PT-2025-12217 · Ollama · Ollama

Name of the Vulnerable Software and Affected Versions: ollama/ollama version v0.3.3 Description: A divide by zero issue exists when importing GGUF models with a crafted type for block count in the Modelfile, leading to a denial of service DoS condition that causes the server to crash...

PT-2025-12329 · WordPress · File Away

Name of the Vulnerable Software and Affected Versions: File Away plugin for WordPress versions up to, and including, 3.9.9.0.1 Description: The issue is related to unauthorized access of data due to a missing capability check on the ajax function. This allows unauthenticated attackers to read the...

PT-2025-12169 · Unknown · Anything-Llm

Name of the Vulnerable Software and Affected Versions: mintplex-labs/anything-llm version 1.5.5 Description: The issue allows unauthorized users to access sensitive system settings through the "/setup-complete" API endpoint. The data returned by the currentSettings function includes sensitive...

PT-2025-12322 · Unknown · Langgenius/Dify

Name of the Vulnerable Software and Affected Versions: langgenius/dify version 0.10.1 Description: A weakness in the pseudo-random number generator PRNG used for generating password reset codes allows an attacker to take over any account, including administrator accounts. The application utilizes...

PT-2025-12105 · Lunary · Lunary

Name of the Vulnerable Software and Affected Versions: lunary-ai/lunary versions prior to 1.6.3 Description: The application allows the creation of evaluators without enforcing a unique constraint on the combination of projectId and slug. This enables an attacker to overwrite existing data by...

PT-2025-12045

Name of the Vulnerable Software and Affected Versions h2oai/h2o-3 version 3.46.0.1 Description A denial of service DoS attack can be performed by exploiting a vulnerability in the "/3/ParseSetup" endpoint. This endpoint applies a user-specified regular expression to a user-controllable string,...

PT-2025-11964 · Applio +1 · Applio +1

Name of the Vulnerable Software and Affected Versions: Applio versions 3.2.8-bugfix and prior Description: Applio is a voice conversion tool vulnerable to unsafe deserialization in the model information.py file. The model name variable in model information.py accepts user-supplied input, such as ...

PT-2025-11979 · Applio · Applio

Name of the Vulnerable Software and Affected Versions: Applio versions 3.2.7 and prior Description: Applio is a voice conversion tool. The issue allows for server-side request forgery SSRF in model download.py, which can be leveraged to probe for other vulnerabilities on the server itself or on...

PT-2025-11978 · Applio · Applio

Name of the Vulnerable Software and Affected Versions: Applio versions 3.2.7 and prior Description: Applio is a voice conversion tool that is vulnerable to server-side request forgery SSRF and file write in model download.py. The blind SSRF allows for sending requests on behalf of the Applio serv...

PT-2025-23530 · Tenda · Tenda Ac6

Name of the Vulnerable Software and Affected Versions: Tenda AC6 version 15.03.05.16 Description: The issue is a stack overflow that occurs via the time parameter in the setSmartPowerManagement function. This allows for potential exploitation. No information is provided about the estimated number...

PT-2025-26895 · Unknown · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a...

PT-2025-11596 · Vestel · Vestel Evc04 Configuration Interface

Name of the Vulnerable Software and Affected Versions: Vestel EVC04 Configuration Interface versions prior to 18.03.2025 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection...

PT-2025-16930 · Pear · Pear Http Request2

Name of the Vulnerable Software and Affected Versions: PEAR HTTP Request2 versions prior to 2.7.0 Description: The issue concerns multiple files in the tests directory of PEAR HTTP Request2, specifically tests/ network/getparameters.php and tests/ network/postparameters.php, which reflect any GET...

PT-2025-11328

Name of the Vulnerable Software and Affected Versions tj-actions changed-files versions prior to 46.0.1 Description A supply chain compromise occurred in the tj-actions/changed-files GitHub Action, affecting over 23,000 repositories. A threat actor compromised a bot account and injected malicious...

CVE-2025-25928

creationtimestamp| type| source ---|---|--- 2025-03-12 17:48:27+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114150716555157480 2025-03-17 19:47:59+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7846...

PT-2025-11048 · Json · Json

Name of the Vulnerable Software and Affected Versions: JSON versions 2.10.0 through 2.10.1 Description: A specially crafted document could cause an out of bound read, most likely resulting in a crash. Recommendations: For versions 2.10.0 and 2.10.1, update to version 2.10.2 to resolve the issue. ...

PT-2025-11694

Name of the Vulnerable Software and Affected Versions reviewdog/action-setup version 1 Description The GitHub Action reviewdog/action-setup was compromised between March 11, 2025, 18:42 and 20:31 UTC with malicious code. This code dumps exposed secrets to GitHub Actions Workflow Logs. Actions tha...

PT-2025-10863 · Adobe · Substance3D - Sampler

Name of the Vulnerable Software and Affected Versions: Substance3D - Sampler versions 4.5.2 and earlier Description: The issue is an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user...

PT-2025-10805 · Microsoft · Windows Routing/Remote Access Service +1

Name of the Vulnerable Software and Affected Versions: Windows Routing and Remote Access Service RRAS versions prior to the fixed version Description: The issue is related to a heap-based buffer overflow in the Windows Routing and Remote Access Service RRAS, which allows an unauthorized attacker ...

PT-2025-10923 · Unknown · Shanebp Bp Email Assign Templates

Name of the Vulnerable Software and Affected Versions: shanebp BP Email Assign Templates versions n/a through 1.6 Description: The issue is related to improper neutralization of input during web page generation, which allows for Stored Cross-site Scripting XSS. This means that an attacker can...