PT-2025-25575

Name of the Vulnerable Software and Affected Versions Weblate versions prior to 5.12 Description The issue concerns the inclusion of the full IP address of the acting user in audit log notifications. This information could be obtained by third-party servers, such as SMTP relays or spam filters...

PT-2025-30772 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.14.0-rc7 for upstream debug 2025 03 18 15 01 Description: A flaw exists in the Linux kernel's RDMA/mlx5 component related to unsafe xarray access during implicit ODP handling. Specifically, the xa store and xa...

PT-2025-25514 · Wifi Soft · Wifi-Soft Unibox Controller

Name of the Vulnerable Software and Affected Versions: Wifi-soft UniBox Controller versions up to 20250506 Description: A critical issue has been found, affecting some unknown functionality of the file /billing/test accesscodelogin.php. The manipulation of the Password argument leads to os comman...

PT-2025-26478 · D Link · D-Link Dir-619L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-619L version 2.06B01 Description: A critical issue affects the formSetACLFilter function of the file /goform/formSetACLFilter. The manipulation of the curTime argument leads to a stack-based buffer overflow. This issue can be...

PT-2025-25529 · Unknown · Phoenix Site Cms

Name of the Vulnerable Software and Affected Versions: Phoenix Site CMS versions affected versions not specified Description: A Reflected Cross Site Scripting XSS issue was found in the "/search" endpoint, allowing remote attackers to execute arbitrary code via the s GET parameter. Recommendation...

TencentOS Server 3: resource-agents (TSSA-2024:0387)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0387 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

TencentOS Server 2: httpd (TSSA-2024:0521)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0521 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities:...

TencentOS Server 2: httpd (TSSA-2024:0380)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0380 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities...

PT-2025-25526 · Unknown · Project Portfolio Manager +1

Name of the Vulnerable Software and Affected Versions: Project Portfolio Manager versions 3DEXPERIENCE R2023x through 3DEXPERIENCE R2025x Description: A stored Cross-site Scripting XSS issue affects Opportunity Management, allowing an attacker to execute arbitrary script code in a user's browser...

TencentOS Server 4: yt-dlp (TSSA-2024:1138)

"The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:1138 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

TencentOS Server 4: tomcat (TSSA-2025:0224)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0224 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

TencentOS Server 3: mod_http2 (TSSA-2023:0047)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2023:0047 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

PT-2025-25574

Name of the Vulnerable Software and Affected Versions Weblate versions prior to 5.12 Description The verification of the second factor was not subject to rate limiting, allowing an attacker with valid credentials to automate OTP guessing via the second factor endpoint. Recommendations For version...

TencentOS Server 4: xerces-c (TSSA-2024:0466)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0466 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

PT-2025-25473 · WordPress · The Ai Image Lab – Free Ai Image Generator

Name of the Vulnerable Software and Affected Versions: The AI Image Lab – Free AI Image Generator plugin for WordPress versions 1.0.0 through 1.0.6 Description: The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the 'wpz-ai-images' page. This allows...

PT-2025-25477 · WordPress · Zen Sticky Social

Name of the Vulnerable Software and Affected Versions: Zen Sticky Social plugin for WordPress versions up to, and including, 0.3 Description: The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the 'zen-social-sticky/zen-sticky-social.php' page. This...

PT-2025-25471 · Zagg · Zagg

Name of the Vulnerable Software and Affected Versions: Zagg - Electronics & Accessories WooCommerce WordPress Theme versions up to, and including, 1.4.1 Description: The issue allows unauthenticated attackers to include and execute arbitrary files on the server via the load view function, which i...

PT-2025-25470 · WordPress · Userpro

Name of the Vulnerable Software and Affected Versions: UserPro - Community and User Profile WordPress Plugin versions up to, and including, 5.1.10 Description: The issue allows unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information...

PT-2025-25472 · Unknown +1 · Diot Scada +2

Name of the Vulnerable Software and Affected Versions: DIOT SCADA with MQTT plugin for WordPress versions up to, and including, 1.0.5.1 Description: The issue is related to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping on user-supplied attributes in the...

PT-2025-25483 · WordPress · Restrict File Access

Name of the Vulnerable Software and Affected Versions: Restrict File Access plugin for WordPress versions up to, and including, 1.1.2 Description: The issue allows authenticated attackers with Subscriber-level access and above to read the contents of arbitrary files on the server, which can conta...