PT-2025-26195 · Versa · Versa Director

Name of the Vulnerable Software and Affected Versions: Versa Director SD-WAN orchestration platform affected versions not specified Description: The Versa Director SD-WAN orchestration platform provides direct web-based access to uCPE virtual machines through the Director GUI. By default, the...

PT-2025-26136 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.19-rc5+ 1052 Description: A warning has been fixed in the Linux kernel for MIPS architecture when CONFIG CPUMASK OFFSTACK and CONFIG DEBUG PER CPU MAPS are selected. The issue generated a runtime warning while...

PT-2025-25769 · Lychee · Lychee

Name of the Vulnerable Software and Affected Versions: Lychee versions 6.6.6 through 6.6.9 Description: The issue affects Lychee, a free photo-management tool. An attacker can exploit a path traversal vulnerability in SecurePathController.php to leak local files, including environment variables,...

PT-2025-25858 · WordPress · Csv Me

Name of the Vulnerable Software and Affected Versions: CSV Me plugin for WordPress versions up to, and including, 2.0 Description: The issue is related to insufficient file type validation in the csv me options page function, allowing authenticated attackers with Administrator-level access and...

PT-2025-25625

Name of the Vulnerable Software and Affected Versions frdel Agent-Zero versions up to 0.8.4 Description A path traversal issue affects the image get function in the /python/api/image get.py file, caused by the manipulation of the path argument. Recommendations For frdel Agent-Zero versions up to...

PT-2025-25644 · WordPress · The Poll

Name of the Vulnerable Software and Affected Versions: The Poll, Survey & Quiz Maker Plugin by Opinion Stage plugin for WordPress versions up to, and including, 19.9.0 Description: The issue is related to a misconfigured capability check on several functions, allowing authenticated attackers with...

PT-2025-25696 · Unknown · Thembay Nika

Name of the Vulnerable Software and Affected Versions: thembay Nika versions 1.2.8 and earlier Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion' vulnerability, which allows PHP Local File...

PT-2025-25697 · Unknown · Thembay Ruza

Name of the Vulnerable Software and Affected Versions: themBay Ruza versions 1.0.0 through 1.0.7 Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion' vulnerability, which allows PHP Local File...

PT-2025-25608 · WordPress · Blog2Social

Name of the Vulnerable Software and Affected Versions: Blog2Social: Social Media Auto Post & Scheduler plugin for WordPress versions up to, and including, 8.4.4 Description: The issue is related to SQL Injection via the prgSortPostType parameter due to insufficient escaping on the user-supplied...

PT-2025-25612 · Unknown · Phpgurukul Hospital Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Hostel Management System version 1.0 Description: A critical issue affects the processing of the file /includes/login.inc.php, where the manipulation of the student roll no argument leads to SQL injection. The attack can be initiat...

PT-2025-25736 · Unknown · Cubewp Framework

Name of the Vulnerable Software and Affected Versions: CubeWP Framework versions 1.1.23 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows DOM-Based XSS in the CubeWP Framework...

PT-2025-25614 · Unknown · Phpgurukul Nipah Virus Testing Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Nipah Virus Testing Management System version 1.0 Description: A critical issue was discovered in the PHPGurukul Nipah Virus Testing Management System. The problem affects an unknown functionality of the file /bwdates-report-ds.php...

PT-2025-25613 · Unknown · Phpgurukul Hospital Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Hostel Management System version 1.0 Description: A critical issue was found in the PHPGurukul Hostel Management System, affecting an unknown function of the file /includes/login-hm.inc.php. The manipulation of the Username argumen...

PT-2025-25735 · Cyberchimps · Cyberchimps Responsive Blocks

Name of the Vulnerable Software and Affected Versions: CyberChimps Responsive Blocks versions 2.0.5 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacke...

The vulnerability of the IBM Aspera Shares software lies in the incorrect limitation on XML references to external objects, which allows a hacker to expose confidential information.

The vulnerability of the IBM Aspera Shares software relates to incorrect restrictions on XML references to external objects. Exploiting this vulnerability could allow a malicious actor, operating remotely, to expose confidential information...

PT-2025-27959

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to the fixed version Description: A null pointer dereference issue has been identified in the Linux kernel when acquiring the remote IP of an Ethernet bearer. The issue can be reproduced by creating a tun interface...

PT-2025-25715 · Unknown · Anh Tran Slim Seo

Name of the Vulnerable Software and Affected Versions: Anh Tran Slim SEO versions n/a through 4.5.4 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. Recommendations...

PT-2025-25676 · Unknown · Smart Notification

Name of the Vulnerable Software and Affected Versions: Smart Notification versions n/a through 10.3 Description: The issue is related to an SQL Injection vulnerability, specifically a Blind SQL Injection, due to the improper neutralization of special elements used in an SQL command. This allows a...

OpenNext for Cloudflare (opennextjs-cloudflare) has a SSRF vulnerability via /_next/image endpoint

A Server-Side Request Forgery SSRF vulnerability was identified in the @opennextjs/cloudflare package. The vulnerability stems from an unimplemented feature in the Cloudflare adapter for Open Next, which allowed unauthenticated users to proxy arbitrary remote content via the /next/image endpoint...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: Tracing: Do not allow mmap of persistent ring buffers. When attempting to mmap a trace instance buffer that is attached to reservemem, it would cause a crash: BUG: Unable to handle a page fault for address: ffffe97bd00025c8 PF:...