PT-2025-20063 · Penup · Penup

Name of the Vulnerable Software and Affected Versions: PENUP versions prior to 3.9.19.32 Description: The issue is related to improper access control, allowing local attackers to access files with PENUP privilege. Recommendations: For versions prior to 3.9.19.32, update to version 3.9.19.32 or...

PT-2025-19902 · Ibm · Ibm I

Name of the Vulnerable Software and Affected Versions: IBM i versions 7.2 through 7.6 Description: The issue concerns authentication and authorization attacks due to incorrect validation processing in IBM i Netserver. A malicious actor could exploit these weaknesses, in conjunction with brute for...

PT-2025-20285 · Wegia · Wegia

Name of the Vulnerable Software and Affected Versions: WeGIA versions up to and including 3.3.0 Description: An unauthenticated SQL Injection issue was identified in the endpoint "/html/socio/sistema/get socios.php", specifically in the query parameter. This allows attackers to inject and execute...

PT-2025-20031 · Unknown · Boinc Server

Name of the Vulnerable Software and Affected Versions: BOINC Server versions through 1.4.7 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS in BOINC Server. Recommendations: For BOI...

PT-2025-20076

Name of the Vulnerable Software and Affected Versions Easy!Appointments version 1.5.1 Description A business logic flaw in Easy!Appointments allows unauthenticated attackers to create appointments with excessively long durations, causing a denial of service by blocking all future booking...

PT-2025-20078 · WordPress · Wpadverts

Name of the Vulnerable Software and Affected Versions: WPAdverts versions through 2.2.2 Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion', which allows PHP Local File Inclusion. This is a ty...

PT-2025-20175 · Woocommerce · Calculate Prices Based On Distance For Woocommerce

Name of the Vulnerable Software and Affected Versions: Calculate Prices based on Distance For WooCommerce versions 1.3.5 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels...

PT-2025-20198 · Unknown · Webinarpress

Name of the Vulnerable Software and Affected Versions: WebinarPress versions 1.33.27 and earlier Description: A Server-Side Request Forgery SSRF issue affects the software, allowing for Server Side Request Forgery. Recommendations: For versions 1.33.27 and earlier, update to a version that contai...

PT-2025-20152 · Woocommerce · Pdf Invoices For Woocommerce + Drag/Drop Template Builder

Name of the Vulnerable Software and Affected Versions: PDF Invoices for WooCommerce + Drag and Drop Template Builder versions through 5.3.8 Description: The issue is related to an SQL Injection vulnerability due to the improper neutralization of special elements used in an SQL command. This allow...

PT-2025-20190 · Unknown · Dofollow Case By Case

Name of the Vulnerable Software and Affected Versions: DoFollow Case by Case versions 3.5.1 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. This can be achieved by tricking the use...

PT-2025-20191 · Unknown · Dofollow Case By Case

Name of the Vulnerable Software and Affected Versions: DoFollow Case by Case versions through 3.5.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inject...

PT-2025-20043 · Unknown · Unifiedwfc

Name of the Vulnerable Software and Affected Versions: UnifiedWFC versions prior to SMR May-2025 Release 1 Description: The issue is related to improper verification of intent by a broadcast receiver, allowing local attackers to manipulate VoWiFi related behaviors. This could potentially be...

Do Not Enable the DNS Service

The Domain Name System DNS is a hierarchical naming system that maps names to IP addresses of computers, services, and other network resources. Unless a system is the designated DNS server, you are advised to disable its DNS service to reduce the attack surface. SPDX-FileCopyrightText: 2025...

PT-2025-20050 · Samsung · Bixby

Name of the Vulnerable Software and Affected Versions: Bixby versions prior to 2.3.74.8 Description: The issue is related to the improper handling of insufficient permission in Bixby wakeup, allowing local attackers to access sensitive data. Recommendations: For versions prior to 2.3.74.8, update...

PT-2025-20108 · Unknown · Testimonial Slider

Name of the Vulnerable Software and Affected Versions: GS Testimonial Slider versions 3.2.9 and earlier Description: The issue is related to an Improper Control of Generation of Code 'Code Injection' vulnerability, which allows Code Injection in GS Testimonial Slider. Recommendations: For GS...

PT-2025-20129 · Woocommerce · Product Time Countdown For Woocommerce

Name of the Vulnerable Software and Affected Versions: Product Time Countdown for WooCommerce versions 1.6.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks...

PT-2025-20040 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to SMR May-2025 Release 1 Description: The issue concerns the improper export of Android application components in NotificationHistoryImageProvider, allowing local attackers to access notification images. This could...

PT-2025-20202 · Woocommerce · Elex Product Feed For Woocommerce

Name of the Vulnerable Software and Affected Versions: ELEX Product Feed for WooCommerce versions 3.1.2 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

PT-2025-20118 · Unknown · Ultimate Blocks

Name of the Vulnerable Software and Affected Versions: Ultimate Blocks versions n/a through 3.2.9 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for DOM-Based XSS attacks. Recommendations: For...

Debian dla-4154 : libmariadb-dev - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4154 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4154-1 [email protected]...