PT-2025-20050 · Samsung · Bixby

Name of the Vulnerable Software and Affected Versions: Bixby versions prior to 2.3.74.8 Description: The issue is related to the improper handling of insufficient permission in Bixby wakeup, allowing local attackers to access sensitive data. Recommendations: For versions prior to 2.3.74.8, update...

PT-2025-20136 · Unknown · Eli'S Related Posts Footer Links/Widget

Name of the Vulnerable Software and Affected Versions: ELI's Related Posts Footer Links and Widget versions 1.2.04.20 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended...

PT-2025-20293 · Unknown · Ixon Vpn Client

Name of the Vulnerable Software and Affected Versions: IXON VPN Client versions prior to 1.4.4 Description: The issue allows Local Privilege Escalation to SYSTEM due to code execution from a configuration file that can be controlled by a low-privileged user. A race condition exists where a...

PT-2025-20125 · Code Atlantic · Code Atlantic Content Control

Name of the Vulnerable Software and Affected Versions: Code Atlantic Content Control versions n/a through 2.6.1 Description: The issue is related to improper neutralization of input during web page generation, which allows for DOM-Based XSS attacks. This means that an attacker could potentially...

PT-2025-20108 · Unknown · Testimonial Slider

Name of the Vulnerable Software and Affected Versions: GS Testimonial Slider versions 3.2.9 and earlier Description: The issue is related to an Improper Control of Generation of Code 'Code Injection' vulnerability, which allows Code Injection in GS Testimonial Slider. Recommendations: For GS...

PT-2025-20061 · Samsung · Samsung Notes

Name of the Vulnerable Software and Affected Versions: Samsung Notes versions prior to 4.4.29.23 Description: The issue is an out-of-bounds read in applying binary of text content. This allows attackers to read out-of-bounds memory. Recommendations: For versions prior to 4.4.29.23, update to...

PT-2025-20138 · Unknown · Scott Paterson Time Clock

Name of the Vulnerable Software and Affected Versions: Scott Paterson Time Clock versions 1.2.3 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This enables an attacker to inject...

PT-2025-20127 · Unknown · Wpo-Hr Ngg Smart Image Search

Name of the Vulnerable Software and Affected Versions: wpo-HR NGG Smart Image Search versions 3.3.3 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacke...

PT-2025-20222 · Unknown · The Photo Gallery – Gt3 Image Gallery & Gutenberg Block Gallery

Name of the Vulnerable Software and Affected Versions: Photo Gallery - GT3 Image Gallery & Gutenberg Block Gallery versions through 2.7.7.25 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS...

PT-2025-20104 · Pimwick · Pw Woocommerce Bulk Edit

Name of the Vulnerable Software and Affected Versions: pimwick PW WooCommerce Bulk Edit versions prior to 2.134 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows Cross Site Request Forgery. This means an attacker can trick a user into performing unintended...

PT-2025-20146 · Unknown · Karim42 Quran Multilanguage Text & Audio

Name of the Vulnerable Software and Affected Versions: karim42 Quran multilanguage Text & Audio versions n/a through 2.3.23 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks...

PT-2025-20187 · Unknown · Meks Flexible Shortcodes

Name of the Vulnerable Software and Affected Versions: Meks Flexible Shortcodes versions 1.3.6 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This enables potential attackers to...

PT-2025-20197 · Woocommerce · Awin – Advertiser Tracking For Woocommerce

Name of the Vulnerable Software and Affected Versions: Awin – Advertiser Tracking for WooCommerce versions n/a through 2.0.0 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows Cross Site Request Forgery. Recommendations: For versions n/a through 2.0.0, update ...

PT-2025-20315

Name of the Vulnerable Software and Affected Versions Rack versions prior to 2.2.14, 3.0.16, and 3.1.14 Description Rack is a modular Ruby web server interface. The Rack::QueryParser parses query strings and application/x-www-form-urlencoded bodies into Ruby data structures without imposing any...

PT-2025-20180 · Unknown · Easy Connect

Name of the Vulnerable Software and Affected Versions: EasyMe Connect versions 3.0.3 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the software, allowing unauthorized actions to be performed on behalf of a user. Recommendations: For versions 3.0.3 and earlier, update to...

PT-2025-20216 · Liveagent · Liveagent

Name of the Vulnerable Software and Affected Versions: LiveAgent versions n/a through 4.4.7 Description: A Cross-Site Request Forgery CSRF issue affects the LiveAgent software. This issue allows for Cross Site Request Forgery. Recommendations: For versions n/a through 4.4.7, update to a version...

PT-2025-20073 · Lemeconsultoria · Galera.App

Name of the Vulnerable Software and Affected Versions: lemeconsultoria HCM galera.app version 4.58.0 Description: The issue allows an attacker to execute arbitrary code via the Data export and filters functions. This is due to a SQL Injection vulnerability. Recommendations: For version 4.58.0,...

PT-2025-20230 · Unknown · Ultimate Member

Name of the Vulnerable Software and Affected Versions: Ultimate Member versions through 2.10.3 Description: The issue is related to an Improper Control of Generation of Code, also known as 'Code Injection'. This allows for Code Injection in Ultimate Member. Recommendations: For versions through...

CVE-2025-46735

Terraform WinDNS Provider allows users to manage their Windows DNS server resources through Terraform. A security issue has been found in Terraform WinDNS Provider before version 1.0.5. The windnsrecord resource did not sanitize the input variables. This could lead to authenticated command...

Terraform WinDNS Provider improperly sanitizes input variables in `windns_record`

Impact: A security issue has been found in terraform-provider-windns before version 1.0.5. The windnsrecord resource did not santize the input variables. This can lead to authenticated command injection in the underlyding powershell command prompt. Patches: 83ef736 fix: better input validation...