PT-2025-7538 · Dell · Dell Recoverpoint For Virtual Machines

Name of the Vulnerable Software and Affected Versions: Dell RecoverPoint for Virtual Machines version 6.0.X Description: A command execution vulnerability exists, allowing a low-privileged malicious user with local access to potentially exploit it by running a specific binary. This could result i...

PT-2025-7604

Name of the Vulnerable Software and Affected Versions Erlang OTP versions prior to 25.3.2.18 Erlang OTP versions prior to 26.2.5.9 Erlang OTP versions prior to 27.2.4 Description The issue arises from improper verification of packet size for SFTP packets. When multiple SSH packets are received,...

PT-2025-7602 · Libming · Libming

Name of the Vulnerable Software and Affected Versions: libming version 0.4.8 Description: Multiple memory leaks have been identified in the clip actions parsing functions, specifically parseSWF CLIPACTIONS and parseSWF CLIPACTIONRECORD, in util/parser.c of libming. These leaks allow attackers to...

PT-2025-7291 · Phpjabbers · Phpjabbers Car Park Booking System

Name of the Vulnerable Software and Affected Versions: PHPJabbers Car Park Booking System version 3.0 Description: The issue concerns multiple HTML injection vulnerabilities in the name, plugin sms api key, plugin sms country code, and title parameters. This allows for potential malicious code...

PT-2025-7592 · Phpress · Ppress

Name of the Vulnerable Software and Affected Versions: Ppress version 0.0.9 Description: A stored Cross-Site Scripting vulnerability in the "related recommendations" feature allows a remote attacker to execute arbitrary code via a crafted script to the article.title, article.category, and...

PT-2025-7440 · Nagios · Nagios Xi

Name of the Vulnerable Software and Affected Versions: Nagios XI version 2024R1.2.2 Description: The issue concerns a Cross-Site Request Forgery CSRF attack through the Favorites component, which enables POST-based Cross-Site Scripting XSS. This allows for malicious actions to be performed on...

Elseta Vinci Protocol Analyzer

RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to escalate privileges and perform code execution on the affected system. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability, such...

PT-2025-6737 · Tp Link · Tp-Link Wr840N V6

Name of the Vulnerable Software and Affected Versions: TP-Link WR840N versions 0.9.1 4.16 and earlier Description: The issue is related to a lack of proper authentication procedure in the TP-Link WR840N router's firmware, allowing unauthorized individuals to bypass security restrictions. This can...

PT-2025-6517 · Citrix · Netscaler Console +1

Name of the Vulnerable Software and Affected Versions: NetScaler Console versions 13.1 through 13.1-56.18 NetScaler Console versions 14.1 through 14.1-38.53 NetScaler Agent versions 13.1 through 13.1-56.18 NetScaler Agent versions 14.1 through 14.1-38.53 Description: The issue is related to...

PT-2025-6821 · Churchcrm · Churchcrm

Name of the Vulnerable Software and Affected Versions: ChurchCRM versions 5.13.0 and prior Description: A time-based blind SQL Injection vulnerability exists in the EditEventTypes functionality, allowing an attacker to execute arbitrary SQL queries. The newCountName parameter is directly...

PT-2025-6703 · Unknown +1 · Fluent-Bit +1

Name of the Vulnerable Software and Affected Versions: Fluent Bit version 3.1.9 Description: An issue was discovered in Fluent Bit when the OpenTelemetry input plugin is running and listening on an IP address and port. A user with access to the endpoint can send a packet with Content-Length: 0 an...

PT-2025-16722

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved. The issue is related to the iio backend, where a stack buffer was not properly NULL terminated before being passed to the sscanf...

PT-2025-7202 · Vim +5 · Vim +5

Name of the Vulnerable Software and Affected Versions: Vim versions prior to 9.1.1115 Description: The issue arises when redirecting the output of the :display command to a register that is being displayed, leading to a use-after-free. This occurs because Vim frees the register content before...

PT-2025-6917

Name of the Vulnerable Software and Affected Versions: Mozilla Firefox versions prior to 135.0.1 Description: Memory safety bugs are present in Firefox, with some showing evidence of memory corruption. It is presumed that with enough effort, some of these bugs could be exploited to run arbitrary...

Siemens SiPass Integrated

SUMMARY SiPass integrated is affected by a directory traversal vulnerability in the third-party component DotNetZip. The vulnerability could allow an attacker to execute arbitrary code on the application server, if a specially crafted backup set is used for a restore. Siemens has released a new...

PT-2025-7224 · Unknown · Alexvtn Content Snippet Manager

Name of the Vulnerable Software and Affected Versions: alexvtn Content Snippet Manager versions 1.1.5 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web...

PT-2025-6764

Name of the Vulnerable Software and Affected Versions libarchive versions 3.7.7 and earlier Description The issue is a heap-based buffer over-read in the header gnu longlink function in archive read support format tar.c via a TAR archive. This occurs because the software mishandles truncation in...

PT-2025-6876

Name of the Vulnerable Software and Affected Versions jsonpath-plus versions prior to 10.3.0 Description The issue is caused by improper input sanitization, allowing an attacker to execute arbitrary code on the system by exploiting the unsafe default usage of eval='safe' mode. This is a result of...

CVE-2023-26269

Apache James server version 3.7.3 and earlier provides a JMX management service without authentication by default. This allows privilege escalation by a malicious local user. Administrators are advised to disable JMX, or set up a JMX password. Note that version 3.7.4 onward will set up a JMX...

RCE (Remote Code Execution) org.apache.tomcat:tomcat-catalina Dependency in Confluence Data Center and Server

This Critical severity org.apache.tomcat:tomcat-catalina Dependency vulnerability was introduced in version 6.10 of Confluence Data Center and Server. This org.apache.tomcat:tomcat-catalina Dependency vulnerability, with a CVSS Score of 9.8 and a CVSS Vector of...