Debian dla-4164 : libeconf-dev - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4164 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4164-1 [email protected] https://www.debian.org/lts/security/...

PT-2025-20690 · Espocrm · Espocrm

Name of the Vulnerable Software and Affected Versions: EspoCRM versions prior to 9.0.8 Description: The issue allows for HTML Injection in Knowledge Base KB articles, leading to complete page defacement that can imitate the login page. Authenticated users with the read knowledge article privilege...

PT-2025-20694 · Unknown · Abantecart

Name of the Vulnerable Software and Affected Versions: AbanteCart version 1.4.0 Description: A Reflected Cross-Site Scripting XSS issue allows an attacker to execute JavaScript code in a victim's browser by sending a malicious URL. This can be exploited to steal sensitive user data, such as sessi...

PT-2025-20722 · Sel Bios · Sel Bios

Name of the Vulnerable Software and Affected Versions: SEL BIOS packages versions prior to 1.3.49152.117 SEL BIOS packages versions prior to 2.6.49152.98 Description: A local attacker can bypass password authentication and change password-protected BIOS settings by importing a BIOS settings file...

PT-2025-20745 · Apple · Macos Sequoia +1

Name of the Vulnerable Software and Affected Versions: macOS Sequoia versions prior to 15.5 Description: The issue was addressed with improved memory handling. Processing maliciously crafted web content may lead to an unexpected process crash. Recommendations: For versions prior to 15.5, update t...

PT-2025-20775 · Apple · Macos Sequoia +6

Name of the Vulnerable Software and Affected Versions: watchOS versions prior to 11.5 tvOS versions prior to 18.5 iPadOS versions prior to 17.7.7 iPadOS versions prior to 18.5 iOS versions prior to 18.5 macOS Sequoia versions prior to 15.5 visionOS versions prior to 2.5 Description: A logic issue...

PT-2025-20793 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.5 Description: An information disclosure issue was addressed with improved privacy controls. This issue may allow an app to access sensitive user data. Recommendations: For versions prior to 15.5, update to macOS...

PT-2025-25202 · Mattermost · Mattermost

Name of the Vulnerable Software and Affected Versions: Mattermost versions 10.5.x through 10.5.4 Mattermost versions 9.11.x through 9.11.13 Description: The issue allows guest users to bypass permissions and view information about public teams they are not members of via a direct API call to...

PT-2025-20681 · WordPress +1 · Firelight Lightbox +1

Name of the Vulnerable Software and Affected Versions: Firelight Lightbox plugin for WordPress versions prior to 2.3.15 Description: The issue allows users with post writing capabilities to execute arbitrary JavaScript when the jQuery Metadata library is enabled. This feature is intended for Pro...

PT-2025-20736 · Unknown · Thingsboard

Name of the Vulnerable Software and Affected Versions: ThingsBoard versions 3.8.1 and below Description: An arbitrary file upload vulnerability in the Image Gallery of ThingsBoard allows attackers to execute arbitrary code via uploading a crafted file. Recommendations: For versions 3.8.1 and belo...

EulerOS 2.0 SP10 : elfutils (EulerOS-SA-2025-1504)

According to the versions of the elfutils package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability, which was classified as problematic, has been found in GNU elfutils 0.192. This issue affects the function gelfgetsymshndx of th...

Hotfix XS82ECU1086 - For Citrix Hypervisor 8.2 Cumulative Update 1

Who Should Install This Hotfix? This is a hotfix for customers running Citrix Hypervisor 8.2 Cumulative Update 1 and is only available to customers on theCustomer Success Servicesprogram. All customers who are affected by the issues described inCTX693178 - Citrix Hypervisor Security Bulletinshoul...

PT-2025-20696

Name of the Vulnerable Software and Affected Versions: Microsoft UEFI firmware versions prior to June 2025. Description: A vulnerability exists in Microsoft-signed UEFI firmware that allows for the execution of untrusted software due to an arbitrary write flaw. This allows an attacker to control...

PT-2025-20799 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.5 Description: The issue was addressed with improved input sanitization. An app may be able to gain elevated privileges. Recommendations: For versions prior to 15.5, update to macOS Sequoia 15.5 to resolve the issue...

PT-2025-20737 · Woocommerce · Sms Alert Order Notifications – Woocommerce

Name of the Vulnerable Software and Affected Versions: SMS Alert Order Notifications – WooCommerce versions 3.8.2 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injectio...

PT-2025-20800 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.5 Description: A permissions issue was addressed with additional restrictions. This issue may allow an app to access sensitive user data. Recommendations: For versions prior to 15.5, update to macOS Sequoia 15.5 to...

PT-2025-20704 · Sudo-Rs · Sudo-Rs

Name of the Vulnerable Software and Affected Versions: sudo-rs versions prior to 0.2.6 Description: The issue allows users with limited sudo privileges to enumerate the sudoers file, revealing sensitive information about other users' permissions. This can be achieved using the -U flag. Attackers...

PT-2025-20693 · Github · Ozi Action

Name of the Vulnerable Software and Affected Versions: OZI action versions 1.13.2 through 1.13.5 Description: The OZI action, a GitHub Action for publishing releases to PyPI, has a flaw where potentially untrusted data flows into PR creation logic. This allows a malicious actor to construct a...

PT-2025-20792 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.5 Description: A logic issue was addressed with improved checks, which may have allowed an app to access sensitive user data. Recommendations: For versions prior to 15.5, update to macOS Sequoia 15.5 to resolve the...

PT-2025-20796 · Apple · Macos Sequoia +1

Name of the Vulnerable Software and Affected Versions: macOS Sequoia versions prior to 15.5 Description: The issue was addressed with improved handling of caches. The hot corner may unexpectedly reveal a user’s deleted notes. Recommendations: For versions prior to 15.5, update to macOS Sequoia 15...