PT-2025-32272 · Linkjoin · Linkjoin

Name of the Vulnerable Software and Affected Versions: LinkJoin versions through 882f196 Description: LinkJoin mishandles token ownership in the password reset functionality. Recommendations: Update LinkJoin to a version beyond 882f196...

PT-2025-32257 · Tagfree · Tagfree X-Free Uploader Xfu

Name of the Vulnerable Software and Affected Versions: TAGFREE X-Free Uploader XFU versions 1.0.1.0084 through 1.0.1.0084 TAGFREE X-Free Uploader XFU versions 2.0.1.0034 through 2.0.1.0034 Description: An External Control of File Name or Path vulnerability exists in TAGFREE X-Free Uploader XFU,...

PT-2025-32236 · Suitecrm · Suitecrm

Name of the Vulnerable Software and Affected Versions: SuiteCRM versions 7.14.6 and below Description: SuiteCRM is an open-source Customer Relationship Management CRM software application susceptible to a Reflected Cross-Site Scripting XSS issue. An attacker can execute JavaScript code by...

Libre Office Arbitrary Code Execution vulnerability (Aug 2025) - Linux

Libre Office is prone to an arbitrary code execution vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2025-8521

A vulnerability, which was classified as problematic, has been found in givanz Vvveb up to 1.0.5. This issue affects some unknown processing of the file /vadmin123/index.php?module=settings/post-types of the component Add Type Handler. The manipulation leads to cross site scripting. The attack ma...

PT-2025-32031 · WordPress · Flex Guten

Name of the Vulnerable Software and Affected Versions: Flex Guten plugin for WordPress versions up to and including 1.2.5 Description: The Flex Guten plugin for WordPress is susceptible to Stored Cross-Site Scripting via the thumbnailHoverEffect parameter due to insufficient input sanitization an...

PT-2025-32032 · WordPress · Esri-Map-View

Name of the Vulnerable Software and Affected Versions: esri-map-view plugin for WordPress versions through 1.2.3 Description: The esri-map-view plugin for WordPress is susceptible to Stored Cross-Site Scripting through the plugin’s esri-map-view shortcode. Insufficient input sanitization and outp...

PT-2025-32111 · Unknown · Blockchain Keystore

Name of the Vulnerable Software and Affected Versions: Blockchain Keystore versions prior to 1.3.17.2 Description: An out-of-bounds write issue exists in the creation of bitmap images. This can allow a local privileged attacker to write to memory outside of allocated boundaries. Recommendations:...

PT-2025-32192 · Sage Dpw · Sage Dpw

Name of the Vulnerable Software and Affected Versions: Sage DPW versions 2024.12.003 Description: A reflected cross-site scripting XSS vulnerability exists in Sage DPW version 2024.12.003. This allows attackers to execute arbitrary JavaScript in the context of a victim’s browser by injecting a...

PT-2025-32105 · Samsung · Emergency Sos

Name of the Vulnerable Software and Affected Versions: Emergency SoS versions prior to SMR Aug-2025 Release 1 Description: An improper export of an Android application component in Emergency SoS allows local attackers to access sensitive information. Recommendations: Update Emergency SoS to SMR...

PT-2025-32234 · Microsoft · Windows Subsystem For Linux

Name of the Vulnerable Software and Affected Versions: WSL version 2.5.10 Description: Microsoft addressed a critical security flaw in Windows Subsystem for Linux WSL. Details about the issue were initially withheld but are scheduled for release on August 12. Recommendations: Update to version...

Spreadsheet-ParseExcel: Arbitrary Code Execution

Background Spreadsheet::ParseExcel is a perl module to extract information from Excel files. Description A vulnerability has been discovered in Spreadsheet::ParseExcel. Please review the CVE identifier referenced below for details. Impact Please review the referenced CVE identifier for details...

PT-2025-32207 · 4C Strategies · 4C Strategies Exonaut

Name of the Vulnerable Software and Affected Versions: 4C Strategies Exonaut versions prior to 21.6.2.1-1 Description: The software contains a Server-Side Request Forgery SSRF issue. SSRF occurs when a web application fetches a remote resource without validating the URL, potentially allowing an...

PT-2025-32106 · Unknown · Document Scanner

Name of the Vulnerable Software and Affected Versions: Document scanner versions prior to SMR Aug-2025 Release 1 Description: A path traversal issue exists in Document scanner prior to SMR Aug-2025 Release 1, allowing local attackers to delete files with Document scanner’s privileges...

PT-2025-32239 · Go Acme +1 · Lego +1

Name of the Vulnerable Software and Affected Versions: Lego versions 4.25.1 and below Description: The github.com/go-acme/lego/v4/acme/api package, and consequently the Lego library and command-line interface, does not enforce HTTPS when communicating with Certificate Authorities CAs as an ACME...

PT-2025-32113 · Samsung · Galaxy Wearable

Name of the Vulnerable Software and Affected Versions: Galaxy Wearable versions prior to 2.2.63.25042861 Description: Improper access control in Galaxy Wearable allows local attackers to access sensitive information. Recommendations: Update Galaxy Wearable to version 2.2.63.25042861 or later...

PT-2025-32107 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions 13 through 16 Description: Improper access control in PkgPredictorService prior to SMR Aug-2025 Release 1 allows local attackers to use privileged APIs. Recommendations: Update to SMR Aug-2025 Release 1 or later...

GHSA-F6RC-24X4-PPXP RISC Zero Underconstrained Vulnerability: Division

Two issues were found: For some inputs to signed integer division, the circuit allowed two outputs, only one of which was valid. Additionally, the result of division by zero was underconstrained. This vulnerability was identified using the Picus tool from Veridise. Impacted on-chain verifiers hav...

Security Bulletin: IBM Guardium Data Protection is affected by multiple Tomcat vulnerabilities (CVE-2025-24813, CVE-2024-50379)

Summary IBM Guardium Data Protection has addressed these vulnerabilities in an update. Vulnerability Details CVEID:CVE-2025-24813 DESCRIPTION: Path Equivalence: 'file.Name' Internal Dot leading to Remote Code Execution and/or Information disclosure and/or malicious content added to uploaded files...

CVE-2025-8555 atjiu pybbs search cross site scripting

A vulnerability, which was classified as problematic, was found in atjiu pybbs up to 6.0.0. Affected is an unknown function of the file /search. The manipulation of the argument keyword leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to...