CVE-2024-13794

CVE-2024-13794 affects the WordPress plugin WP Ghost (Hide My WP Ghost) and enables unauthenticated disclosure of the hidden login page by improperly restricting the /wp-register.php path in versions up to 5.3.02. The issue is categorized as a Network attack with Medium severity (CVSS v3.1 base s...

PT-2025-16770

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to the fixed version Description A bug in the f2fs file system has been identified, which can cause a panic when fallocation fails for pinfile. This issue occurs due to concurrent pinfile allocation running out of...

PT-2025-6452 · WordPress · Wp Booking Calendar

Name of the Vulnerable Software and Affected Versions: WP Booking Calendar plugin for WordPress versions up to, and including, 10.10 Description: The issue allows unauthenticated attackers to manipulate their confirmed bookings, even after they have been approved, due to the plugin not properly...

PT-2025-6851 · Unknown · Code-Projects Wazifa System

Name of the Vulnerable Software and Affected Versions: code-projects Wazifa System version 1.0 Description: A problematic issue has been found in the searchuser function of the /search resualts.php file. The manipulation of the firstname/lastname argument leads to cross site scripting. It is...

PT-2025-6456 · WordPress · Wp Job Board Pro

Name of the Vulnerable Software and Affected Versions: WP Job Board Pro plugin for WordPress versions up to, and including, 1.2.76 Description: The issue is related to privilege escalation due to the plugin allowing a user to supply the role field when registering, making it possible for...

PT-2025-6693 · Apache · Apache Atlas

Name of the Vulnerable Software and Affected Versions: Apache Atlas versions 2.3.0 and earlier Description: An authenticated user can perform XSS and potentially impersonate another user. This issue allows for cross-site scripting attacks, which could lead to unauthorized actions being taken on...

PT-2025-6845 · Sourcecodester · Sourcecodester Best Church Management

Name of the Vulnerable Software and Affected Versions: SourceCodester Best Church Management Software version 1.1 Description: A critical issue has been identified, affecting unknown code in the file /admin/app/slider crud.php. The manipulation of the del id argument leads to SQL injection. This...

Intel PROSet/Wireless WiFi和Intel Killer WiFi 安全漏洞

Intel PROSet/Wireless WiFi and Intel Killer WiFi are both wireless network card drivers from Intel Corporation USA. A security vulnerability exists in Intel PROSet/Wireless WiFi and Intel Killer WiFi prior to version 23.80, which arises from improper restriction of the communication channel to th...

PT-2025-6931 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability has been resolved in the Linux kernel. The issue is related to the dell uart bl serdev probe function calling devm serdev device open before setting the client operatio...

PT-2025-6141 · Unknown · Mayuri K Employee Management System

Name of the Vulnerable Software and Affected Versions: Mayuri K Employee Management System versions up to 192.168.70.3 Description: A critical issue affects some unknown functionality of the file /hr soft/admin/Update User.php. The manipulation of the id argument leads to SQL injection. The attac...

PT-2025-6255 · Fortinet · Fortisandbox

Name of the Vulnerable Software and Affected Versions: Fortinet FortiSandbox versions 3.0.0 through 3.0.7 Fortinet FortiSandbox versions 3.1.0 through 3.1.5 Fortinet FortiSandbox versions 3.2.0 through 3.2.4 Fortinet FortiSandbox versions 4.0.0 through 4.0.4 Fortinet FortiSandbox versions 4.2.0...

PT-2025-6173 · Wattsense · Wattsense Bridge

Name of the Vulnerable Software and Affected Versions: Wattsense Bridge devices versions prior to BSP 6.4.1 Description: A serial interface can be accessed with physical access to the PCB of Wattsense Bridge devices. After connecting to the interface, access to the bootloader is possible, as well...

PT-2025-6493 · Intel · Intel(R) System Security Report/System Resources Defense

Name of the Vulnerable Software and Affected Versions: IntelR System Security Report and System Resources Defense affected versions not specified Description: The issue is related to improper buffer restrictions in some IntelR System Security Report and System Resources Defense firmware. This cou...

PT-2025-6206 · Siemens · Simatic S7-1200 Cpu +1

Name of the Vulnerable Software and Affected Versions: SIMATIC S7-1200 CPU versions prior to V4.7 SIPLUS S7-1200 CPU versions prior to V4.7 Description: A vulnerability has been identified in the affected devices, where they do not process correctly certain specially crafted packets sent to port...

PT-2025-6137 · Sourcecodester · Sourcecodester Food Menu Manager

Name of the Vulnerable Software and Affected Versions: SourceCodester Food Menu Manager version 1.0 Description: A critical issue has been found in the software, affecting an unknown functionality of the file "endpoint/update.php". This leads to unrestricted upload. The issue can be exploited...

PT-2025-6168 · Solarwinds · Solarwinds Platform

Name of the Vulnerable Software and Affected Versions: SolarWinds Platform versions 2024.4.1 and previous versions Description: The SolarWinds Platform is vulnerable to an information disclosure vulnerability through an error message. Although the disclosed data does not contain sensitive...

PT-2025-6254 · Fortinet · Fortisiem

Name of the Vulnerable Software and Affected Versions: FortiSIEM versions 6.7 through 7.1 Description: The issue is related to multiple improper neutralization of input during web page generation, also known as cross-site scripting. This may allow an authenticated attacker to perform a cross-site...

Security Bulletin: Vulnerability in Spring Core affect watsonx.data

Summary Spring Core is vulnerable to security restriction bypass attacks, to denial of service attacks, and to arbritrary code excution attacks. These could affect watsonx.data. Vulnerability Details CVEID:CVE-2018-1199 DESCRIPTION: Pivotal Spring Security and Spring Framework could allow a remot...

Azure Linux 3.0 Security Update: redis / valkey (CVE-2024-46981)

The version of redis / valkey installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-46981 advisory. - Redis is an open source, in-memory database that persists on disk. An authenticated user May use a...

PT-2025-6108 · Allims · Lab.Online

Name of the Vulnerable Software and Affected Versions: Allims lab.online versions up to 20250201 Description: A critical issue was found in the processing of the file /model/model recuperar senha.php, where the manipulation of the recuperacao argument leads to SQL injection. This issue can be...