PT-2025-15810 · Unknown · Vite Coupon

Name of the Vulnerable Software and Affected Versions: Vite Coupon versions 1.0.7 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Remote Code Inclusion. This means an attacker can potentially execute malicious code on a remote server, which could...

PT-2025-15766 · WordPress · Wp-Planification

Name of the Vulnerable Software and Affected Versions: WP-Planification versions prior to 2.3.1 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker could potentially trick a user into performing unintended actions on ...

PT-2025-15840 · Totvs · Totvs Framework

Name of the Vulnerable Software and Affected Versions: TOTVS Framework Linha Protheus version 12.1.2310 Description: An issue in the software allows attackers to bypass multi-factor authentication MFA via a crafted websocket message. Recommendations: For version 12.1.2310, consider disabling...

PT-2025-15819 · Unknown · Quantumcloud Seo Help

Name of the Vulnerable Software and Affected Versions: QuantumCloud SEO Help versions n/a through 6.6.0 Description: The issue is related to a Server-Side Request Forgery SSRF vulnerability, which allows for Server Side Request Forgery. Recommendations: For versions n/a through 6.6.0, update to a...

PT-2025-15694 · Progress · Sitefinity

Name of the Vulnerable Software and Affected Versions: Sitefinity versions 14.0 through 14.3 Sitefinity versions 14.4 before 14.4.8145 Sitefinity versions 15.0 before 15.0.8231 Sitefinity versions 15.1 before 15.1.8332 Sitefinity versions 15.2 before 15.2.8429 Description: The issue is related to...

PT-2025-15838

Name of the Vulnerable Software and Affected Versions: Apache File Upload versions affected versions not specified TIBCO Spotfire versions affected versions not specified Description: The issue allows attackers to inject malicious code, potentially gaining control over the system executing these...

PT-2025-15701 · Verydows · Verydows

Name of the Vulnerable Software and Affected Versions: verydows version 2.0 Description: The issue is related to insecure permissions, allowing a remote attacker to execute arbitrary code by uploading a specific file type. This can be achieved through the action of loading a particular type of...

PT-2025-15736 · Essential Marketer · Essential Breadcrumbs

Name of the Vulnerable Software and Affected Versions: Essential Breadcrumbs versions 1.1.1 and earlier Description: A Cross-Site Request Forgery CSRF issue in Essential Marketer Essential Breadcrumbs allows Privilege Escalation. Recommendations: For Essential Breadcrumbs versions 1.1.1 and...

PT-2025-16156 · Palo Alto Networks · Prisma Access Browser

Name of the Vulnerable Software and Affected Versions: Prisma Access Browser affected versions not specified Description: The issue concerns inappropriate control behavior in the Prisma Access Browser. There is no information provided about the estimated number of potentially affected devices...

PT-2025-15849 · Juniper Networks · Junos Evolved +1

Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 21.2R3-S7 Junos OS versions 21.4 prior to 21.4R3-S4 Junos OS versions 22.2 prior to 22.2R3-S1 Junos OS versions 22.3 prior to 22.3R3-S1 Junos OS versions 22.4 prior to 22.4R2-S2, 22.4R3 Junos OS Evolved versions pri...

PT-2025-15693 · Apache · Apache Pulsar

Name of the Vulnerable Software and Affected Versions: Apache Pulsar IO versions prior to 3.0.11 Apache Pulsar IO versions prior to 3.3.6 Apache Pulsar IO versions prior to 4.0.4 Description: The issue affects Apache Pulsar IO's Apache Kafka connectors, where sensitive configuration properties ar...

PT-2025-15768 · Waymark · Waymark

Name of the Vulnerable Software and Affected Versions: Waymark versions n/a through 1.5.2 Description: The issue is related to a Server-Side Request Forgery SSRF vulnerability, which allows for Server Side Request Forgery. Recommendations: For versions n/a through 1.5.2, update to a version that...

PT-2025-15755

Name of the Vulnerable Software and Affected Versions: Koa versions prior to 2.16.1 Koa versions prior to 3.0.0-alpha.5 Description: The issue arises when passing untrusted user input to ctx.redirect, which can execute JavaScript code on the user's device, even after sanitizing the input...

PT-2025-15699 · Unknown · Jerryhanjj Erp

Name of the Vulnerable Software and Affected Versions: jerryhanjj ERP version 1.0 Description: The issue concerns SQL injection in the set password function located in application/controllers/home.php. This allows for potential manipulation of database queries. Recommendations: For jerryhanjj ERP...

Microsoft Windows Multiple Vulnerabilities (KB5055528)

This host is missing an important security update according to Microsoft KB5055528 SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

PT-2025-15668 · Tiki · Tiki

Name of the Vulnerable Software and Affected Versions: Tiki versions prior to 28.3 Tiki versions prior to 21.12 Tiki versions prior to 24.8 Tiki versions prior to 27.2 Description: The issue concerns the wikiplugin includetpl in lib/wiki-plugins/wikiplugin includetpl.php in Tiki, which mishandles...

PT-2025-15664 · Lucee · Lucee

Name of the Vulnerable Software and Affected Versions: Lucee versions prior to 5.4.7.3 LTS Lucee versions prior to 6.1.1.118 Description: The issue is related to a protection mechanism failure. When an attacker can place files on the server, this failure can allow the attacker to run code that...

PT-2025-15537 · Microsoft · Windows Local Security Authority +1

Name of the Vulnerable Software and Affected Versions: Windows Local Security Authority LSA affected versions not specified Description: A heap-based buffer overflow issue allows an authorized attacker to elevate privileges locally. This elevation-of-privilege issue can be exploited by attackers ...

PT-2025-15571 · Microsoft · Office

Name of the Vulnerable Software and Affected Versions: Microsoft Office affected versions not specified Description: The issue allows an unauthorized attacker to execute code locally, potentially enabling them to affect the system. This is due to a use after free vulnerability in Microsoft Office...

PT-2025-15429 · Fortinet · Fortianalyzer +1

Name of the Vulnerable Software and Affected Versions: FortiAnalyzer versions 7.6.1 and below FortiAnalyzer versions 7.4.5 and below FortiAnalyzer versions 7.2.8 and below FortiAnalyzer versions 7.0.13 and below FortiManager versions 7.6.1 and below FortiManager versions 7.4.5 and below...