PT-2025-14706 · Tribulant · Snow Storm

Name of the Vulnerable Software and Affected Versions: Tribulant Software Snow Storm versions 1.4.6 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential...

PT-2025-14705 · Unknown · Custom Post Type Updates

Name of the Vulnerable Software and Affected Versions: Latest Custom Post Type Updates versions 1.3.0 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means that an...

PT-2025-14601 · WordPress · User Submitted Posts

Name of the Vulnerable Software and Affected Versions: User Submitted Posts – Enable Users to Submit Posts from the Front End plugin for WordPress versions up to, and including, 20240319 Description: The issue is related to Stored Cross-Site Scripting via admin settings due to insufficient input...

PT-2025-14771

Name of the Vulnerable Software and Affected Versions InternLM LMDeploy versions up to 0.7.1 Description A critical vulnerability was found in InternLM LMDeploy, affecting the function Open of the file lmdeploy/docs/en/conf.py. The manipulation leads to code injection, and it is possible to launc...

PT-2025-14754 · Apptivo · Apptivo Business Site Crm

Name of the Vulnerable Software and Affected Versions: Apptivo Business Site CRM versions n/a through 5.3 Description: The issue is related to a Missing Authorization vulnerability, allowing the exploitation of incorrectly configured access control security levels. Recommendations: For Apptivo...

PT-2025-14721 · Tailpress · Tailpress

Name of the Vulnerable Software and Affected Versions: TailPress versions 0.4.4 and earlier Description: The issue allows the retrieval of embedded sensitive data due to the insertion of sensitive information into externally-accessible files or directories. Recommendations: For versions 0.4.4 and...

PT-2025-14709 · Enituretechnology · Enituretechnology Small Package Quotes – Worldwide Express Edition

Name of the Vulnerable Software and Affected Versions: enituretechnology Small Package Quotes – Worldwide Express Edition versions 5.2.19 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security...

PT-2025-14770

Name of the Vulnerable Software and Affected Versions InternLM LMDeploy versions up to 0.7.1 Description A critical issue was found in InternLM LMDeploy, affecting the function load weight ckpt of the file lmdeploy/lmdeploy/vl/model/utils.py in the component PT File Handler. The manipulation lead...

PT-2025-14790 · Seacms · Seacms

Name of the Vulnerable Software and Affected Versions: SeaCMS version 13.3 Description: The issue is related to a SQL injection vulnerability in the admin tempvideo.php component. Recommendations: For SeaCMS version 13.3, consider disabling access to the admin tempvideo.php component until a patc...

PT-2025-14704 · Unknown · Wptobe-Signinup

Name of the Vulnerable Software and Affected Versions: Wptobe-signinup versions 1.1.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to injec...

PT-2025-14777

Name of the Vulnerable Software and Affected Versions JetBrains IntelliJ IDEA versions prior to 2024.3 JetBrains IntelliJ IDEA version 2024.2.4 Description The issue concerns the logging of source code in the idea.log file. Recommendations For versions prior to 2024.3, update to version 2024.3 or...

PT-2025-14781 · Element · Element Ios

Name of the Vulnerable Software and Affected Versions: Element X iOS versions 1.6.13 through 25.03.7 Description: The issue allows an entity in control of the element.json well-known file to access media encryption keys used for an Element Call under certain conditions. Recommendations: For...

PT-2025-14782 · Element · Element

Name of the Vulnerable Software and Affected Versions: Element X Android versions 0.4.16 through 25.03.3 Description: The issue allows an entity in control of the element.json well-known file to access media encryption keys used for an Element Call under certain conditions. Recommendations: For...

PT-2025-18661 · Totolink · Totolink Ca600-Poe

Name of the Vulnerable Software and Affected Versions: TOTOLINK CA600-PoE version 5.3c.6665 B20180820 Description: A command injection issue was discovered in the CloudSrvUserdataVersionCheck function via the svn parameter. This issue allows attackers to execute arbitrary commands through a...

PT-2025-14631 · Unknown · Projectworlds Online Doctor Appointment Booking System

Name of the Vulnerable Software and Affected Versions: projectworlds Online Doctor Appointment Booking System version 1.0 Description: A critical issue has been discovered, allowing for SQL injection through the manipulation of the ic argument in the /doctor/deletepatient.php file. This can be...

PT-2025-22278

Name of the Vulnerable Software and Affected Versions vLLM versions 0.6.5 through 0.8.4 Description vLLM, an inference and serving engine for large language models LLMs, contains a remote code execution issue. This impacts environments utilizing the PyNcclPipe KV cache transfer integration with t...

PT-2025-14627 · Unknown · Project Worlds Online Lawyer Management System

Name of the Vulnerable Software and Affected Versions: Project Worlds Online Lawyer Management System version 1.0 Description: A critical issue was found in the system, affecting some unknown functionality of the file /save user edit profile.php. The manipulation of the first Name argument leads ...

PT-2025-14807 · Snowplow · Snowplow Collector

Name of the Vulnerable Software and Affected Versions: Snowplow Collector versions 3.x before 3.3.0 Description: The issue involves sending very large payloads to the Collector, which can render it unresponsive to other requests, potentially leading to data loss. Recommendations: For Snowplow...

PT-2025-14744 · Unknown · Cheesefather Botnet Attack Blocker

Name of the Vulnerable Software and Affected Versions: cheesefather Botnet Attack Blocker versions n/a through 2.0.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting', which allows Stored XSS. This means that an...

PT-2025-14767 · Hcl · Hcl Devops Deploy +1

Name of the Vulnerable Software and Affected Versions: HCL DevOps Deploy / HCL Launch affected versions not specified Description: The issue allows a user to embed arbitrary HTML tags in the Web UI, potentially leading to sensitive information disclosure. This is due to an HTML injection...