PT-2025-54203

Name of the Vulnerable Software and Affected Versions RustFS versions prior to 1.0.0-alpha.77 Description RustFS, a distributed object storage system built in Rust, uses a hardcoded static token, "rustfs rpc", for gRPC authentication in versions prior to 1.0.0-alpha.77. This token is publicly...

PT-2025-53881

Name of the Vulnerable Software and Affected Versions xenioushk BWL Knowledge Base Manager versions through 1.6.3 Description The software contains a flaw related to improper input handling during web page creation, which allows for Stored Cross-site Scripting XSS. This means that malicious scrip...

PT-2025-53796

Name of the Vulnerable Software and Affected Versions Crocoblock JetSearch versions through 3.5.16 Description A flaw exists in Crocoblock JetSearch that allows for DOM-Based Cross-Site Scripting XSS. This issue is due to improper neutralization of input during web page generation. The...

PT-2025-53787

Name of the Vulnerable Software and Affected Versions SohuTV CacheCloud versions up to 3.2.0 Description A flaw exists in SohuTV CacheCloud that allows for cross site scripting. This issue is related to the taskQueueList function within the file...

PT-2025-53812

Name of the Vulnerable Software and Affected Versions Kemal YAZICI Product Puller versions through 1.5.1 Description The software contains a flaw related to improper input handling during web page generation, which allows for Reflected Cross-Site Scripting XSS. This means that malicious code can ...

PT-2025-53806

Name of the Vulnerable Software and Affected Versions Crocoblock JetTabs versions through 2.2.12 Description An authorization issue exists in Crocoblock JetTabs, allowing exploitation due to incorrectly configured access control security levels. Recommendations Update Crocoblock JetTabs to a...

PT-2025-53751

Name of the Vulnerable Software and Affected Versions HETWORKS WordPress Image shrinker versions through 1.1.0 Description The WordPress Image shrinker plugin contains a Server-Side Request Forgery SSRF flaw. This allows for Server Side Request Forgery. Recommendations Update HETWORKS WordPress...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization in the propagation of token scope for access control within Gitea's package registry. An attacker can gain unauthorized access or perform actions beyond their intended permissions by exploiting improper enforceme...

PT-2025-53419

Name of the Vulnerable Software and Affected Versions UTT 进取 512W versions prior to 1.7.7-171114 Description A flaw exists in UTT 进取 512W. The strcpy function within the /goform/formPictureUrl file is susceptible to a buffer overflow when handling the importpictureurl argument. This allows for...

PT-2025-53294

Name of the Vulnerable Software and Affected Versions Specto CM versions prior to 17032025 Description Specto CM contains a flaw related to improper input handling during web page generation, which allows for Stored Cross-site Scripting XSS. This means that malicious scripts can be injected into...

PT-2025-53289

Name of the Vulnerable Software and Affected Versions Rustaurius Five Star Restaurant Reservations versions through 2.7.7 Description A Cross-Site Request Forgery CSRF issue exists in Rustaurius Five Star Restaurant Reservations restaurant-reservations, potentially allowing attackers to perform...

PT-2025-53250

Name of the Vulnerable Software and Affected Versions WP Swings Membership For WooCommerce versions through 3.0.3 Description An authorization bypass exists due to incorrectly configured access control security levels. This allows bypassing authorization through a user-controlled key. The issue...

PT-2025-53100

Name of the Vulnerable Software and Affected Versions thembay Fana versions through 1.1.35 Description An improper control of filename for include/require statement exists in thembay Fana, potentially allowing PHP Local File Inclusion. The issue is related to PHP Remote File Inclusion...

PT-2025-52734

Name of the Vulnerable Software and Affected Versions WordPress Calendar plugin versions prior to 1.3.17 Description The Calendar plugin for WordPress is susceptible to Stored Cross-Site Scripting. This is due to insufficient input sanitization and output escaping in the event desc parameter...

PT-2025-52746

Name of the Vulnerable Software and Affected Versions Thembay Diza versions through 1.3.15 Description An improper control of filename for include/require statement exists in Thembay Diza, leading to a PHP Local File Inclusion issue. This allows for the inclusion of local files, potentially leadi...

PT-2025-52750

Name of the Vulnerable Software and Affected Versions Hotech Software Inc. Otello versions 2.4.0 through 2.4.3 Description The software contains an Improper Neutralization of Input During Web Page Generation issue, specifically a Stored Cross-site Scripting XSS condition. This allows for the...

PT-2025-52674

Name of the Vulnerable Software and Affected Versions Umbraco CMS version 16.3.3 Description An arbitrary file upload issue exists in Umbraco CMS version 16.3.3. Attackers can potentially execute arbitrary code by uploading a specially crafted PDF file. The supplier disputes responsibility, stati...

PT-2025-52677

Name of the Vulnerable Software and Affected Versions MyNET versions up to 26.08 Description The software contains a Reflected cross-site scripting XSS issue. The vulnerability is located in the msgtipo parameter. A successful exploit could allow an attacker to inject malicious scripts into a web...

Debian dla-4418 : python3-mechanize - security update

The remote Debian 11 host has a package installed that is affected by a vulnerability as referenced in the dla-4418 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4418-1 [email protected] https://www.debian.org/lts/security/...

PT-2025-52568

Name of the Vulnerable Software and Affected Versions HappyFiles Pro versions through 1.8.1 Description An authorization issue exists in HappyFiles Pro, allowing exploitation of incorrectly configured access control security levels. This can lead to unauthorized access. Recommendations Update...