through 4.6.1, update to...

PT-2025-17148 · Unknown · Hive Support

Name of the Vulnerable Software and Affected Versions: Hive Support versions 1.2.2 and earlier Description: The issue allows the retrieval of embedded sensitive data. This is due to the insertion of sensitive information into sent data, which can be exploited. Recommendations: For versions 1.2.2...

PT-2025-17000 · Unknown · Bknewsticker

Name of the Vulnerable Software and Affected Versions: Bknewsticker versions 1.0.5 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web application,...

PT-2025-16937 · WordPress · The Ultimate Dashboard

Name of the Vulnerable Software and Affected Versions: The Ultimate Dashboard WordPress plugin versions prior to 3.8.6 Description: The issue concerns a Stored Cross-Site Scripting vulnerability. It arises because the plugin does not properly sanitise and escape some of its settings, allowing...

PT-2025-17202 · Unknown · Pydio Core

Name of the Vulnerable Software and Affected Versions: Pydio Core versions 8.2.5 and earlier Description: The issue is related to Cross Site Scripting XSS via the New URL Bookmark feature. This allows for potential malicious script execution. Recommendations: For Pydio Core versions 8.2.5 and...

PT-2025-16994 · WordPress · Wp Post To Pdf Enhanced

Name of the Vulnerable Software and Affected Versions: WP Post to PDF Enhanced versions 1.1.1 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can...

PT-2025-17076 · Unknown · Rebuild Permalinks

Name of the Vulnerable Software and Affected Versions: Rebuild Permalinks versions n/a through 1.6 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This enables potential attackers to...

PT-2025-16989 · WordPress · Wp Social Bookmarking

Name of the Vulnerable Software and Affected Versions: WP Social Bookmarking versions n/a through 3.6 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS in PResponsive WP Social Bookmarking. Recommendations: For versions n/a through 3.6, update to a...