PT-2025-17922 · Jetbrains · Jetbrains Rider

Name of the Vulnerable Software and Affected Versions: JetBrains Rider versions prior to 2025.1.2 Description: The issue allows arbitrary file overwrite during a remote debug session due to a custom archive unpacker. Recommendations: For versions prior to 2025.1.2, update to version 2025.1.2 or...

PT-2025-28379 · Bluetooth · Bluetooth

Name of the Vulnerable Software and Affected Versions: Bluetooth versions prior to SMR Jul-2025 Release 1 Description: The issue concerns improper privilege management in Bluetooth, allowing local attackers to enable Bluetooth. This could potentially lead to unauthorized access or control. There ...

PT-2025-17901 · WordPress · Ws Form Lite

Name of the Vulnerable Software and Affected Versions: WS Form LITE – Drag & Drop Contact Form Builder for WordPress versions prior to 1.10.36 Description: The issue allows unauthorized access to data due to a missing capability check on the get config function. This makes it possible for...

PT-2025-17878

Name of the Vulnerable Software and Affected Versions The ShopLentor plugin for WordPress versions up to, and including, 3.1.2 Description The issue allows unauthenticated attackers to make web requests to arbitrary locations originating from the web application, potentially querying and modifyin...

PT-2025-17873 · Backdrop Cms · Flag

Name of the Vulnerable Software and Affected Versions: Backdrop CMS Flag module versions prior to 1.x-3.6.2 Description: A Cross-Site Scripting issue was discovered in the Flag module for Backdrop CMS. The module does not verify flag links before performing the flag action, or verify that the...

PT-2025-17933 · Hcl · Hcl Sx

Name of the Vulnerable Software and Affected Versions: HCL SX version 21 Description: The issue is related to the usage of a weak cryptographic algorithm. An attacker could exploit this weakness to gain access to sensitive information, modify data, or cause other impacts. Recommendations: For HCL...

PT-2025-17943 · Netscout · Netscout Ngeniusone

Name of the Vulnerable Software and Affected Versions: NETSCOUT nGeniusONE versions prior to 6.4.0 b2350 Description: The issue concerns hardcoded credentials in NETSCOUT nGeniusONE that can be obtained from JAR files. Recommendations: For versions prior to 6.4.0 b2350, update to version 6.4.0...

PT-2025-17925

Name of the Vulnerable Software and Affected Versions JetBrains TeamCity versions prior to 2025.03.1 Description JetBrains TeamCity is affected by a stored Cross-Site Scripting XSS issue on the Data Directory tab. This occurs because the application fails to properly protect the web page structur...

PT-2025-20350

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, which was caused by a code path in dequeue entities that could set the slice of a sched entity to U64 MAX, resulting in a crash. Th...

PT-2025-17907 · Easyvirt · Easyvirt Co2Scope +1

Name of the Vulnerable Software and Affected Versions: EasyVirt DCScope versions 8.6.4 and earlier EasyVirt CO2Scope versions 1.3.4 and earlier Description: The issue allows remote authenticated attackers to execute arbitrary SQL commands. This can be achieved via various parameters to specific A...

PT-2025-17887 · WordPress · Upsell Funnel Builder For Woocommerce

Name of the Vulnerable Software and Affected Versions: The Upsell Funnel Builder for WooCommerce plugin for WordPress versions up to, and including, 3.0.0 Description: The issue allows unauthenticated attackers to manipulate orders by updating the product associated with any order bump and the...

PT-2025-28381 · Unknown · Audio Service

Name of the Vulnerable Software and Affected Versions: LeAudioService versions prior to SMR Jul-2025 Release 1 Description: The issue is related to improper access control in LeAudioService, which allows local attackers to manipulate broadcasting Auracast. Recommendations: For versions prior to S...

PT-2025-17870 · Unknown · Sherpa Orchestrator

Name of the Vulnerable Software and Affected Versions: Sherpa Orchestrator version 141851 Description: A low-privileged user can elevate their privileges by creating new users and roles. Recommendations: For Sherpa Orchestrator version 141851, consider restricting the ability of low-privileged...

Debian dla-4137 : libbpf-dev - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4137 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4137-1 [email protected]...

PT-2025-17773 · Unknown · Occupancyplan

Name of the Vulnerable Software and Affected Versions: occupancyplan versions 1.0.3.0 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. Recommendations: For versions 1.0.3.0 and earlier, update to a version that contains a fix for this...

PT-2025-17747 · Unknown · Acf: Google Font Selector

Name of the Vulnerable Software and Affected Versions: ACF: Google Font Selector versions 3.0.1 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for reflected cross-site scripting XSS. This can be exploited through the ACF:...

PT-2025-17803 · Unknown · Oniswap Mini Twitter Feed

Name of the Vulnerable Software and Affected Versions: oniswap Mini twitter feed versions n/a through 3.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS in the oniswap Mini twitter feed...

PT-2025-17745 · Capturly · Capturly

Name of the Vulnerable Software and Affected Versions: Capturly versions n/a through 2.0.1 Description: The issue is related to Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion' vulnerability. This allows PHP Local File Inclusion ...

PT-2025-17777 · Unknown · Wp Custom Cms Block

Name of the Vulnerable Software and Affected Versions: Wp Custom CMS Block versions through 2.1 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web application,...

PT-2025-17760 · Unknown · M A Vinoth Kumar Frontend Dashboard

Name of the Vulnerable Software and Affected Versions: M A Vinoth Kumar Frontend Dashboard versions 2.2.5 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attack...