PT-2025-30988 · Roothub · Roothub

Name of the Vulnerable Software and Affected Versions: Roothub versions up to 2.6 Description: A vulnerability exists in Roothub that allows for cross site scripting. The issue is located in the Edit function within the src/main/java/cn/roothub/web/admin/SystemConfigAdminController.java file. The...

PT-2025-30973 · Campcodes · Best Courier Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Courier Management System version 1.0 Description: A critical issue exists in Campcodes Courier Management System version 1.0 due to a SQL injection vulnerability. The vulnerability is located in an unknown functionality of the /edi...

LG Innotek Camera Model LNV5110R

RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to gain administrative access to the device. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability, such as: Minimize network exposure...

PT-2025-30846 · Etsi · Etsi Open-Source Mano

Name of the Vulnerable Software and Affected Versions: ETSI Open-Source MANO OSM versions 14.x through 15.x Description: The software does not impose restrictions on authentication attempts performed by an administrator user, potentially allowing a remote attacker to escalate privileges...

PT-2025-30883 · Sitecore · Sitecore Jss React Sample Application

Name of the Vulnerable Software and Affected Versions: Sitecore JSS React Sample Application versions 11.0.0 through 14.0.1 Description: An information disclosure issue exists that may allow page content intended for one user to be displayed to another user. Recommendations: Sitecore JSS React...

PT-2025-30927

Name of the Vulnerable Software and Affected Versions Tableau Server versions prior to 2025.1.3 Tableau Server versions prior to 2024.2.12 Tableau Server versions prior to 2023.3.19 Description A Server-Side Request Forgery SSRF vulnerability exists in Tableau Server on Windows and Linux systems...

PT-2025-30893

Name of the Vulnerable Software and Affected Versions Sitecore Experience Manager XM versions 9.2 Initial Release through 10.4 Initial Release Sitecore Experience Platform XP versions 9.2 Initial Release through 10.4 Initial Release Sitecore Experience Commerce XC versions 9.2 Initial Release...

PT-2025-30912 · Xwiki · Xwiki

Name of the Vulnerable Software and Affected Versions: xWiki versions prior to 16.10.6 xWiki versions prior to 17.3.0-rc-1 Description: The application allows execution of arbitrary SQL queries in Oracle databases using functions like DBMS XMLGEN or DBMS XMLQUERY. The XWikisearchDocuments API doe...

PT-2025-30847 · Unknown · Cloudclassroom-Php Project

Name of the Vulnerable Software and Affected Versions: CloudClassroom-PHP Project version 1.0 Description: The CloudClassroom-PHP Project is susceptible to a SQL injection issue through the viewid parameter. Recommendations: As a temporary workaround, consider restricting access to the viewid...

PT-2025-30889

Name of the Vulnerable Software and Affected Versions Gardyn version 4 Description An issue in Gardyn 4 allows a remote attacker possessing the corresponding SSH private key to gain remote root access to affected devices. Recommendations Ensure the SSH private key is securely stored and access is...

PT-2025-30941 · Hax Cms +1 · Hax Cms +2

Name of the Vulnerable Software and Affected Versions: HAX CMS versions 11.0.8 and below haxcms-php HAX CMS versions 11.0.13 and below haxcms-nodejs Description: The HAX CMS API endpoints do not perform authorization checks when interacting with resources. Both the JavaScript and PHP versions of...

PT-2025-30939 · 1000 Projects · Best Courier Management System

Name of the Vulnerable Software and Affected Versions: 1000 Projects ABC Courier Management System version 1.0 Description: A critical issue exists in 1000 Projects ABC Courier Management System version 1.0. The vulnerability is located in an unknown functionality of the file /Add reciver.php...

CISA Recommends Segmentation & Zero Trust to Combat Interlock Ransomware

...

Mitsubishi Electric CNC Series (Update B)

RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to execute malicious code by getting setup-launcher to load a malicious DLL. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability,...

PT-2025-30683 · Wwbn · Avideo

Name of the Vulnerable Software and Affected Versions: WWBN AVideo versions 14.4 and dev master commit 8a8954ff Description: A cross-site scripting xss vulnerability exists in the videosList page parameter functionality. A specially crafted HTTP request can lead to arbitrary Javascript execution,...

PT-2025-30694 · Phpgurukul · Autotaxi Stand Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Taxi Stand Management System version 1.0 Description: A cross site scripting issue exists due to the manipulation of the registrationnumber/licensenumber argument in the /admin/new-autoortaxi-entry-form.php file. The attack can be...

PT-2025-30673 · Ibm · Ibm Mq Operator

Name of the Vulnerable Software and Affected Versions: IBM MQ Operator versions 2.0.0 through 2.0.29 IBM MQ Operator versions 3.0.0 through 3.1.3 IBM MQ Operator versions 3.2.0 through 3.2.13 IBM MQ Operator versions 3.3.0 IBM MQ Operator versions 3.4.0 through 3.4.1 IBM MQ Operator versions 3.5....

GitLab 17.0 < 18.0.5 / 18.1 < 18.1.3 / 18.2 < 18.2.1 (CVE-2025-4976)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - Exposure of Sensitive Information Due to Incompatible Policies in GitLab CVE-2025-4976 Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported...

PT-2025-30682 · Tenda · Tenda Ac8V4

Name of the Vulnerable Software and Affected Versions: Tenda AC8V4 version V16.03.34.06 Description: The device contains a heap overflow at the /goform/GetParentControlInfo API endpoint. Manipulation of the mac parameter leads to a heap-based buffer overflow. Recommendations: Apply a newer versio...

PT-2025-30510 · WordPress · Valuation Calculator

Name of the Vulnerable Software and Affected Versions: Valuation Calculator plugin for WordPress versions up to and including 1.3.2 Description: The Valuation Calculator plugin for WordPress is susceptible to Stored Cross-Site Scripting through the link parameter due to insufficient input...