PT-2025-4485 · Optimizely · Episerver.Cms.Core

Name of the Vulnerable Software and Affected Versions: Optimizely EPiServer.CMS.Core versions prior to 12.32.0 Description: A medium-severity issue exists in the CMS, where the application does not properly validate uploaded files. This allows the upload of potentially malicious file types,...

CVE-2024-13129

CVE-2024-13129 affects Roxy-WI up to version 8.1.3. The vulnerability resides in action_service (file app/modules/roxywi/roxy.py): manipulating the action/service argument enables operating system command injection. The issue can be exploited remotely and publicly disclosed exploits exist. Mitiga...

CVE-2025-21610 Trix allows Cross-site Scripting via `javascript:` url in a link

Trix is a what-you-see-is-what-you-get rich text editor for everyday writing. Versions prior to 2.1.12 are vulnerable to cross-site scripting when pasting malicious code in the link field. An attacker could trick the user to copy&paste a malicious javascript: URL as a link that would execute...

PT-2025-1549 · Unknown · Porto Theme - Functionality

Name of the Vulnerable Software and Affected Versions: Porto Theme - Functionality versions prior to 2.12.1 Description: The issue is related to a missing authorization vulnerability in Porto Theme - Functionality, which allows exploiting incorrectly configured access control security levels...

PT-2025-3211 · WordPress · Leap13 Premium Blocks

Name of the Vulnerable Software and Affected Versions: Leap13 Premium Blocks – Gutenberg Blocks for WordPress versions through 2.1.42 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This...

Race Condition

Overview amici is an Advanced multi-language Interface to CVODES and IDAS Affected versions of this package are vulnerable to Race Condition due to the use of shared static variables in multi-threaded contexts. Exploiting this vulnerability is possible by triggering concurrent executions, leading...

PT-2025-36285

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.16.0-862.14.0.6 Description A use-after-free issue exists in the Linux kernel's fs/buffer subsystem when calling the bh read helper function. The issue occurs during NTFS3 filesystem mounting and involves a...

CVE-2024-56800

Firecrawl is a web scraper that allows users to extract the content of a webpage for a large language model. Versions prior to 1.1.1 contain a server-side request forgery SSRF vulnerability. The scraping engine could be exploited by crafting a malicious site that redirects to a local IP address...

Authorization Bypass Through User-Controlled Key

Overview nilsteampassnet/teampass is a password manager. Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key due to improper handling of user session identifiers through the users.queries.php component. An attacker can escalate privileges and perfo...

Missing Authorization

Overview letta is a Create LLM agents with long-term memory and custom tools Affected versions of this package are vulnerable to Missing Authorization on the /users endpoint, which does not check for authorization before returning data from the getallusers function. Remediation Upgrade letta to...

Arbitrary Code Injection

Overview Affected versions of this package are vulnerable to Arbitrary Code Injection due to an improper parsing of the TypeOne FontBBox. This is due to improper sanitization of the bbox values, which could lead to inconsistencies in font metrics or unexpected behavior. Remediation Upgrade...

Arbitrary Code Injection

Overview Affected versions of this package are vulnerable to Arbitrary Code Injection due to an improper parsing of the TypeOne FontBBox. This is due to improper sanitization of the bbox values, which could lead to inconsistencies in font metrics or unexpected behavior. Remediation Upgrade...

Authorization Bypass Through User-Controlled Key

Overview Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key via the id parameter in Oqtane.Controllers.UserController. Remediation Upgrade Oqtane.Framework to version 6.0.1 or higher. References - GitHub Commit - GitHub PR - Medium Blog Credit:...

PT-2024-18960

Name of the Vulnerable Software and Affected Versions spatie/browsershot versions prior to 5.0.3 Description The issue is related to improper input validation due to incorrect URL validation through the setUrl method. An attacker can exploit this by utilizing view-source:file://, allowing for...

PT-2024-36796 · Unknown +1 · Vaultwarden +1

Name of the Vulnerable Software and Affected Versions: vaultwarden versions 1.32.6 and earlier Description: vaultwarden, an unofficial Bitwarden compatible server written in Rust, is susceptible to a manipulation issue affecting group management. An attacker with a user account on the server,...

PT-2024-36801 · Unknown · Grist-Core

Name of the Vulnerable Software and Affected Versions: grist-core versions prior to 1.3.2 Description: The issue arises when a user visits a malicious document and clicks on a link in a HyperLink cell using a control modifier, such as Ctrl+click. This could lead to account compromise, as the link...

PT-2024-36793 · Stardust · Stardust

Name of the Vulnerable Software and Affected Versions: Stardust versions prior to 12/20/24 Description: The issue affects Stardust, a platform for streaming isolated desktop containers. It allows inter container communication ICC to remain enabled, potentially granting users within one container...

Arbitrary File Upload

Overview Affected versions of this package are vulnerable to Arbitrary File Upload where an attacker can use different extension to bypass the upload filter. PoC php " document.getElementById"cmd".focus; Remediation Upgrade cockpit-hq/cockpit to version 2.4.1 or higher. References - GitHub Commit...

Improper Input Validation

Overview spatie/browsershot is a library for converting a webpage to an image or pdf using headless Chrome. Affected versions of this package are vulnerable to Improper Input Validation due to improper URL validation in the setUrl method. An attacker can exploit this vulnerability by utilizing...

Arbitrary Code Injection

Overview Affected versions of this package are vulnerable to Arbitrary Code Injection via the remember method of the RemembersQueries trait. An attacker can execute arbitrary code by invoking any function or static method where the callable has no parameters or lacks strict parameter types. PoC...