PT-2025-30381 · Unknown · Region Pay App For Android

Name of the Vulnerable Software and Affected Versions: region PAY App for Android versions prior to 1.5.28 Description: A sensitive information disclosure issue exists due to the insertion of confidential information into log files. If exploited, sensitive user information may be exposed to an...

PT-2025-30397 · Rolantis Information Technologies · Agentis

Name of the Vulnerable Software and Affected Versions: Rolantis Information Technologies Agentis versions prior to 4.32 Description: The software contains an Improper Neutralization of Special Elements used in an SQL Command vulnerability, which allows for SQL Injection. Recommendations: Update...

PT-2025-30507 · Poly · Poly Clariti Manager

Name of the Vulnerable Software and Affected Versions: Poly Clariti Manager versions prior to 10.12.1 Description: A security issue has been identified that involves the deserialization of untrusted data without proper validation. Recommendations: Update Poly Clariti Manager to version 10.12.1 or...

PT-2025-30498 · Poly · Poly Clariti Manager

Name of the Vulnerable Software and Affected Versions: Poly Clariti Manager versions prior to 10.12.2 Description: A potential command injection issue has been identified. The issue could allow a privileged user to submit arbitrary input. Recommendations: Update Poly Clariti Manager to version...

PT-2025-30499 · Poly · Poly Clariti Manager

Name of the Vulnerable Software and Affected Versions: Poly Clariti Manager versions prior to 10.12.1 Description: A security issue has been identified in Poly Clariti Manager that may allow the use and retrieval of the default password. Recommendations: Update Poly Clariti Manager to version...

PT-2025-30482

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 141 Firefox ESR versions prior to 115.26 Firefox ESR versions prior to 128.13 Firefox ESR versions prior to 140.1 Thunderbird versions prior to 141 Thunderbird versions prior to 128.13 Thunderbird versions prior to...

PT-2025-30270 · Sophos · Sophos Firewall

Name of the Vulnerable Software and Affected Versions: Sophos Firewall versions prior to 21.0 MR1 20.0.1 Description: A business logic vulnerability exists in the Up2Date component of Sophos Firewall. This vulnerability could allow attackers to control the firewall’s DNS environment, potentially...

PT-2025-30263 · Akbim · Akbim Software Online Exam Registration

Name of the Vulnerable Software and Affected Versions: Akbim Software Online Exam Registration versions prior to 14.03.2025 Description: An authorization bypass exists due to user-controlled keys and exploitation of trusted identifiers in Akbim Software Online Exam Registration. Recommendations:...

PT-2025-30250 · Librenms · Librenms

Name of the Vulnerable Software and Affected Versions: versions prior to 2.3 Description: A high privileged remote attacker can execute arbitrary system commands via POST requests in the diagnostic action due to improper neutralization of special elements used in an OS command. Recommendations:...

PT-2025-30347 · Hax Cms +1 · Hax Cms +1

Name of the Vulnerable Software and Affected Versions: HAXiam versions 11.0.4 and below Description: HAXiam is a packaging wrapper for HAXcms which allows anyone to spawn their own microsite management platform. The application returns a 200 response when requesting the data of a valid user and a...

PT-2025-30311 · Drupal +1 · Drupal +1

Name of the Vulnerable Software and Affected Versions: Drupal Real-time SEO for Drupal versions 2.0.0 through 2.1.9 Description: The Real-time SEO for Drupal module contains a flaw due to improper neutralization of input during web page generation, which allows for Cross-Site Scripting XSS...

PT-2025-30195 · Idnow · Idnow App

Name of the Vulnerable Software and Affected Versions: IDnow App versions up to 9.6.0 Description: A problematic issue has been identified in the IDnow App for Android, potentially leading to improper export of Android application components due to manipulation of the AndroidManifest.xml file...

PT-2025-30214 · Logpoint · Logpoint

Name of the Vulnerable Software and Affected Versions: Logpoint versions prior to 7.6.0 Description: An issue exists in Logpoint that allows an attacker with operator privileges to exploit a path traversal vulnerability when creating a Layout Template. Successful exploitation can lead to remote...

PT-2025-30121 · WordPress · Themerex Addons

Name of the Vulnerable Software and Affected Versions: ThemeREX Addons versions prior to 2.35.1.2 Description: The ThemeREX Addons plugin for WordPress is susceptible to Stored Cross-Site Scripting through SVG File uploads. Insufficient input sanitization and output escaping in the plugin’s SVG...

CVE-2025-54079 WeGIA vulnerable to SQL Injection (Blind Time-Based) in endpoint 'Profile_Atendido.php' parameter 'idatendido'

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A SQL Injection vulnerability was identified in versions prior to 3.4.6 in the endpoint /html/atendido/ProfileAtendido.php, in the idatendido parameter. This vulnerability allow an authorized...

CVE-2025-54073

CVE-2025-54073 affects the mcp-package-docs MCP Server. The issue is a command-injection vulnerability caused by unsanitized input used in child_process.exec, enabling shell metacharacter injection and potential remote code execution under the server process’s privileges. A fix was committed in c...

CVE-2025-3740 School Management System for Wordpress <= 93.1.0 - Authenticated (Subscriber+) Local File Inclusion to Privilege Escalation via Password Update

The School Management System for Wordpress plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 93.1.0 via the 'page' parameter. This makes it possible for authenticated attackers, with Subscriber-level access and above, to include and execute arbitrary...

PT-2025-30047 · Xuxueli · Xxl-Job

Name of the Vulnerable Software and Affected Versions: xxl-job versions up to 3.1.1 Description: A critical issue exists in Xuxueli xxl-job. The commandJobHandler function within the srcmainjavacomxxljobexecutorservicejobhandlerSampleXxlJob.java file is susceptible to OS command injection. This...

PT-2025-30046 · Opencti · Opencti

Name of the Vulnerable Software and Affected Versions: OpenCTI versions prior to 6.6.6 Description: OpenCTI is a platform for managing cyber threat intelligence knowledge and observables. An IDOR vulnerability exists in the GraphQL NotificationLineNotificationMarkReadMutation and...

PT-2025-30039 · Unknown · Gnuboard G6

Name of the Vulnerable Software and Affected Versions: Gnuboard g6 versions up to 6.0.10 Description: A problematic issue has been identified in Gnuboard g6. The issue affects processing of the /bbs/scrap popin update/qa/ file within the Post Reply Handler component, leading to cross site...