PT-2025-27141 · Unknown · Favethemes Homey

Name of the Vulnerable Software and Affected Versions: favethemes Homey versions n/a through 2.4.5 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. Recommendations:...

PT-2025-27099 · WordPress · Focuxtheme Wpkit For Elementor

Name of the Vulnerable Software and Affected Versions: FocuxTheme WPKit For Elementor versions 1.1.0 and earlier Description: The issue is related to a Missing Authorization vulnerability that allows Privilege Escalation in FocuxTheme WPKit For Elementor. Recommendations: For FocuxTheme WPKit For...

PT-2025-27218 · Unknown · Accept Authorize.Net Payments Using Contact Form 7

Name of the Vulnerable Software and Affected Versions: Accept Authorize.NET Payments Using Contact Form 7 versions 2.5 and earlier Description: The issue allows for the retrieval of embedded sensitive data due to the insertion of sensitive information into sent data. Recommendations: For Accept...

PT-2025-27231 · Ibm · Ibm Cloud Pak System

Name of the Vulnerable Software and Affected Versions: IBM Cloud Pak System versions 2.3.3.6 through 2.3.5.0 Description: A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. This issu...

PT-2025-27201 · Unknown · Douglaskarr Podcast Feed Player Widget/Shortcode

Name of the Vulnerable Software and Affected Versions: douglaskarr Podcast Feed Player Widget and Shortcode versions 2.2.0 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This...

PT-2025-27086 · Bzotheme · Bzotheme Printxtore

Name of the Vulnerable Software and Affected Versions: BZOTheme PrintXtore versions 1.7.5 and earlier Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion', which allows PHP Local File Inclusion...

PT-2025-27162 · Unknown · Hurrytimer

Name of the Vulnerable Software and Affected Versions: HurryTimer versions through 2.13.1 Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For versions through 2.13.1, update...

PT-2025-27174 · Unknown · Hide Admin Bar From Front End

Name of the Vulnerable Software and Affected Versions: Hide Admin Bar From Front End versions 1.0.0 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. This is a type of attack where a...

PT-2025-27219 · Unknown · Pre-Publish Checklist

Name of the Vulnerable Software and Affected Versions: Pre-Publish Post Checklist versions 3.1 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For versions 3.1 a...

PT-2025-27124 · Unknown · Infility Global

Name of the Vulnerable Software and Affected Versions: Infility Global versions through 2.12.7 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. Recommendations: For versions through 2.12.7...

PT-2025-30925 · Salesforce · Tableau Server

Name of the Vulnerable Software and Affected Versions: Tableau Server versions prior to 2025.1.3 Tableau Server versions prior to 2024.2.12 Tableau Server versions prior to 2023.3.19 Description: A path traversal issue exists in Salesforce Tableau Server on Windows and Linux due to improper...

PT-2025-27009 · Canon · Canon Eos Webcam Utility Pro

Name of the Vulnerable Software and Affected Versions: Canon EOS Webcam Utility Pro for MAC OS version 2.3d 2.3.29 and earlier Description: The issue is related to improper directory permissions, which can be exploited by a malicious user with administrator access. This could potentially lead to...

PT-2025-26966 · Drupal · Drupal Paragraphs

Name of the Vulnerable Software and Affected Versions: Drupal Paragraphs table versions 2.0.0 through 2.0.4 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, in the Drupal Paragraphs table. This allows for...

Debian: Security Advisory (DLA-4229-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 8 : .NET 9.0 (RHSA-2025:8815)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:8815 advisory. .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. N...

openSUSE Security Advisory (SUSE-SU-2025:02079-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Discourse 3.5.x < 3.5.0.beta6 XSS Vulnerability

Discourse is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

PT-2025-26819 · Unknown +1 · Mountain Duck +1

Name of the Vulnerable Software and Affected Versions: Cyberduck versions prior to 9.1.7 Mountain Duck versions prior to 4.17.6 Description: The issue concerns improper handling of TLS certificate pinning for untrusted certificates, such as self-signed ones. This results in the unnecessary...

Google Chrome Security Update (stable-channel-update-for-desktop_24-2025-06) - Linux

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

Fedora: Security Advisory (FEDORA-2025-3fa66ac98b)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...