PT-2025-29739 · Crocoblock · Jetpopup

Name of the Vulnerable Software and Affected Versions: Crocoblock JetPopup versions through 2.0.15.1 Description: The software contains an Improper Neutralization of Input During Web Page Generation issue, specifically a Stored Cross-site Scripting XSS flaw. This allows for the injection of...

PT-2025-29881 · Linknat · Linknat Vos3000 +2

Name of the Vulnerable Software and Affected Versions: Linknat VOS Manager versions prior to 2.1.9.07 Linknat VOS2009 Linknat VOS3000 early builds Description: A path traversal issue exists in Linknat VOS Manager that allows unauthenticated remote attackers to read arbitrary files on the server...

PT-2025-29691 · Unknown · Zwx-2000Csw2-Hn

Name of the Vulnerable Software and Affected Versions: ZWX-2000CSW2-HN versions prior to 0.3.19 ZWX-2000CS2-HN affected versions not specified Description: A use of hard-coded credentials issue exists. Exploitation of this issue may allow an attacker to tamper with device settings by obtaining th...

PT-2025-29805 · Unknown · Funnelkit Funnel Builder

Name of the Vulnerable Software and Affected Versions: FunnelKit Funnel Builder versions through 3.10.2 Description: FunnelKit Funnel Builder is susceptible to a SQL injection flaw due to improper neutralization of special elements within SQL commands. This issue allows for potential SQL injectio...

PT-2025-29763 · WordPress · Wp Hide Post

Name of the Vulnerable Software and Affected Versions: xfinitysoft WP Post Hide versions n/a through 1.0.9 Description: A Cross-Site Request Forgery CSRF issue exists in xfinitysoft WP Post Hide, allowing attackers to perform actions on behalf of an authenticated user. Recommendations: Update...

PT-2025-29793 · WordPress +1 · Wordpress +1

Name of the Vulnerable Software and Affected Versions: designthemes Visual Art | Gallery WordPress Theme versions through 2.4 Description: The designthemes Visual Art | Gallery WordPress Theme contains a flaw due to deserialization of untrusted data, allowing for object injection. Recommendations...

PT-2025-29693 · WordPress · Events Manager – Calendar

Name of the Vulnerable Software and Affected Versions: WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce versions prior to 3.1.50 Description: The WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce plugin for WordPress is susceptible to...

WP Publications WordPress Plugin 1.2 - Stored XSS

Exploit Title: WP Publications WordPress Plugin 1.2 - Stored XSS Google Dork: inurl:/wp-content/plugins/wp-publications/ Date: 2025-07-15 Exploit Author: Zeynalxan Quliyev Vendor Homepage: https://wordpress.org/plugins/wp-publications/ Software Link:...

Oracle MySQL Server 8.0.0 - 8.0.25 Security Update (cpujul2025) - Linux

Oracle MySQL Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

PT-2025-29545 · Wepresent · Wepresent Wipg-1000

Name of the Vulnerable Software and Affected Versions: WePresent WiPG-1000 versions prior to 2.2.3.0 Description: An unauthenticated command injection issue exists due to improper input handling in the /cgi-bin/rdfs.cgi endpoint. The Client parameter is not sanitized before being passed to a syst...

PT-2025-29656 · Oracle +1 · Mysql Server

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 9.0.0 through 9.3.0 Description: A vulnerability exists in the MySQL Server product of Oracle MySQL component: Server: Security: LDAP Auth. This difficult-to-exploit issue allows a high-privileged attacker with network...

PT-2025-29642 · Oracle +1 · Mysql Server

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 9.0.0 through 9.1.0 Description: A vulnerability exists in the Oracle MySQL Server component: Server: Optimizer. This issue allows a high-privileged attacker with network access via multiple protocols to compromise MySQL...

PT-2025-29568 · Unknown · Beiyuouo Arxiv-Daily

Name of the Vulnerable Software and Affected Versions: beiyuouo arxiv-daily versions through 2025-05-06 commit fad168770b0e68aef3e5acfa16bb2e7a7765d687 Description: A directory traversal vulnerability exists when parsing the topic.yml file in the generation logic within daily arxiv.py...

PT-2025-29549 · Winaxe · Winaxe Ftp Client

Name of the Vulnerable Software and Affected Versions: WinaXe FTP Client version 7.7 Description: A buffer overflow exists in the FTP banner parsing functionality within the WCMDPA10.dll component. When the client connects to a remote FTP server and receives an overly long '220 Server Ready'...

PT-2025-29686

Name of the Vulnerable Software and Affected Versions Vim versions prior to 9.1.1551 Description Vim, an open-source command-line text editor, contains a path traversal issue within its zip.vim plugin. This issue allows overwriting of arbitrary files when opening specially crafted zip archives...

PT-2025-29573 · Dassault Systèmes · Solidworks Edrawings +1

Name of the Vulnerable Software and Affected Versions: SOLIDWORKS eDrawings versions prior to SOLIDWORKS Desktop 2025 Description: A use of uninitialized variable issue exists in the JT file reading procedure. This could allow an attacker to execute arbitrary code when opening a specially crafted...

PT-2025-29685 · Github · Github Enterprise Server

Name of the Vulnerable Software and Affected Versions: GitHub Enterprise Server versions prior to 3.18 GitHub Enterprise Server versions 3.14.15 GitHub Enterprise Server versions 3.15.10 GitHub Enterprise Server versions 3.16.6 GitHub Enterprise Server versions 3.17.3 Description: An incorrect...

PT-2025-29536

Name of the Vulnerable Software and Affected Versions Alone – Charity Multipurpose Non-profit WordPress Theme versions 7.8.3 and earlier Description The Alone WordPress theme contains a critical vulnerability that allows unauthenticated attackers to upload malicious files, potentially leading to...

PT-2025-29541 · Unknown · Crosseditor4

Name of the Vulnerable Software and Affected Versions: CrossEditor4 versions 4.0.0.01 through 4.6.0.23 Description: The improper default setting in the API modules of CrossEditor4 potentially allows Stored Cross-Site Scripting XSS. Stored XSS is a type of security issue where malicious scripts ar...

PT-2025-29535

Name of the Vulnerable Software and Affected Versions Alone – Charity Multipurpose Non-profit WordPress Theme versions up to and including 7.8.3 Description The Alone – Charity Multipurpose Non-profit WordPress Theme is vulnerable to arbitrary file deletion due to insufficient file path validatio...