PT-2025-32596

Name of the Vulnerable Software and Affected Versions: Stirling-PDF versions prior to 1.1.0 Description: Stirling-PDF is a locally hosted web application used for PDF file operations. Prior to version 1.1.0, the application is susceptible to Server-Side Request Forgery SSRF when utilizing the...

PT-2025-32592

Name of the Vulnerable Software and Affected Versions: pyLoad versions prior to 0.5.0b3.dev91 Description: pyLoad, a free and open-source Download Manager written in pure Python, contains a SQL Injection issue in the add links parameter of the /json/add package API endpoint. This allows attackers...

PT-2025-32473 · Open5Gs · Open5Gs

Name of the Vulnerable Software and Affected Versions: Open5GS versions up to 2.7.5 Description: A vulnerability exists in Open5GS that can lead to a denial of service. The issue is related to the amf npcf am policy control build create/amf nsmf pdusession build create sm context function within...

PT-2025-32424

Name of the Vulnerable Software and Affected Versions Frappe Learning versions 2.33.0 and below Description Frappe Learning is a learning system designed to help users structure content. The image upload functionality did not properly sanitize uploaded SVG files, allowing users to upload files...

PT-2025-32384 · Openbao · Openbao

Name of the Vulnerable Software and Affected Versions: OpenBao versions 2.3.1 and below Description: OpenBao’s Login Multi-Factor Authentication MFA system, utilizing Time-based One Time Password TOTP, accepted codes containing whitespace due to normalization applied by the underlying TOTP librar...

CVE-2025-8698

A vulnerability was found in Open5GS up to 2.7.5. It has been classified as problematic. Affected is the function amfnsmfpdusessionhandlereleasesmcontext of the file src/amf/nsmf-handler.c of the component AMF Service. The manipulation leads to reachable assertion. Attacking locally is a...

CVE-2025-8698

Open5GS up to version 2.7.5 contains a vulnerability in the AMF Service, specifically the amf_nsmf_pdusession_handle_release_sm_context function in src/amf/nsmf-handler.c. The issue causes a reachable assertion when triggered, requiring local access to exploit. Public exploit information is avail...

CVE-2025-8554

A vulnerability, which was classified as problematic, has been found in atjiu pybbs up to 6.0.0. This issue affects some unknown processing of the file /admin/user/list. The manipulation of the argument Username leads to cross site scripting. The attack may be initiated remotely. The exploit has...

CVE-2025-8552

A vulnerability classified as problematic has been found in atjiu pybbs up to 6.0.0. This affects an unknown part of the file /admin/tag/list. The manipulation of the argument Name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the...

CVE-2025-8551

A vulnerability was found in atjiu pybbs up to 6.0.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /admin/comment/list. The manipulation of the argument Username leads to cross site scripting. The attack may be launched remotely. The exploit h...

PT-2025-32237 · Suitecrm · Suitecrm

Name of the Vulnerable Software and Affected Versions: SuiteCRM versions 7.14.0 through 7.14.6 Description: SuiteCRM is an open-source, enterprise-ready Customer Relationship Management CRM software application. A Cross Site Scripting XSS vulnerability exists in the email viewer. An external...

PT-2025-32257 · Tagfree · Tagfree X-Free Uploader Xfu

Name of the Vulnerable Software and Affected Versions: TAGFREE X-Free Uploader XFU versions 1.0.1.0084 through 1.0.1.0084 TAGFREE X-Free Uploader XFU versions 2.0.1.0034 through 2.0.1.0034 Description: An External Control of File Name or Path vulnerability exists in TAGFREE X-Free Uploader XFU,...

PT-2025-32272 · Linkjoin · Linkjoin

Name of the Vulnerable Software and Affected Versions: LinkJoin versions through 882f196 Description: LinkJoin mishandles token ownership in the password reset functionality. Recommendations: Update LinkJoin to a version beyond 882f196...

PT-2025-32236 · Suitecrm · Suitecrm

Name of the Vulnerable Software and Affected Versions: SuiteCRM versions 7.14.6 and below Description: SuiteCRM is an open-source Customer Relationship Management CRM software application susceptible to a Reflected Cross-Site Scripting XSS issue. An attacker can execute JavaScript code by...

PT-2025-32332

Name of the Vulnerable Software and Affected Versions Astro versions 5.2.0 through 5.12.7 Description Astro is susceptible to an Open Redirect vulnerability stemming from improper handling of paths containing double slashes in its trailing slash redirection logic. This allows an attacker to...

Libre Office Arbitrary Code Execution vulnerability (Aug 2025) - Linux

Libre Office is prone to an arbitrary code execution vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2025-8521

A vulnerability, which was classified as problematic, has been found in givanz Vvveb up to 1.0.5. This issue affects some unknown processing of the file /vadmin123/index.php?module=settings/post-types of the component Add Type Handler. The manipulation leads to cross site scripting. The attack ma...

PT-2025-32239 · Go Acme +1 · Lego +1

Name of the Vulnerable Software and Affected Versions: Lego versions 4.25.1 and below Description: The github.com/go-acme/lego/v4/acme/api package, and consequently the Lego library and command-line interface, does not enforce HTTPS when communicating with Certificate Authorities CAs as an ACME...

PT-2025-32111 · Unknown · Blockchain Keystore

Name of the Vulnerable Software and Affected Versions: Blockchain Keystore versions prior to 1.3.17.2 Description: An out-of-bounds write issue exists in the creation of bitmap images. This can allow a local privileged attacker to write to memory outside of allocated boundaries. Recommendations:...

PT-2025-32106 · Unknown · Document Scanner

Name of the Vulnerable Software and Affected Versions: Document scanner versions prior to SMR Aug-2025 Release 1 Description: A path traversal issue exists in Document scanner prior to SMR Aug-2025 Release 1, allowing local attackers to delete files with Document scanner’s privileges...