PT-2025-18759 · WordPress · Formality

Name of the Vulnerable Software and Affected Versions: Formality plugin for WordPress versions up to, and including, 1.5.8 Description: The issue is related to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping. This allows authenticated attackers with...

PT-2025-18758 · WordPress · Taxonomy Chain Menu

Name of the Vulnerable Software and Affected Versions: Taxonomy Chain Menu plugin for WordPress versions up to, and including, 1.0.8 Description: The issue is related to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping on user-supplied attributes in the pn...

PT-2025-18736

Name of the Vulnerable Software and Affected Versions iSourcecode Gym Management System version 1.0 Description A critical vulnerability was found in the iSourcecode Gym Management System. This issue affects the file /ajax.php?action=save member, where the manipulation of the umember id argument...

PT-2025-18741 · WordPress · Kiwichat Nextclient

Name of the Vulnerable Software and Affected Versions: KiwiChat NextClient plugin for WordPress versions up to, and including, 6.2 Description: The issue is related to Stored Cross-Site Scripting via the url parameter due to insufficient input sanitization and output escaping. This allows...

PT-2025-18913 · Unknown · Phpgurukul Online Birth Certificate System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Online Birth Certificate System version 1.0 Description: A critical issue has been discovered, affecting the /admin/search.php file. The manipulation of the searchdata argument leads to SQL injection. This issue can be exploited...

PT-2025-18743 · WordPress · Gmapsmania

Name of the Vulnerable Software and Affected Versions: GmapsMania plugin for WordPress versions up to, and including, 1.1 Description: The issue is related to Stored Cross-Site Scripting via the plugin's gmap shortcode due to insufficient input sanitization and output escaping on user-supplied...

PT-2025-18907 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to the fixed version Description: The issue is related to an off-by-one fsmap error on 1k block filesystems in the Linux kernel. It occurs when the ioctl function is called with the FS IOC GETFSMAP command, and the...

PT-2025-18863 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.15.36 Description: A vulnerability in the Linux kernel has been resolved, where a sleepable memory allocation was made from an atomic context in the Xilinx firmware. The issue was discovered using lockdep and ...

AZL-63067 CVE-2025-46569 affecting package opa for versions less than 0.63.0-2

Open Policy Agent OPA is an open source, general-purpose policy engine. Prior to version 1.4.0, when run as a server, OPA exposes an HTTP Data API for reading and writing documents. Requesting a virtual document through the Data API entails policy evaluation, where a Rego query containing a singl...

CVE-2025-23178

CWE-923: Improper Restriction of Communication Channel to Intended Endpoints...

CVE-2025-46343

n8n is a workflow automation platform. Prior to version 1.90.0, n8n is vulnerable to stored cross-site scripting XSS through the attachments view endpoint. n8n workflows can store and serve binary files, which are accessible to authenticated users. However, there is no restriction on the MIME typ...

PT-2025-18714 · Sematell · Sematell Replyone

Name of the Vulnerable Software and Affected Versions: Sematell ReplyOne version 7.4.3.0 Description: The issue allows Server-Side Request Forgery SSRF through the application server API. This means an attacker could potentially manipulate the server into making unauthorized requests...

PT-2025-18375 · Unknown · Phpgurukul Boat Booking System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Boat Booking System version 1.0 Description: A critical issue was found in the PHPGurukul Boat Booking System, affecting the file /admin/booking-details.php. The manipulation of the Status argument leads to sql injection. The attac...

PT-2025-18346 · NetGear · Netgear Ex6200

Name of the Vulnerable Software and Affected Versions: Netgear EX6200 version 1.0.3.94 Description: A critical issue has been found in the Netgear EX6200, affecting the function sub 3D0BC. The manipulation of the host argument leads to a buffer overflow. This issue can be exploited remotely. The...

PT-2025-18386 · Unknown · Phpgurukul Land Record System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Land Record System version 1.0 Description: A critical issue has been found in the processing of the file /admin/aboutus.php. The manipulation of the pagetitle argument leads to SQL injection. The attack may be initiated remotely...

PT-2025-18384 · WordPress · Wordpress Simple Shopping Cart

Name of the Vulnerable Software and Affected Versions: WordPress Simple Shopping Cart plugin versions up to, and including, 5.1.3 Description: The issue is related to Stored Cross-Site Scripting via the plugin's 'wp cart button' shortcode due to insufficient input sanitization and output escaping...

PT-2025-18715 · Ibm · Ibm Mq Operator +2

Name of the Vulnerable Software and Affected Versions: IBM MQ Operator LTS versions 2.0.0 through 2.0.29 IBM MQ Operator CD versions 3.0.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1, 3.5.0, 3.5.1 IBM MQ Operator SC2 versions 3.2.0 through 3.2.10 Description: A client connecting to an MQ Queue Manager can...

PT-2025-18499 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.1.0-rc2-syzkaller-00073-g88619e77b33d Description: A vulnerability has been resolved in the Linux kernel related to missing SIGTRAP checking. The issue occurs when some events not associated with progress in t...

PT-2025-18367 · WordPress · The Team Members – Best Wordpress Team Plugin

Name of the Vulnerable Software and Affected Versions: The Team Members – Best WordPress Team Plugin with Team Slider, Team Showcase & Team Builder plugin for WordPress versions up to, and including, 3.4.0 Description: The issue is related to Stored Cross-Site Scripting via Social Link icons due ...

PT-2025-18368 · WordPress · Nautic Pages

Name of the Vulnerable Software and Affected Versions: Nautic Pages plugin for WordPress versions up to, and including, 2.0 Description: The issue is related to Stored Cross-Site Scripting via the plugin's 'np marinetraffic map' shortcode due to insufficient input sanitization and output escaping...