PT-2025-25700 · Thembay · Thembay Maia

Name of the Vulnerable Software and Affected Versions: thembay Maia versions 1.1.15 and earlier Description: The issue is related to improper control of filename for include/require statement in PHP program, also known as 'PHP Remote File Inclusion', which allows PHP Local File Inclusion...

PT-2025-25698 · Unknown · Thembay Sapa

Name of the Vulnerable Software and Affected Versions: thembay Sapa versions 1.1.14 and earlier Description: The issue is related to improper control of filename for include/require statement in PHP program, also known as 'PHP Remote File Inclusion', which allows PHP Local File Inclusion...

PT-2025-25694 · Unknown · Thembay Besa

Name of the Vulnerable Software and Affected Versions: thembay Besa versions n/a through 2.3.8 Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion', which allows PHP Local File Inclusion. This...

PT-2025-25668 · Evon · Evon

Name of the Vulnerable Software and Affected Versions: Evon versions 3.4 and earlier Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion', which allows PHP Local File Inclusion. This is a type ...

PT-2025-25751

Name of the Vulnerable Software and Affected Versions: Sitecore PowerShell Extensions versions through 7.0 Description: Sitecore PowerShell Extensions, an add-on to Sitecore Experience Manager XM and Experience Platform XP, is vulnerable to an unrestricted file upload issue. A remote, authenticat...

PT-2025-25713 · Unknown · Postapanduri

Name of the Vulnerable Software and Affected Versions: PostaPanduri versions n/a through 2.1.3 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. Recommendations: For...

PT-2025-25606 · WordPress · Wise Chat

Name of the Vulnerable Software and Affected Versions: Wise Chat plugin for WordPress versions up to, and including, 3.3.4 Description: The issue is related to Stored Cross-Site Scripting via the X-Forwarded-For header due to insufficient input sanitization and output escaping. This allows...

PT-2025-25728 · Mycred · Mycred

Name of the Vulnerable Software and Affected Versions: myCred versions n/a through 2.9.4.2 Description: The issue is related to a Missing Authorization vulnerability, which allows accessing functionality not properly constrained by ACLs. Recommendations: For versions n/a through 2.9.4.2, update t...

PT-2025-25759 · Fuji Electric · Fuji Electric Smart Editor

Name of the Vulnerable Software and Affected Versions: Fuji Electric Smart Editor affected versions not specified Description: The issue is related to an out-of-bounds write, which may allow an attacker to execute arbitrary code. Recommendations: At the moment, there is no information about a new...

PT-2025-25610 · Unknown · Conda Constructor

Name of the Vulnerable Software and Affected Versions: Conda Constructor versions prior to 3.11.3 Description: The issue concerns the Conda Constructor, a tool for creating installers for conda packages. Prior to version 3.11.3, the shell installer scripts process the installation prefix using an...

PT-2025-25718 · Mycred · Mycred

Name of the Vulnerable Software and Affected Versions: myCred versions 2.9.4.2 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploitation of incorrectly configured access control security levels. Recommendations: For myCred versions 2.9.4.2 a...

PT-2025-26173 · Quiche · Quiche

Name of the Vulnerable Software and Affected Versions: quiche versions prior to 0.24.4 Description: The issue is related to incorrect congestion window growth, which could cause quiche to send data at a rate faster than the path might actually support. An unauthenticated remote attacker can explo...

PT-2025-25735 · Cyberchimps · Cyberchimps Responsive Blocks

Name of the Vulnerable Software and Affected Versions: CyberChimps Responsive Blocks versions 2.0.5 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacke...

PT-2025-25736 · Unknown · Cubewp Framework

Name of the Vulnerable Software and Affected Versions: CubeWP Framework versions 1.1.23 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows DOM-Based XSS in the CubeWP Framework...

CVE-2025-6140

A vulnerability, which was classified as problematic, was found in spdlog up to 1.15.1. This affects the function scopedpadder in the library include/spdlog/patternformatter-inl.h. The manipulation leads to resource consumption. It is possible to launch the attack on the local host. The exploit h...

UBUNTU-CVE-2025-6141

A vulnerability has been found in GNU ncurses up to 6.5-20250322 and classified as problematic. This vulnerability affects the function postprocesstermcap of the file tinfo/parseentry.c. The manipulation leads to stack-based buffer overflow. The attack needs to be approached locally. Upgrading to...

Brute Force

Overview Affected versions of this package are vulnerable to Brute Force via the second factor verification process. An attacker can bypass authentication controls by automating OTP guessing attempts. Remediation Upgrade Weblate to version 5.12.1 or higher. References - GitHub Commit - GitHub PR ...

CVE-2025-6141 GNU ncurses parse_entry.c postprocess_termcap stack-based overflow

A vulnerability has been found in GNU ncurses up to 6.5-20250322 and classified as problematic. This vulnerability affects the function postprocesstermcap of the file tinfo/parseentry.c. The manipulation leads to stack-based buffer overflow. The attack needs to be approached locally. Upgrading to...

CVE-2025-6141 GNU ncurses parse_entry.c postprocess_termcap stack-based overflow

A vulnerability has been found in GNU ncurses up to 6.5-20250322 and classified as problematic. This vulnerability affects the function postprocesstermcap of the file tinfo/parseentry.c. The manipulation leads to stack-based buffer overflow. The attack needs to be approached locally. Upgrading to...

GHSA-8CQV-PJ7F-PWPC Teleport allows remote authentication bypass

Impact A full technical disclosure and open-source patch will be published after the embargo period, ending on June 30th, to allow all users to upgrade. Teleport security engineers identified a critical security vulnerability that could allow remote authentication bypass of Teleport. Teleport Clo...