PT-2025-44317

Name of the Vulnerable Software and Affected Versions BLU-IC2 versions through 1.19.5 BLU-IC4 versions through 1.19.5 Description The software exhibits a non-compliant TLS configuration. Recommendations Update BLU-IC2 to a version later than 1.19.5. Update BLU-IC4 to a version later than 1.19.5...

PT-2025-44700

Name of the Vulnerable Software and Affected Versions Post SMTP – Complete SMTP Solution with Logs, Alerts, Backup SMTP & Mobile App versions prior to 3.6.1 Description The Post SMTP plugin for WordPress has a flaw due to a missing capability check within the construct function. This allows...

PT-2025-44250

Name of the Vulnerable Software and Affected Versions StylemixThemes Masterstudy Elementor Widgets versions through 1.2.4 Description A missing authorization issue exists in StylemixThemes Masterstudy Elementor Widgets. The issue involves incorrectly configured access control security levels,...

PT-2025-44297

Name of the Vulnerable Software and Affected Versions Jenkins Publish to Bitbucket Plugin versions 0.4 and earlier Description A flaw exists in the Jenkins Publish to Bitbucket Plugin where a missing permission check allows attackers possessing Overall/Read permission to enumerate credential IDs...

PT-2025-44240

Name of the Vulnerable Software and Affected Versions Allegro Marketing hpb seo plugin for WordPress versions through 3.0.1 Description The plugin suffers from a Cross-Site Request Forgery CSRF issue, which also allows for Reflected Cross-Site Scripting XSS. The vulnerability exists due to...

PT-2025-44232

Name of the Vulnerable Software and Affected Versions Facebook for WooCommerce versions through 3.5.7 Description A missing authorization issue exists in Facebook for WooCommerce, allowing exploitation of incorrectly configured access control security levels. Recommendations Update Facebook for...

PT-2025-44248

Name of the Vulnerable Software and Affected Versions ThemeSphere SmartMag versions through 10.3.1 Description The software contains a flaw due to improper neutralization of input during web page generation, leading to a Cross-site Scripting issue. This allows for Stored XSS attacks...

PT-2025-44231

Name of the Vulnerable Software and Affected Versions Ays Pro Popup box versions through 5.5.4 Description A Cross-Site Request Forgery CSRF issue exists in Ays Pro Popup box, potentially allowing attackers to perform actions on behalf of authenticated users. This occurs due to insufficient...

Debian dla-4352 : python-authlib-doc - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4352 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4352-1 [email protected]...

PT-2025-44186

Name of the Vulnerable Software and Affected Versions WAVLINK QUANTUM D3G/WL-WN530HG3 firmware version M30HG3 V240730 Description A stack-based buffer overflow exists in WAVLINK QUANTUM D3G/WL-WN530HG3 firmware version M30HG3 V240730, and potentially other WAVLINK models. This allows attackers to...

PT-2025-44208

Name of the Vulnerable Software and Affected Versions Taiga versions 6.8.3 and earlier Description Taiga is an open source project management platform. A remote code execution issue exists in the Taiga API due to unsafe deserialization of untrusted data. An attacker can execute arbitrary code...

PT-2025-47221

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 142.0.7444.59 Description A type confusion issue exists in the V8 component of Google Chrome. This flaw could allow a remote attacker to exploit heap corruption through a specially designed HTML page...

Insertion of Sensitive Information into Log File

Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information into Log File via the updateUser function in LDAPUserImporterImpl.java. A user can read user email addresses in log files. Remediation Upgrade com.liferay:com.liferay.portal.security.ldap.impl to versi...

EUVD-2025-36224

Relative Path Traversal vulnerability in Apache Tomcat. The fix for bug 60013 introduced a regression where the rewritten URL was normalized before it was decoded. This introduced the possibility that, for rewrite rules that rewrite query parameters to the URL, an attacker could manipulate the...

PT-2025-44025

Name of the Vulnerable Software and Affected Versions Constellation versions prior to 2.24.0 Description Constellation is a Confidential Kubernetes platform that utilizes LUKS2-encrypted volumes for persistent storage. When opening an encrypted storage device, the system employs the crypt activat...

PT-2025-43935

Name of the Vulnerable Software and Affected Versions TheGreenBow VPN versions 7.5 through 7.6 Description The software does not properly validate OCSP certificates. During the IKEv2 authentication process, the VPN client establishes a tunnel even if an OCSP response is not received or if the OCS...

Apache Tomcat 11.0.0.M1 < 11.0.11 multiple vulnerabilities

The version of Tomcat installed on the remote host is prior to 11.0.11. It is, therefore, affected by multiple vulnerabilities as referenced in the fixedinapachetomcat11.0.11security-11 advisory. - Relative Path Traversal vulnerability in Apache Tomcat. The fix for bug 60013 introduced a regressi...

PT-2025-43876

Name of the Vulnerable Software and Affected Versions Bdtask Flight Booking Software versions prior to 3.1 Description A security issue exists in Bdtask Flight Booking Software. The issue involves unrestricted upload capabilities through an unknown functionality within the...

PT-2025-43913

Name of the Vulnerable Software and Affected Versions code-projects Online Event Judging System version 1.0 Description A flaw exists in code-projects Online Event Judging System that allows for SQL injection. This issue is related to the /add judge.php file and manipulation of the fullname...

Apache Tomcat 10.1.0.M1 < 10.1.47

The version of Tomcat installed on the remote host is prior to 10.1.47. It is, therefore, affected by a vulnerability as referenced in the fixedinapachetomcat10.1.47security-10 advisory. - Improper Resource Shutdown or Release vulnerability in Apache Tomcat. If an error occurred including exceedi...