PT-2025-36415

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.16-rc1 Description A flaw was addressed in the Linux kernel related to a reversion of a commit that replaced inode trylock with inode lock in the NTFS3 file system. The initial removal of conditional lock...

PT-2025-27853 · WordPress · Doccheck Login

Name of the Vulnerable Software and Affected Versions: DocCheck Login plugin for WordPress versions up to, and including, 1.1.5 Description: The issue allows unauthorized post access due to the plugin redirecting a user to login on a password-protected post after the page has loaded, making it...

PT-2025-27999

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.15.0 Description: A vulnerability in the Linux kernel has been resolved, related to the kvaser pciefd driver. The issue involves the echo skb max handling logic, which defines the supported upper limit of echo...

PT-2025-27880 · Unknown · Cybio Gallery Widget

Name of the Vulnerable Software and Affected Versions: cybio Gallery Widget versions 1.2.1 and earlier Description: The issue is related to the improper neutralization of special elements used in an SQL command, also known as 'SQL Injection'. This allows for SQL Injection in the cybio Gallery...

PT-2025-27923 · Unknown · Fw Gallery

Name of the Vulnerable Software and Affected Versions: FW Gallery versions n/a through 8.0.0 Description: The issue allows for the unrestricted upload of files with dangerous types, enabling the use of malicious files. Recommendations: For FW Gallery versions n/a through 8.0.0, consider restricti...

PT-2025-27929

Name of the Vulnerable Software and Affected Versions: Cozmoslabs Paid Member Subscriptions versions 2.15.1 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection...

PT-2025-27888 · Unknown · Gopiplus Iframe Images Gallery

Name of the Vulnerable Software and Affected Versions: gopiplus iFrame Images Gallery versions prior to 9.0 Description: The issue is related to the improper neutralization of special elements used in an SQL command, which allows for SQL injection. This is a problem where an attacker can inject...

PT-2025-27889 · Unknown · Gopiplus Pixelating Image Slideshow Gallery

Name of the Vulnerable Software and Affected Versions: gopiplus Pixelating image slideshow gallery versions n/a through 8.0 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection...

PT-2025-27908 · Unknown · Simple Link Directory

Name of the Vulnerable Software and Affected Versions: Simple Link Directory versions n/a through 14.7.3 Description: The issue is related to an SQL Injection vulnerability, specifically an Improper Neutralization of Special Elements used in an SQL Command. This allows attackers to execute...

PT-2025-27881 · Cwd · Cwd Web Designer Easy Elements Hider

Name of the Vulnerable Software and Affected Versions: CWD Web Designer Easy Elements Hider versions 2.0 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for Stored Cross-site Scripting XSS. This means that an attacker can...

PT-2025-29179 · Tenda · Tenda O3V2

Name of the Vulnerable Software and Affected Versions: Tenda O3V2 version 1.0.0.123880 Description: A critical issue exists in Tenda O3V2. The fromSpeedTestSet function within the httpd component, located in the /goform/setRateTest file, is susceptible to a stack-based buffer overflow. The destIP...

PT-2025-27942 · Unknown · Wpo-Hr Ngg Smart Image Search

Name of the Vulnerable Software and Affected Versions: wpo-HR NGG Smart Image Search versions 3.4.1 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

PT-2025-27971 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.15.0-rc7-syzkaller-gd7fa1af5b33e Description: A vulnerability in the Linux kernel has been resolved, related to the io uring/rsrc module. The issue occurs when the buffer count with offset for cloning exceeds...

PT-2025-28028 · Quest · Quest Kace System Management Appliance

Name of the Vulnerable Software and Affected Versions: Quest KACE Systems Management Appliance SMA versions 14.0.0 through 14.0.96 Quest KACE Systems Management Appliance SMA versions 14.1.0 through 14.1.18 Description: The issue potentially allows privilege escalation on managed systems...

PT-2025-27900 · Woocommerce · Printcart Web To Print Product Designer

Name of the Vulnerable Software and Affected Versions: Printcart Web to Print Product Designer for WooCommerce versions prior to 2.4.0 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL...

PT-2025-27870 · Lambertgroup · Lambertgroup All In One Slider Responsive

Name of the Vulnerable Software and Affected Versions: LambertGroup All In One Slider Responsive versions 3.7.9 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection...

PT-2025-27916 · Codepeople · Codepeople Booking Calendar Contact Form

Name of the Vulnerable Software and Affected Versions: codepeople Booking Calendar Contact Form versions 1.2.58 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means tha...

PT-2025-28027

Name of the Vulnerable Software and Affected Versions: MCP Python SDK versions prior to 1.9.4 Description: A validation error in the MCP SDK can cause an unhandled exception when processing malformed requests, resulting in service unavailability until manually restarted. The impact may vary...

PT-2025-27952 · Unknown +2 · Sumatrapdf +2

Name of the Vulnerable Software and Affected Versions: CHMLib versions through 2bef8d0 Description: The issue is related to an integer overflow in the chm decompress block function in chm lib.c, which leads to a heap-based buffer overflow in the chm fetch bytes function. This problem affects...

PT-2025-27802 · Tenda · Tenda Ac6

Name of the Vulnerable Software and Affected Versions: Tenda AC6 version 15.03.05.16 multi Description: The issue is related to a Buffer Overflow in the formSetFirewallCfg function via the firewallEn parameter. Recommendations: For Tenda AC6 version 15.03.05.16 multi, as a temporary workaround,...