PT-2025-31269

Name of the Vulnerable Software and Affected Versions BentoML versions 1.4.0 through 1.4.19 Description BentoML contains a Server-Side Request Forgery SSRF issue in the file upload processing system. This allows unauthenticated remote attackers to force the server to make arbitrary HTTP requests...

PT-2025-31326 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.6 Description: An authorization issue was addressed with improved state management. A local attacker may gain access to Keychain items. Recommendations: Update to macOS version 15.6...

PT-2025-31271 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.6 Description: A logic issue existed due to insufficient checks. Processing maliciously crafted web content may lead to an unexpected Safari crash. Recommendations: Update to macOS version 15.6...

PT-2025-31219 · Grandstream · Grandstream Ucm6510

Name of the Vulnerable Software and Affected Versions: Grandstream UCM6510 versions prior to 1.0.20.53 Description: An issue allows a remote attacker to obtain sensitive information via the Login function. The vulnerable endpoints are /cgi and /webrtccgi. Recommendations: Update to version...

PT-2025-31314 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.6 Description: The issue involves improved memory handling. An application may be able to cause a denial-of-service. Recommendations: Update to version 15.6...

PT-2025-31286 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.6 Description: A permissions issue was addressed with additional restrictions. A malicious app may be able to gain root privileges. Recommendations: Update to macOS version 15.6...

PT-2025-31183 · WordPress · Fan Page

Name of the Vulnerable Software and Affected Versions: Fan Page plugin for WordPress versions up to and including 1.0.1 Description: The plugin is susceptible to Stored Cross-Site Scripting through the width parameter due to inadequate input sanitization and output escaping. This allows...

PT-2025-31281 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.6 Description: A memory corruption issue was addressed with improved validation. Processing a maliciously crafted file may lead to heap corruption. Recommendations: Update to version 15.6...

PT-2025-31126 · Jetbrains · Teamcity

Name of the Vulnerable Software and Affected Versions: JetBrains TeamCity versions prior to 2025.07 Description: A Cross-Site Request Forgery CSRF issue was identified in JetBrains TeamCity. The issue affects the GraphQL endpoint /api/graphql. Recommendations: Update JetBrains TeamCity to version...

PT-2025-31123 · Jetbrains · Teamcity

Name of the Vulnerable Software and Affected Versions: TeamCity versions prior to 2025.07 Description: Improper access control allowed the disclosure of build settings via VCS configuration. Recommendations: Update to TeamCity version 2025.07 or later...

PT-2025-31154 · Polkadot · Polkadot Frontier

Name of the Vulnerable Software and Affected Versions: Polkadot Frontier versions prior to 0822030 Description: Polkadot Frontier is an Ethereum and EVM compatibility layer for Polkadot and Substrate. The implementation of CallableByContract incorrectly identified contract addresses running under...

PT-2025-31047 · Unknown · Cool Mo Maigcal Number App

Name of the Vulnerable Software and Affected Versions: Cool Mo Maigcal Number App versions up to 1.0.3 Description: A problematic vulnerability has been identified in Cool Mo Maigcal Number App for Android. The issue affects an unknown functionality within the AndroidManifest.xml file of the...

PT-2025-31048

Name of the Vulnerable Software and Affected Versions ssrfcheck versions prior to 1.2.0 Description The package is vulnerable to Server-Side Request Forgery SSRF due to an incomplete denylist of IP address ranges. The package fails to classify the reserved IP address space 224.0.0.0/4 Multicast a...

PT-2025-31114 · Unknown · User Registry

Name of the Vulnerable Software and Affected Versions: Versions prior to 25.4.270.0 Description: A local authenticated attacker can manipulate user profile files to add illegitimate challenge response codes into the local user registry under certain conditions. This allows users with the ability ...

PT-2025-31122 · Jetbrains · Teamcity

Name of the Vulnerable Software and Affected Versions: TeamCity versions prior to 2025.07 Description: Improper access control allowed the disclosure of build settings via snapshot dependencies. Recommendations: Update to version 2025.07 or later...

PT-2025-31127 · Jetbrains · Teamcity

Name of the Vulnerable Software and Affected Versions: TeamCity versions prior to 2025.07 Description: User credentials were stored in plain text in memory snapshots. Recommendations: Update to version 2025.07 or later...

PT-2025-31121 · Jetbrains · Teamcity

Name of the Vulnerable Software and Affected Versions: TeamCity versions prior to 2025.07 Description: A path traversal issue existed in JetBrains TeamCity due to improper handling of plugin unpacking on Windows systems. This allowed for unauthorized access to files and directories...

PT-2025-30994 · WordPress · Memory Usage

Name of the Vulnerable Software and Affected Versions: Memory Usage plugin for WordPress versions prior to 3.99 Description: The Memory Usage plugin for WordPress is susceptible to Cross-Site Request Forgery due to missing nonce validation in the wpmemory install plugin function. This allows...

PT-2025-30968 · WordPress · Kallyas

Name of the Vulnerable Software and Affected Versions: Kallyas versions prior to 4.21.1 Description: The Kallyas theme for WordPress is susceptible to arbitrary folder deletion due to inadequate file path validation within the delete font function. Authenticated attackers possessing...

PT-2025-30969 · WordPress · Kallyas Theme

Name of the Vulnerable Software and Affected Versions: kallyas theme for WordPress versions prior to 4.21.1 Description: The kallyas theme for WordPress is susceptible to Local File Inclusion via the TH LatestPosts4 widget. Authenticated attackers with Contributor-level access or higher can inclu...