PT-2025-18563 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.1.0-rc2 Description: A slab-out-of-bounds write bug was found in the udf find entry function. This issue was reported by Syzbot and is related to a capacity change from 0 to 2048. The bug is caused by a write ...

PT-2025-18609 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.10.0 Description: A use-after-free issue has been identified in the Linux kernel, specifically in the ftrace subsystem. This issue occurs when the ftrace shutdown function is called, and the FTRACE UPDATE CALL...

PT-2025-18365 · WordPress · Wp Amaps

Name of the Vulnerable Software and Affected Versions: WP Maps versions prior to 4.7.2 Description: The WP Maps WordPress plugin does not sanitise and escape some of its Map settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the...

PT-2025-18703 · Tenda · Tenda Rx2 Pro

Name of the Vulnerable Software and Affected Versions: Tenda RX2 Pro version 16.03.30.14 Description: The issue is related to a lack of access controls in the 'ate' management binary, allowing an unauthenticated remote attacker to make unauthorized configuration changes to any router where 'ate' ...

PT-2025-18659 · Sourcecodester · Sourcecodester Online Eyewear Shop

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Eyewear Shop version 1.0 Description: A critical vulnerability was found in the function delete cart of the file /oews/classes/Master.php?f=delete cart. The manipulation of the argument ID leads to SQL injection. The...

PT-2025-18685

Name of the Vulnerable Software and Affected Versions Stirling-PDF versions prior to 0.45.0 Description Stirling-PDF is a locally hosted web application that allows users to perform various operations on PDF files. The application is vulnerable to SSRF-induced arbitrary file read due to WeasyPrin...

PT-2025-18502 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability has been resolved in the Linux kernel. The issue concerns the sgx validate offset length function, which verifies the offset and length arguments provided by userspace...

PT-2025-18678 · Tenda · Tenda W20E

Name of the Vulnerable Software and Affected Versions: Tenda W20E version 15.11.0.6 Description: A command injection issue was found in the formSetDebugCfg function through the level parameter. This issue allows attackers to execute arbitrary commands via a manipulated request. Recommendations: F...

PT-2025-18358 · WordPress · Projectopia

Name of the Vulnerable Software and Affected Versions: The Projectopia – WordPress Project Management plugin for WordPress versions up to, and including, 5.1.16 Description: The issue allows unauthorized modification of data, potentially leading to a denial of service. This is due to a missing...

PT-2025-18681 · Auth0 · Auth0 Account Link Extension

Name of the Vulnerable Software and Affected Versions: Auth0 Account Link Extension versions 2.3.4 through 2.6.6 Description: The issue allows users to supply a forged token, potentially accessing user information without proper authorization, due to the lack of verification of the signature of t...

PT-2025-18716 · Msp360 · Msp360 Backup

Name of the Vulnerable Software and Affected Versions: MSP360 Backup version 4.3.1.115 Description: An insecure file system permissions vulnerability in MSP360 Backup allows a low privileged user to execute commands with root privileges in the 'Online Backup' folder. Recommendations: Upgrade to...

PT-2025-18677 · Tenda · Tenda W20E

Name of the Vulnerable Software and Affected Versions: Tenda W20E version 15.11.0.6 Description: A command injection issue was discovered in the formSetDebugCfg function via the enable parameter. This issue allows attackers to execute arbitrary commands through a manipulated request...

PT-2025-18699 · Tenda · Tenda Rx2 Pro

Name of the Vulnerable Software and Affected Versions: Tenda RX2 Pro version 16.03.30.14 Description: The issue is related to a lack of input validation/sanitization in the setLanCfg API endpoint in httpd, allowing a remote attacker authorized to the web management portal to gain root shell acces...

PT-2025-18496 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.1.0-rc4 Description: A vulnerability has been resolved in the Linux kernel related to kprobes. The issue occurs when the post handler of an aggrprobe is cleared in the unregister kprobe top function, but the...

PT-2025-18553 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A possible memory leak in the Linux kernel has been resolved. The issue occurred in the siox device add function when device register returned an error. To fix this, put device is call...

PT-2025-18585 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.11 Description: A vulnerability has been resolved in the Linux kernel. The issue is related to the phy: ralink: mt7621-pci driver, where a sentinel was added to the quirks table. With the correction of the...

PT-2025-18384 · WordPress · Wordpress Simple Shopping Cart

Name of the Vulnerable Software and Affected Versions: WordPress Simple Shopping Cart plugin versions up to, and including, 5.1.3 Description: The issue is related to Stored Cross-Site Scripting via the plugin's 'wp cart button' shortcode due to insufficient input sanitization and output escaping...

PT-2025-18488 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A bug in the Linux kernel's dm ioctl has been resolved. The issue occurs when the list versions function estimates the required space using the dm target iteratelist version get needed...

PT-2025-18531 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A race condition issue has been resolved in the Linux kernel related to KCM sockets. The sk-sk receive queue is protected by the skb queue lock, but for KCM sockets, the RX path takes...

PT-2025-18569

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A security issue has been identified in the Linux kernel, specifically related to the riscv process, where the s12 array in thread struct may contain random kernel memory content. This...