PT-2025-28784 · Adobe · Framemaker

Name of the Vulnerable Software and Affected Versions: Adobe Framemaker versions 2020.8 through 2022.6 Description: Adobe Framemaker versions 2020.8 through 2022.6 are susceptible to an out-of-bounds write issue, potentially leading to arbitrary code execution with current user privileges...

PT-2025-28373 · Siemens · Sicam Toolbox Ii

Name of the Vulnerable Software and Affected Versions: SICAM TOOLBOX II versions prior to V07.11 Description: A issue has been identified in the application where it fails to compare the common name of a device's certificate with an expected value when establishing an HTTPS connection to the TLS...

PT-2025-28324 · WordPress · Essential Addons For Elementor

Name of the Vulnerable Software and Affected Versions: The Essential Addons for Elementor – Popular Elementor Templates and Widgets plugin for WordPress versions up to, and including, 6.1.19 Description: The issue is related to Stored Cross-Site Scripting due to insufficient input sanitization an...

PT-2025-28765

Name of the Vulnerable Software and Affected Versions Adobe Experience Manager MS versions 6.5.23.0 and earlier Adobe Experience Manager AEM Forms on JEE affected versions not specified Description The software is susceptible to a Deserialization of Untrusted Data issue. Successful exploitation o...

PT-2025-28415 · Unknown · Quiter Gateway

Name of the Vulnerable Software and Affected Versions: Quiter Gateway versions prior to 4.7.0 Description: The issue is a Reflected Cross-site Scripting XSS vulnerability that allows an attacker to execute JavaScript code in the victim's browser. This is achieved by sending a malicious URL throug...

PT-2025-28798 · Adobe · Incopy

Name of the Vulnerable Software and Affected Versions: InCopy versions 20.3 and 19.5.3 and earlier Description: InCopy is affected by an Access of Uninitialized Pointer issue that may lead to arbitrary code execution within the current user's context. Successful exploitation requires a user to op...

PT-2025-28775 · Adobe · Framemaker

Name of the Vulnerable Software and Affected Versions: Adobe Framemaker versions 2020.8, 2022.6 and earlier Description: The issue is a Heap-based Buffer Overflow that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction...

PT-2025-28409 · Unknown · Quiter Gateway

Name of the Vulnerable Software and Affected Versions: Quiter Gateway versions prior to 4.7.0 Description: The issue allows an attacker to retrieve, create, update, and delete databases through the id factura field in the "/FacturaE/listado facturas ficha.jsp" endpoint. This enables attackers to...

PT-2025-28396 · Sinec Nms · Sinec Nms

Name of the Vulnerable Software and Affected Versions: SINEC NMS versions prior to V4.0 Description: A security issue has been identified in the affected application, where it does not properly validate file paths when extracting uploaded ZIP files. This could allow an attacker to write arbitrary...

PT-2025-28485 · Ivanti · Ivanti Connect Secure

Name of the Vulnerable Software and Affected Versions: Ivanti Connect Secure versions prior to 22.7R2.8 Description: The issue allows a local authenticated attacker to obtain sensitive information that has been inserted into a log file. Recommendations: For versions prior to 22.7R2.8, update to...

PT-2025-28397 · Siemens · Solid Edge

Name of the Vulnerable Software and Affected Versions: Solid Edge SE2025 versions prior to V225.0 Update 5 Description: A vulnerability has been identified in the affected applications, which contain an out of bounds read past the end of an allocated structure while parsing specially crafted PAR...

PT-2025-28331 · WordPress · The Guest Support

Name of the Vulnerable Software and Affected Versions: The Guest Support – Complete customer support ticket system for WordPress plugin versions prior to 1.2.3 Description: The issue is related to a missing capability check on the deleteMassTickets function, allowing unauthenticated attackers to...

PT-2025-28787 · Adobe · Illustrator 29.5.1 +1

Name of the Vulnerable Software and Affected Versions: Illustrator versions 28.7.6 and earlier Illustrator version 29.5.1 and earlier Description: Illustrator versions 28.7.6 and earlier, and version 29.5.1 and earlier, are affected by an out-of-bounds read issue that may result in the disclosure...

PT-2025-28806 · Trend Micro · Trend Micro Security

Name of the Vulnerable Software and Affected Versions: Trend Micro Security version 17.8 Description: Trend Micro Security 17.8 Consumer contains a link following local privilege escalation issue. A local attacker could unintentionally delete privileged Trend Micro files, including the software...

Siemens TIA Administrator

SUMMARY Siemens TIA Administrator before V3.0.6 contains multiple vulnerabilities which could allow an attacker to escalate privilege or exceute arbitrary code during installations. Siemens has released a new version for TIA Administrator and recommends to update to the latest version. 2...

Siemens Solid Edge

SUMMARY Solid Edge is affected by multiple file parsing vulnerabilities that could be triggered when the application reads specially crafted files in various formats such as PAR or CFG format. This could allow an attacker to crash the application or execute arbitrary code. Siemens has released a...

PT-2025-28362 · WordPress · Woodmart

Name of the Vulnerable Software and Affected Versions: Woodmart theme for WordPress versions up to and including 8.2.3 Description: The issue arises from the software allowing users to execute an action that does not properly validate a value before running do shortcode through the woodmart get...

PT-2025-28221 · Wegia · Wegia

Name of the Vulnerable Software and Affected Versions: WeGIA versions prior to 3.3.0 Description: The WeGIA server has a vulnerability that allows excessively long HTTP GET requests to a specific URL, resulting from the lack of validation for the length of the fid parameter. This issue can cause...

PT-2025-28185 · Twilio +1 · Twilio Api +1

Name of the Vulnerable Software and Affected Versions: Paxton10 versions prior to 4.6 SR6 Description: A vulnerability has been discovered in the firmware of Paxton10, where the firmware file, rootfs.tar.gz, contains hard-coded credentials for the Twilio API. A remote attacker who obtains a copy ...

PT-2025-28243 · Mediawiki · Mediawiki

Name of the Vulnerable Software and Affected Versions: Mediawiki - CheckUser extension versions 1.39.0 through 1.39.12 Mediawiki - CheckUser extension versions 1.42.0 through 1.42.6 Mediawiki - CheckUser extension versions 1.43.0 through 1.43.1 Description: The CheckUser extension’s...