PT-2024-6097

Name of the Vulnerable Software and Affected Versions: MIT Kerberos 5 versions prior to 1.21.3 Description: The issue is related to the handling of GSS message tokens in the Kerberos authentication protocol. An attacker can cause invalid memory reads by sending message tokens with invalid length...

PT-2025-31016 · Unknown · Sequoia-Openpgp

Name of the Vulnerable Software and Affected Versions: sequoia-openpgp crate versions 1.13.0 through 1.20.9 Description: The sequoia-openpgp crate for Rust contains a flaw where RawCertParser operations can enter an infinite loop of "Reading a cert: Invalid operation: Not a Key packet" messages...

PT-2024-33247 · Progress · Progress Whatsup Gold

Name of the Vulnerable Software and Affected Versions: Progress WhatsUp Gold versions prior to 2023.1.3 Description: The issue concerns an unauthenticated Remote Code Execution vulnerability in Progress WhatsUpGold. Specifically, the Apm.UI.Areas.APM.Controllers.CommunityController allows executi...

PT-2024-28053

Name of the Vulnerable Software and Affected Versions pdoc versions prior to 14.5.1 Description The issue arises from documentation generated with pdoc --math being linked to JavaScript files from polyfill.io. The polyfill.io CDN has been sold and now serves malicious code, leading to a supply...

PT-2025-10093

Name of the Vulnerable Software and Affected Versions: axios versions 1.0.0 through 1.8.1 Bamboo Data Center and Server versions 9.6.1 through 11.0.0 Description: A Server-Side Request Forgery SSRF vulnerability exists in axios when handling absolute URLs instead of protocol-relative URLs. Even...

PT-2024-33319 · WordPress · Seopress

Name of the Vulnerable Software and Affected Versions: SEOPress WordPress plugin versions prior to 7.8 Description: The issue concerns a lack of validation and escaping in one of the Post settings of the SEOPress WordPress plugin. This could allow users with a contributor or higher role to perfor...

PT-2024-5887

Name of the Vulnerable Software and Affected Versions go-retryablehttp versions prior to 0.7.7 Description The issue is related to the lack of sanitization of URLs when writing them to the log file. This could allow an attacker to obtain confidential HTTP basic authentication credentials...

PT-2024-18927 · Unknown +1 · Divido Payment Extension +1

Name of the Vulnerable Software and Affected Versions: opencart/opencart versions 0.0.0 through 3.0.3.9 Description: An SQL Injection issue was identified in the Divido payment extension for OpenCart. As an anonymous unauthenticated user, if the Divido payment module is installed, it is possible ...

PT-2024-12566 · Thimpress · Learnpress

Name of the Vulnerable Software and Affected Versions: ThimPress LearnPress versions 4.2.3 and earlier Description: The issue is related to a Missing Authorization vulnerability in ThimPress LearnPress. This vulnerability affects LearnPress versions from n/a through 4.2.3. Recommendations: For...

PT-2024-28016 · Sonarqube · Sonarqube

Name of the Vulnerable Software and Affected Versions: SonarQube versions prior to 10.4 SonarQube version 9.9.4 LTA and earlier Description: The issue concerns the potential exposure of encrypted values in cleartext as part of URL parameters in logs, such as SonarQube Access Logs and Proxy Logs...

PT-2024-27979 · Iterm2 · Iterm2

Name of the Vulnerable Software and Affected Versions: iTerm2 versions prior to 3.5.2 Description: The issue arises because the "Terminal may report window title" setting is not honored, potentially leading to remote code execution, although it is noted that exploitation is not trivial...

PT-2024-34698 · WordPress · Inquiry Cart Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: Inquiry cart WordPress plugin versions 3.4.2 and earlier Description: The issue concerns the lack of CSRF checks in some areas of the plugin, as well as missing sanitization and escaping. This could allow attackers to make logged-in admins ad...

PT-2024-5656 · Palo Alto Networks · Palo Alto Networks Expedition

Name of the Vulnerable Software and Affected Versions: Palo Alto Networks Expedition versions prior to 1.2.92 Description: The vulnerability is related to a missing authentication mechanism for a critical function in Palo Alto Networks Expedition, allowing an attacker with network access to take...

PT-2024-4227 · Adobe · Framemaker Publishing Server

Name of the Vulnerable Software and Affected Versions: Adobe Framemaker Publishing Server versions 2020.3, 2022.2 and earlier Description: The issue is related to an Improper Authentication vulnerability that could result in privilege escalation. An attacker could exploit this vulnerability to ga...

PT-2024-23393

Name of the Vulnerable Software and Affected Versions WPZOOM Social Icons Widget & Block versions through 4.2.15 Description The issue is related to a Missing Authorization vulnerability. It is recommended to update ASAP. Recommendations For versions through 4.2.15, update to a version later than...

PT-2024-23443 · Pixelite · Events Manager

Name of the Vulnerable Software and Affected Versions: Events Manager versions n/a through 6.4.6.4 Description: The issue is related to a Missing Authorization vulnerability in Pixelite Events Manager. This vulnerability affects the authorization mechanism, potentially allowing unauthorized acces...

PT-2024-23463 · Typps · Typps Calendarista Basic Edition

Name of the Vulnerable Software and Affected Versions: typps Calendarista Basic Edition versions 3.0.5 and earlier Description: The issue is related to a Missing Authorization vulnerability. This vulnerability affects typps Calendarista Basic Edition. Recommendations: For versions 3.0.5 and...

PT-2024-25889 · Coderevolution · Coderevolution Aiomatic

Name of the Vulnerable Software and Affected Versions: CodeRevolution Aiomatic versions 1.9.3 and earlier Description: A Missing Authorization issue affects the software, allowing unauthorized access. The estimated number of potentially affected devices is not specified. There is no information...

PT-2024-35360

Name of the Vulnerable Software and Affected Versions: GNOME libsoup versions prior to 3.6.0 Description: The issue allows HTTP request smuggling in some configurations because '0' characters at the end of header names are ignored. For example, a "Transfer-Encoding0: chunked" header is treated th...

PT-2024-31920

Name of the Vulnerable Software and Affected Versions ARForms - Premium WordPress Form Builder Plugin versions prior to 6.6 Description The issue allows unauthenticated users to modify uploaded files, enabling the upload of PHP code when an upload file input is included on a form. Recommendations...