PT-2025-30910 · Opencart · Opencart

Name of the Vulnerable Software and Affected Versions: OpenCart version 4.1.0.4 Description: OpenCart version 4.1.0.4 is susceptible to a Stored Cross-Site Scripting XSS attack through the blog editor. The issue occurs because input within the blog editor is not adequately sanitized or escaped...

PT-2025-30729 · Chancms · Chancms

Name of the Vulnerable Software and Affected Versions: ChanCMS versions up to 3.1.2 Description: A critical issue exists in ChanCMS that allows for server-side request forgery. The getArticle function within the app/modules/api/service/gather.js file is susceptible to manipulation via the targetU...

PT-2025-30931 · Grav · Grav

Name of the Vulnerable Software and Affected Versions: grav versions 1.7.46 through 1.7.48 Description: A Cross Site Scripting issue exists in grav that allows an attacker to execute arbitrary code via the onerror attribute of the img element. Recommendations: Update grav to a version later than...

PT-2025-30937

Name of the Vulnerable Software and Affected Versions Linkify versions 4.3.1 through 4.3.2 Description The software contains an improperly controlled modification of object prototype attributes 'Prototype Pollution' issue. This can lead to cross-site scripting XSS attacks targeting HTML attribute...

PT-2025-30943

Vulnerability Summary Name of the Vulnerable Software and Affected Versions skops versions 0.11.0 and below Description skops is a Python library used for sharing and shipping scikit-learn based models. An inconsistency in the OperatorFuncNode allows exploitation to hide the execution of untruste...

PT-2025-30779

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 6.16.0-rc3 and earlier Description A warning occurred when reconnecting a channel in the SMB2 protocol. Specifically, a dummy tcon was passed to smb2 reconnect with an uninitialized query interface, leading to an issue wh...

PT-2025-30920 · Unknown · Food Review System

Name of the Vulnerable Software and Affected Versions: Food Review System version 1.0 Description: A critical issue exists due to SQL injection. The vulnerability is related to the processing of the /admin/approve reservation.php file. Manipulation of the occasion argument can lead to SQL...

PT-2025-30819 · WordPress · Apwide Golive Jira Plugin

Name of the Vulnerable Software and Affected Versions: Apwide Golive Jira plugin version 10.2.0 Description: The Apwide Golive Jira plugin contains a Server-Side Request Forgery SSRF issue. This issue is related to the test webhook function, which allows for potential exploitation through...

PT-2025-30814 · Jhipster · Jhipster

Name of the Vulnerable Software and Affected Versions: JHipster versions prior to 8.9.0 Description: JHipster versions prior to 8.9.0 are susceptible to privilege escalation through manipulation of the authorities parameter. After registering and logging in as a standard user, the authorities...

PT-2025-30743

Name of the Vulnerable Software and Affected Versions Kron PAM versions prior to 3.7 Description Kron PAM is susceptible to a denial-of-service DoS attack due to unrestricted resource allocation. This allows an attacker to exhaust system resources via HTTP requests. Recommendations Update Kron PA...

PT-2025-30733 · WordPress · Droip

Name of the Vulnerable Software and Affected Versions: Droip versions prior to 2.2.1 Description: The Droip plugin for WordPress is susceptible to arbitrary file uploads due to missing file type validation in the make google font offline function. This allows authenticated attackers with...

PT-2025-30909 · Unknown · Codeigniter4

Name of the Vulnerable Software and Affected Versions: CodeIgniter4 version 4.6.0 Description: A stored cross-site scripting XSS vulnerability exists in CodeIgniter4. Attackers can execute arbitrary web scripts or HTML by injecting a crafted payload into the debugbar time parameter...

PT-2025-30717 · Openai +1 · Openai Codex Cli +1

Name of the Vulnerable Software and Affected Versions: OpenAI Codex CLI versions prior to 0.9.0 Description: The OpenAI Codex CLI application automatically approves the execution of ripgrep rg even when specific flags—--pre, --hostname-bin, --search-zip, or -z—are used. Recommendations: Update to...

PT-2025-30915 · Grav · Grav

Name of the Vulnerable Software and Affected Versions: grav versions prior to 1.7.49 Description: A Cross Site Scripting vulnerability exists in grav versions prior to 1.7.49. This allows an attacker to execute arbitrary code via a crafted script to the form fields. Recommendations: Update to gra...

NewStart CGSL MAIN 7.02 : dav1d Vulnerability (NS-SA-2025-0159)

The remote NewStart CGSL host, running version MAIN 7.02, has dav1d packages installed that are affected by a vulnerability: - An integer overflow in dav1d AV1 decoder that can occur when decoding videos with large frame size. This can lead to memory corruption within the AV1 decoder. We recommen...

NewStart CGSL MAIN 7.02 : binutils Vulnerability (NS-SA-2025-0113)

The remote NewStart CGSL host, running version MAIN 7.02, has binutils packages installed that are affected by a vulnerability: - A vulnerability, which was classified as problematic, was found in GNU Binutils up to 2.43. This affects the function disassemblebytes of the file binutils/objdump.c...

CVE-2025-22165

This Medium severity ACE Arbitrary Code Execution vulnerability was introduced in version 4.2.8 of Sourcetree for Mac. This ACE Arbitrary Code Execution vulnerability, with a CVSS Score of 5.9, allows a locally authenticated attacker to execute arbitrary code which has high impact to...

CVE-2025-7949

A vulnerability was found in Sanluan PublicCMS up to 5.202506.a. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file publiccms-parent/publiccms/src/main/resources/templates/admin/cmsDiy/preview.html. The manipulation of the argument url lead...

PT-2025-30643 · WordPress · Structured Content

Name of the Vulnerable Software and Affected Versions: Structured Content plugin for WordPress versions prior to 1.6.5 Description: The Structured Content plugin for WordPress is susceptible to Stored Cross-Site Scripting through the plugin’s sc fs local business shortcode. Insufficient input...

PT-2025-30705 · WordPress · Elementskit Elementor Addons/Templates

Name of the Vulnerable Software and Affected Versions: ElementsKit Elementor Addons and Templates versions prior to 3.5.3 Description: The ElementsKit Elementor Addons and Templates plugin for WordPress is susceptible to Stored Cross-Site Scripting via the URL attribute of a custom widget due to...