PT-2025-27918 · Unknown · Cmoreira Testimonials Showcase

Name of the Vulnerable Software and Affected Versions: cmoreira Testimonials Showcase versions 1.9.16 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential...

PT-2025-27930 · Woocommerce · Paytiko For Woocommerce

Name of the Vulnerable Software and Affected Versions: Paytiko for WooCommerce versions 1.3.14 and earlier Description: The issue affects the Paytiko - Payment Orchestration Platform Paytiko for WooCommerce, allowing exploitation due to incorrectly configured access control security levels. This ...

PT-2025-27876 · Unknown · Creedally Bulk Featured Image

Name of the Vulnerable Software and Affected Versions: CreedAlly Bulk Featured Image versions 1.2.1 and earlier Description: The issue allows uploading a Web Shell to a web server due to unrestricted file upload with dangerous file types. Recommendations: For CreedAlly Bulk Featured Image version...

PT-2025-27935 · Unknown · Eyecix Jobsearch

Name of the Vulnerable Software and Affected Versions: eyecix JobSearch versions n/a through 2.9.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to inje...

PT-2025-27902 · Webemailprotector · Email Address Security

Name of the Vulnerable Software and Affected Versions: Email Address Security by WebEmailProtector versions n/a through 3.3.6 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This means that ...

PT-2025-27817 · Abb · Abb Rmc-100 +1

Name of the Vulnerable Software and Affected Versions: ABB RMC-100 versions 2105457-043 through 2105457-045 ABB RMC-100 LITE versions 2106229-015 through 2106229-016 Description: A Stack-based Buffer Overflow issue exists when the REST interface is enabled and an attacker gains access to the...

PT-2025-27804 · Tenda · Tenda Ac6

Name of the Vulnerable Software and Affected Versions: Tenda AC6 version 15.03.05.16 multi Description: The issue is related to a Buffer Overflow in the fromSetRouteStatic function via the list parameter. This can be exploited by sending a malformed route list parameter. Recommendations: For Tend...

PT-2025-27823

Name of the Vulnerable Software and Affected Versions: BerriAI litellm version 1.65.4 Description: The issue is a SQL injection vulnerability that can be exploited via the "/key/block" endpoint. This allows an attacker to inject malicious SQL code, potentially leading to unauthorized access or...

PT-2025-27783 · Endress+Hauser · Endress+Hauser Meac300-Fnade4

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue allows an attacker to trick a valid, logged-in user into submitting a web request that they did not intend, utilizing the victim's browser's saved authorization to execute the...

PT-2025-27818 · Abb · Abb Rmc-100 +1

Name of the Vulnerable Software and Affected Versions: ABB RMC-100 versions 2105457-043 through 2105457-045 ABB RMC-100 LITE versions 2106229-015 through 2106229-016 Description: The issue is related to the use of a hard-coded cryptographic key. When the REST interface is enabled and an attacker...

PT-2025-27638 · Homebox · Homebox

Name of the Vulnerable Software and Affected Versions: HomeBox versions prior to 0.20.1 Description: The issue is related to a missing authorization check in the API endpoints responsible for updating and deleting inventory item attachments. This flaw allows authenticated users to perform...

PT-2025-27619 · Infinera · Infinera G42

Name of the Vulnerable Software and Affected Versions: Infinera G42 version R6.1.3 Description: The issue allows remote authenticated users to read and write OS files via SFTP connections. Account members of the Network Administrator profile can access the target machine via SFTP with the same...

PT-2025-27580 · Tenable · Tenable Nessus

Name of the Vulnerable Software and Affected Versions: Tenable Nessus versions prior to 10.8.5 Description: A security issue was discovered where a non-administrative user could overwrite arbitrary local system files with log content at SYSTEM privilege on a Windows host. Recommendations: For...

PT-2025-27571 · Restdb · Codehooks-Mcp-Server

Name of the Vulnerable Software and Affected Versions: RestDB's Codehooks.io MCP Server versions prior to 0.2.2 Description: The issue is related to a command injection vulnerability in the MCP Server tools definition and implementation. This could result in a user-initiated remote command...

PT-2025-27500 · Sunshine · Sunshine

Name of the Vulnerable Software and Affected Versions: Sunshine versions prior to 2025.628.4510 Description: The issue is related to a lack of protection against Cross-Site Request Forgery CSRF attacks in the web UI of Sunshine. This allows an attacker to create a malicious web page that can...

PT-2025-27521 · Asr190X +3 · Asr190X +4

Name of the Vulnerable Software and Affected Versions: ASR180x versions prior to v1536 ASR190x versions prior to v1536 Falcon Linux versions prior to v1536 Kestrel versions prior to v1536 Lapwing Linux versions prior to v1536 Description: The issue is related to an Improper Resource Shutdown or...

PT-2025-27555 · Unknown · Campcodes Employee Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Employee Management System version 1.0 Description: A critical issue has been found in the system, affecting an unknown function of the file /eloginwel.php. The manipulation of the ID argument leads to SQL injection. It is possible ...

PT-2025-27531 · Zrlog · Zrlog

Name of the Vulnerable Software and Affected Versions: zrlog version 3.1.5 Description: A Server-Side Request Forgery SSRF issue was discovered in zrlog via the downloadUrl parameter. This allows for potential unauthorized access to internal resources. Recommendations: For zrlog version 3.1.5, as...

PT-2025-27520 · Asr190X +3 · Asr190X +4

Name of the Vulnerable Software and Affected Versions: ASR180x versions prior to v1536 ASR190x versions prior to v1536 Description: The issue is related to an Improper Resource Shutdown or Release, which can lead to Resource Leak Exposure. This problem is associated with the tr069 modules,...

PT-2025-27518

Name of the Vulnerable Software and Affected Versions: ASR180x versions prior to v1536 ASR190x versions prior to v1536 Falcon Linux versions prior to v1536 Kestrel versions prior to v1536 Lapwing Linux versions prior to v1536 Description: The issue is related to an Improper Resource Shutdown or...