PT-2026-7033

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.22.0 Description FreeRDP, a Remote Desktop Protocol implementation, contains a flaw where the video timer component may send client notifications after the control channel has been closed. This action can lead to a...

PT-2025-54450

Name of the Vulnerable Software and Affected Versions osuthorpe Easy Social versions through 1.3 Description A flaw exists in osuthorpe Easy Social that allows for Reflected Cross-site Scripting XSS. This occurs due to improper neutralization of input during web page generation. The vulnerability...

PT-2025-53869

Name of the Vulnerable Software and Affected Versions SimpleCalendar versions through 3.5.9 Description An authorization bypass exists due to user-controlled key vulnerability in Google Calendar Events. This allows exploitation of incorrectly configured access control security levels...

PT-2025-53892

Name of the Vulnerable Software and Affected Versions Themebeez Toolkit versions through 1.3.5 Description A missing authorization flaw exists in Themebeez Toolkit, allowing exploitation of incorrectly configured access control security levels. Recommendations Update Themebeez Toolkit to a versio...

PT-2025-54174

Name of the Vulnerable Software and Affected Versions sunhailin12315 product-review 商品评价系统 versions up to 91ead6890b4065bb45b7602d0d73348e75cb4639 Description A security flaw exists in the sunhailin12315 product-review 商品评价系统. The issue is related to cross site scripting, which can be triggered b...

PT-2025-53747

Name of the Vulnerable Software and Affected Versions INVELITY Invelity SPS connect versions through 1.0.8 Description A flaw exists in INVELITY Invelity SPS connect that allows for Reflected Cross-Site Scripting XSS. This occurs due to improper neutralization of input during web page generation...

PT-2025-53441

Name of the Vulnerable Software and Affected Versions Gitea versions prior to 1.21.8 Description The software reveals user login times due to allowing sorting by last login time in the explore/users section. Recommendations Update to version 1.21.8 or later...

PT-2025-53402

Name of the Vulnerable Software and Affected Versions Aidango versions prior to 2.144.4 Description Aidango is susceptible to a Cross-Site Scripting XSS issue due to improper neutralization of input during web page generation. XSS occurs when an application includes malicious code in a web page...

PT-2025-53410

Name of the Vulnerable Software and Affected Versions UTT 进取 512W versions through 1.7.7-171114 Description A flaw exists in UTT 进取 512W that allows for remote buffer overflow. The issue is related to the strcpy function within the /goform/ConfigExceptMSN file. Manipulation of the remark argument...

PT-2025-53078

Name of the Vulnerable Software and Affected Versions bdthemes Prime Slider – Addons For Elementor versions through 4.0.10 Description A Server-Side Request Forgery SSRF issue exists in bdthemes Prime Slider – Addons For Elementor. This allows for Server Side Request Forgery. The issue is present...

PT-2025-53383

Name of the Vulnerable Software and Affected Versions OpenOps versions prior to 0.6.11 Description The software allows for remote code execution within the Terraform block. Recommendations Update to version 0.6.11 or later...

PT-2025-53150

Name of the Vulnerable Software and Affected Versions Resoto versions through 1.0.8 Description A missing authorization issue exists in Resoto, allowing exploitation due to incorrectly configured access control security levels. Recommendations Update Resoto to a version later than 1.0.8...

PT-2025-53098

Name of the Vulnerable Software and Affected Versions Sunshine Photo Cart versions through 3.5.7.1 Description An authorization issue exists in Sunshine Photo Cart that allows exploitation of incorrectly configured access control security levels. Recommendations Update Sunshine Photo Cart to a...

PT-2025-53088

Name of the Vulnerable Software and Affected Versions WpStream versions through 4.9.5 Description A missing authorization issue exists in WpStream, allowing exploitation of incorrectly configured access control security levels. Recommendations Update WpStream to a version newer than 4.9.5...

PT-2025-53329

Name of the Vulnerable Software and Affected Versions FaceSentry version 6.4.8 Description FaceSentry 6.4.8 has a remote command injection issue in the pingTest.php and tcpPortTest.php scripts. An attacker with authentication can inject and execute arbitrary shell commands with root privileges...

PT-2025-52840

Name of the Vulnerable Software and Affected Versions PMB version 7.4.6 Description The software contains a SQL injection issue in the storage parameter of the ''ajax.php'' endpoint. This allows remote attackers to manipulate database queries. The unsanitized id parameter is exploitable by...

PT-2025-52523

Name of the Vulnerable Software and Affected Versions Dotclear version 2.25.3 Description Dotclear version 2.25.3 contains a remote code execution issue. Authenticated attackers can upload malicious PHP files with a .phar extension through the blog post creation interface. Uploading files...

CVE-2025-40311 affecting package kernel for versions less than 6.6.117.1-1

CVE-2025-40311 affecting package kernel for versions less than 6.6.117.1-1. An upgraded version of the package is available that resolves this issue...

PT-2025-54487

Name of the Vulnerable Software and Affected Versions macOS versions prior to Tahoe 26.2 Description A permissions issue existed where an application could potentially access protected files within an App Sandbox container. This issue was addressed with additional restrictions. Recommendations...

PT-2025-50974

Name of the Vulnerable Software and Affected Versions Atcom 100M IP Phones versions 2.7.x.x Description The software contains an authenticated command injection issue in the web configuration CGI script. This allows attackers to execute arbitrary system commands. The cmd parameter within the 'web...