PT-2025-33956 · Unknown · Simple-Login-Log

Name of the Vulnerable Software and Affected Versions: Simple Login Log versions through 1.1.3 Description: Deserialization of untrusted data in Simple Login Log allows object injection. Recommendations: Update Simple Login Log to a version later than 1.1.3...

PT-2025-33822 · Undefined · Undefined

🟠 Astro, Server-Side Request Forgery SSRF, CVE-2024-56870 Medium https://t.co/rxOf3RNWtb...

PT-2025-33716 · Unknown · Fluke Process Instruments Devices

Name of the Vulnerable Software and Affected Versions: affected versions not specified Description: An unauthenticated remote attacker can grant access without password protection to the affected device, enabling unprotected read-only access to stored measurement data. Recommendations: At the...

PT-2025-33804

Content removed...

PT-2025-33629 · Zhenfeng13 · Myblog

Name of the Vulnerable Software and Affected Versions: zhenfeng13 My-Blog version 1.0.0 Description: A security flaw has been discovered in zhenfeng13 My-Blog 1.0.0. This vulnerability affects unknown code of the file /blog/comment of the component Frontend Blog Article Comment Handler. The...

PT-2025-33640 · Unknown · Diaenergie

Name of the Vulnerable Software and Affected Versions: DIAEnergie affected versions not specified Description: The software contains a reflected cross-site scripting issue. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...

PT-2025-33503 · Backstage · @Backstage/Plugin-Scaffolder-Backend

Name of the Vulnerable Software and Affected Versions: @backstage/plugin-scaffolder-backend versions prior to 2.1.1 Description: The backend for the default Backstage software templates exhibited duplicate logging of input values in the fetch:template action within the Scaffolder. This resulted i...

Malicious code in @zalastax/nolb-react-pt (npm)

The package @zalastax/nolb-react-pt was found to contain malicious code...

Malicious code in pt-serif (npm)

The package pt-serif was found to contain malicious code...

MAL-2025-30800 Malicious code in pt-mono (npm)

The package pt-mono was found to contain malicious code...

MAL-2025-13725 Malicious code in @zalastax/nolb-react-pt (npm)

The package @zalastax/nolb-react-pt was found to contain malicious code...

Malicious code in pt-mono (npm)

The package pt-mono was found to contain malicious code...

MAL-2025-30801 Malicious code in pt-serif (npm)

The package pt-serif was found to contain malicious code...

Malicious code in @zalastax/nolb-pt (npm)

The package @zalastax/nolb-pt was found to contain malicious code...

MAL-2025-19566 Malicious code in ember-pt-components (npm)

The package ember-pt-components was found to contain malicious code...

Malicious code in ember-pt-components (npm)

The package ember-pt-components was found to contain malicious code...

MAL-2025-13396 Malicious code in @zalastax/nolb-pt (npm)

The package @zalastax/nolb-pt was found to contain malicious code...

PT-2025-33305

Name of the Vulnerable Software and Affected Versions: libcoap affected versions not specified Description: A use-after-free issue exists in the coap delete pdu lkd function within coap pdu.c. This occurs due to improper memory handling after a PDU object is freed, potentially leading to memory...

PT-2025-32982 · Zkteco · Zkteco Wl20

Name of the Vulnerable Software and Affected Versions: ZKTeco WL20 affected versions not specified Description: The device stores Wi-Fi credentials, configuration data, and system data in plaintext within the device firmware. An attacker with physical access can extract the firmware and reverse...

PT-2025-32718 · Intel · Intel Tdx

Name of the Vulnerable Software and Affected Versions: IntelR TDX affected versions not specified Description: An improper synchronization issue exists within the firmware of certain IntelR TDX implementations. A user with privileged access may be able to escalate their privileges through local...