PT-2025-14556 · Tauri · Tauri Shell Plugin

Name of the Vulnerable Software and Affected Versions: Tauri shell plugin versions prior to 2.2.1 Description: The Tauri shell plugin exposes functionality to execute code and open programs on the system. Due to improper validation of allowed protocols, potentially dangerous protocols like file:/...

PT-2025-27525

Name of the Vulnerable Software and Affected Versions: llama index version 0.12.27 Description: A flaw in the ObsidianReader class allows for hardlink-based path traversal, enabling attackers to bypass path restrictions and access sensitive system files, such as /etc/passwd, by exploiting...

PT-2025-14467 · Ros +1 · Ros +1

Name of the Vulnerable Software and Affected Versions: Robot Operating System ROS versions Noetic and earlier Description: A YAML deserialization vulnerability was found in the ROS 'dynparam' command-line tool, affecting the ability to get, set, and delete parameters of a dynamically configurable...

PT-2025-14385 · Unknown · Animesh Kumar Advanced Speed Increaser

Name of the Vulnerable Software and Affected Versions: Animesh Kumar Advanced Speed Increaser versions n/a through 2.2.1 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a...

PT-2025-14450 · Google +2 · Google Chrome +2

Name of the Vulnerable Software and Affected Versions: Google Chrome on Android versions prior to 135.0.7049.52 Description: The issue is related to an inappropriate implementation in Intents, allowing a remote attacker to perform privilege escalation via a crafted HTML page. Recommendations: For...

PT-2025-14451 · Google +2 · Google Chrome +2

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 135.0.7049.52 Description: The issue is related to an inappropriate implementation in Extensions, allowing a remote attacker to perform privilege escalation via a crafted HTML page. The severity of this issue i...

PT-2025-14129 · Unknown · Leadquizzes

Name of the Vulnerable Software and Affected Versions: LeadQuizzes versions 1.1.0 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for Stored Cross-site Scripting XSS. This means that an attacker can inject malicious script...

PT-2025-14172 · Unknown · Travis Simple Icons

Name of the Vulnerable Software and Affected Versions: Travis Simple Icons versions through 2.8.4 Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For versions through 2.8.4,...

PT-2025-14410 · WordPress · Wordpress Galleria

Name of the Vulnerable Software and Affected Versions: WordPress Galleria versions 1.4 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means that an attacker can inje...

PT-2025-14076 · Unknown · Sunshine Photo Cart

Name of the Vulnerable Software and Affected Versions: Sunshine Photo Cart versions 3.4.10 and earlier Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection. This can potentially be exploited, but no specific details about the estimated number of...

PT-2025-14191 · Unknown · Labinator Content Types Duplicator

Name of the Vulnerable Software and Affected Versions: Labinator Content Types Duplicator versions 1.1.3 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the software, allowing unauthorized actions to be performed. Recommendations: For versions 1.1.3 and earlier, update to...

PT-2025-14144 · Unknown · Tz Plusgallery

Name of the Vulnerable Software and Affected Versions: TZ PlusGallery versions 1.5.5 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability, which allows for Cross Site Request Forgery. Recommendations: For versions 1.5.5 and earlier, update to a version...

PT-2025-14065 · Joomsky · Joomsky Js Help Desk

Name of the Vulnerable Software and Affected Versions: JoomSky JS Help Desk versions 2.9.2 and earlier Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion', which allows PHP Local File Inclusio...

Medium: jsoup

Issue Overview: jsoup is a Java library for working with HTML. Those using jsoup versions prior to 1.14.2 to parse untrusted HTML or XML may be vulnerable to DOS attacks. If the parser is run on user supplied input, an attacker may supply content that causes the parser to get stuck loop...

PT-2025-14164 · Unknown · Raphaelheide Donate Me

Name of the Vulnerable Software and Affected Versions: raphaelheide Donate Me versions 1.2.5 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means an attacker can...

PT-2025-14441 · Onlyoffice · Onlyoffice Document Server

Name of the Vulnerable Software and Affected Versions: ONLYOFFICE Document Server versions 7.5.0 and earlier Description: The issue allows a remote attacker to obtain sensitive information via a crafted file upload. This is a result of a Directory Traversal vulnerability. Recommendations: For...

PT-2025-14236 · Unknown · Feedbucket

Name of the Vulnerable Software and Affected Versions: Feedbucket – Website Feedback Tool versions 1.0.0 through 1.0.6 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. This can be achieved by...

PT-2025-14066 · Unknown · Aec Kiosque

Name of the Vulnerable Software and Affected Versions: AEC Kiosque versions 1.9.3 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, which allows Reflected XSS. This means that an attacker can injec...

PT-2025-17348 · Poppler +5 · Poppler +5

Name of the Vulnerable Software and Affected Versions: Poppler versions prior to 25.04.0 Description: The issue is related to the verification of adbe.pkcs7.sha1 signatures on documents. In the affected versions, the NSSCryptoSignBackend.cc in Poppler does not properly verify these signatures,...

PT-2025-14400 · Woocommerce · Plugin Oficial – Getnet Para Woocommerce

Name of the Vulnerable Software and Affected Versions: Plugin Oficial – Getnet para WooCommerce versions 1.7.3 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Reflected XSS...