PT-2025-16399

Name of the Vulnerable Software and Affected Versions MySQL Server versions 8.0.0 through 8.0.41 MySQL Server versions 8.4.0 through 8.4.4 MySQL Server versions 9.0.0 through 9.2.0 Description A vulnerability in the MySQL Server product allows a low-privileged attacker with network access via...

PT-2025-16429

Name of the Vulnerable Software and Affected Versions MySQL Server versions 8.0.0 through 8.0.41 MySQL Server versions 8.4.0 through 8.4.4 MySQL Server versions 9.0.0 through 9.2.0 Description The issue allows a high-privileged attacker with network access via multiple protocols to compromise MyS...

PT-2025-16415

Name of the Vulnerable Software and Affected Versions MySQL Server versions 8.0.0 through 8.0.41 MySQL Server versions 8.4.0 through 8.4.4 MySQL Server versions 9.0.0 through 9.2.0 Description The issue allows a high-privileged attacker with network access via multiple protocols to compromise MyS...

PT-2025-16373 · Code-Gen · Code-Gen

Name of the Vulnerable Software and Affected Versions: code-gen versions 2.0.6 and earlier Description: The issue is related to Incorrect Access Control, where the project lacks permission control, allowing anyone to access such projects. Recommendations: For code-gen versions 2.0.6 and earlier,...

PT-2025-16353 · Mozilla +10 · Thunderbird +10

Name of the Vulnerable Software and Affected Versions: Thunderbird versions prior to 137.0.2 Thunderbird versions prior to 128.9.2 Description: The issue arises when an email contains multiple attachments with external links via the X-Mozilla-External-Attachment-URL header. In such cases, only th...

PT-2025-16245 · Mattermost · Mattermost

Name of the Vulnerable Software and Affected Versions: Mattermost versions 10.5.x through 10.5.1 Mattermost versions 9.11.x through 9.11.9 Description: The issue allows an attacker who knows the IDs of deleted files to obtain metadata of the files via bookmark creation, as the software fails to...

PT-2025-16268 · Ibm · Ibm Aspera Console

Name of the Vulnerable Software and Affected Versions: IBM Aspera Console versions 3.4.0 through 3.4.4 Description: The issue is related to the use of weaker than expected cryptographic algorithms, which could allow an attacker to decrypt highly sensitive information. Recommendations: For IBM...

PT-2025-16277 · Autogpt · Autogpt

Name of the Vulnerable Software and Affected Versions: AutoGPT versions prior to 0.6.1 Description: The issue is related to a Server-Side Request Forgery SSRF vulnerability in AutoGPT, which is caused by DNS Rebinding in the requests wrapper. This allows an attacker to bypass the validation of th...

PT-2025-16269 · Ibm · Ibm Aspera Console

Name of the Vulnerable Software and Affected Versions: IBM Aspera Console versions 3.4.0 through 3.4.4 Description: The issue could disclose sensitive information in HTTP headers, which could be used in further attacks against the system. Recommendations: For IBM Aspera Console versions 3.4.0...

PT-2025-16119 · Apple · Ios +2

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 17 iPadOS versions prior to 17 macOS versions prior to Sonoma 14 Description: A permissions issue was addressed with additional restrictions. This issue may allow an app to access sensitive user data. Recommendations: Fo...

PT-2025-16011 · Mediawiki +2 · Mediawiki +2

Name of the Vulnerable Software and Affected Versions: MediaWiki versions prior to 1.39.12 MediaWiki versions prior to 1.42.6 MediaWiki versions prior to 1.43.1 Description: The issue is related to the exposure of sensitive information to an unauthorized actor. It is associated with program files...

PT-2025-15929 · Unknown · Studi7 Qr Master

Name of the Vulnerable Software and Affected Versions: Studi7 QR Master versions 1.0.0 through 1.0.5 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting', which allows Reflected XSS. This means that an attacker can...

PT-2025-15970 · Panasonic · Panasonic Ir Control Hub

Name of the Vulnerable Software and Affected Versions: Panasonic IR Control Hub IR Blaster versions 1.17 and earlier Description: The issue allows an attacker with physical access to load unauthorized firmware onto the device. Recommendations: For versions 1.17 and earlier, update to a version...

PT-2025-15975 · Gitlab · Gitlab Ce/Ee

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 17.8.7 and earlier, versions 17.9 prior to 17.9.6, and versions 17.10 prior to 17.10.4. Description: A denial of service DoS issue exists in GitLab CE/EE. The issue occurs when oversized payloads are injected into CI...

PT-2025-15766 · WordPress · Wp-Planification

Name of the Vulnerable Software and Affected Versions: WP-Planification versions prior to 2.3.1 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker could potentially trick a user into performing unintended actions on ...

PT-2025-15708 · Shopware · Shopware

Name of the Vulnerable Software and Affected Versions: Shopware versions prior to 6.6.10.3 Shopware versions prior to 6.5.8.17 Description: The issue concerns the default settings for double-opt-in in Shopware, which allows for mass unsolicited newsletter sign-ups without confirmation...

PT-2025-15751 · Icyleaf · Icyleaf Ws Audio Player

Name of the Vulnerable Software and Affected Versions: icyleaf WS Audio Player versions 1.1.8 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. Recommendations: For versions 1.1.8 and earlier, update to a version that fixes th...

PT-2025-15807 · Czater.Pl · Czater.Pl

Name of the Vulnerable Software and Affected Versions: Czater.pl – live chat i telefon versions 1.0.0 through 1.0.5 Description: The issue is related to a Missing Authorization vulnerability, which allows Cross Site Request Forgery. This means that an attacker can perform actions on behalf of...

PT-2025-15755

Name of the Vulnerable Software and Affected Versions: Koa versions prior to 2.16.1 Koa versions prior to 3.0.0-alpha.5 Description: The issue arises when passing untrusted user input to ctx.redirect, which can execute JavaScript code on the user's device, even after sanitizing the input...

PT-2025-15668 · Tiki · Tiki

Name of the Vulnerable Software and Affected Versions: Tiki versions prior to 28.3 Tiki versions prior to 21.12 Tiki versions prior to 24.8 Tiki versions prior to 27.2 Description: The issue concerns the wikiplugin includetpl in lib/wiki-plugins/wikiplugin includetpl.php in Tiki, which mishandles...