PT-2025-9035 · Infoblox · Infoblox Nios

Name of the Vulnerable Software and Affected Versions: Infoblox NIOS versions prior to 8.6.5 Description: The issue is related to improper authentication for Grids, which could potentially allow unauthorized access. Recommendations: For versions prior to 8.6.5, update to version 8.6.5 or later to...

PT-2025-8796 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been identified, specifically in the powerpc/pseries/iommu component. The issue arises when a user attempts to use the same vfio container used ...

PT-2025-7614 · Unknown · Notfound Chaty Pro

Name of the Vulnerable Software and Affected Versions: Chaty Pro versions n/a through 3.3.3 Description: The issue affects Chaty Pro, allowing an attacker to upload malicious files that can be used to take control of a website. This is due to an Unrestricted Upload of File with Dangerous Type...

PT-2025-7581 · Itsourcecode · Itsourcecode Simple Chatbox

Name of the Vulnerable Software and Affected Versions: ITSourcecode Simple ChatBox versions up to 1.0 Description: A vulnerability was found in ITSourcecode Simple ChatBox, affecting unknown code of the file /del.php. The attack can use SQL injection to obtain sensitive data. Recommendations: For...

PT-2025-26483

Name of the Vulnerable Software and Affected Versions: DNN formerly DotNetNuke versions 7.0.0 through 10.0.0 Description: The issue allows a specially crafted request or proxy to bypass the design of DNN Login IP Filters, enabling login attempts from IP addresses not in the allow list. This has...

PT-2025-9191 · Tenda · Tenda Ac7 1200M

Name of the Vulnerable Software and Affected Versions: Tenda AC7 1200M version 15.03.06.44 Description: A critical vulnerability was found in the TendaTelnet function of the file /goform/telnet. The manipulation of the lan ip argument leads to os command injection. It is possible to launch the...

PT-2025-6555 · WordPress · Wp-Formassembly

Name of the Vulnerable Software and Affected Versions: WP-FormAssembly plugin for WordPress versions up to, and including, 2.0.11 Description: The issue is related to Stored Cross-Site Scripting via the plugin's 'formassembly' shortcode due to insufficient input sanitization and output escaping o...

PT-2025-14358

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A hang issue in the kdump kernel has been resolved when running on Hyper-V Gen 2 VMs. The problem occurs when the hyperv fb driver moves the framebuffer to a different MMIO address due t...

PT-2025-7120 · Unknown · Feminer Wms

Name of the Vulnerable Software and Affected Versions: FeMiner wms version 1.0 Description: The issue allows a remote attacker to obtain sensitive information. This is achieved via the "inquire inout item.php" component. Recommendations: For FeMiner wms version 1.0, consider restricting access to...

CVE-2024-46910 Apache Atlas: An authenticated user can perform XSS and potentially impersonate another user

An authenticated user can perform XSS and potentially impersonate another user. This issue affects Apache Atlas versions 2.3.0 and earlier. Users are recommended to upgrade to version 2.4.0, which fixes the issue...

CVE-2024-13770 Puzzles | WP Magazine / Review with Store WordPress Theme + RTL <= 4.2.4 - Unauthenticated PHP Object Injection

The Puzzles | WP Magazine / Review with Store WordPress Theme + RTL theme for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 4.2.4 via deserialization of untrusted input 'viewmoreposts' AJAX action. This makes it possible for unauthenticated attackers to...

PT-2025-7245

Name of the Vulnerable Software and Affected Versions libxml2 versions 2.12.10 and earlier, 2.13.x versions prior to 2.13.6 Description The issue is related to a NULL pointer dereference in xmlPatMatch in pattern.c. This is a general information about the problem, and no specific details about...

PT-2025-7070 · Mediawiki · Lakeus

Name of the Vulnerable Software and Affected Versions: Lakeus versions 1.8.0 through 1.3.1 Lakeus versions prior to 1.3.1+REL1.39 Lakeus versions prior to 1.3.1+REL1.42 Lakeus versions prior to 1.4.0 Description: Lakeus is a simple skin made for MediaWiki. It is vulnerable to stored cross-site...

PAN-OS: Authentication Bypass in the Management Web Interface

An authentication bypass in the in the management web interface of Palo Alto Networks PAN-OS software enables an unauthenticated attacker with network access to the management web interface to bypass the authentication otherwise required by the PAN-OS management web interface and invoke certain P...

PT-2025-7081 · Unknown · Phpgurukul Daily Expense Tracker System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Daily Expense Tracker System version 1.1 Description: The issue concerns SQL Injection in the /dets/add-expense.php endpoint via the dateexpense parameter. This allows for potential exploitation of the system. No information is...

Intel® SPS Firmware Advisory

Summary: A potential security vulnerability in some Intel® Server Platform Services Intel® SPS firmware may allow denial of service. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-25571 Description: Improper input validation in...

PT-2025-6328

Name of the Vulnerable Software and Affected Versions: Microsoft Office affected versions not specified Description: The issue allows remote attackers to execute arbitrary code and affect the system. This is a remote code execution issue in Microsoft Office. Recommendations: At the moment, there ...

PT-2025-6338

Name of the Vulnerable Software and Affected Versions Windows Disk Cleanup Tool affected versions not specified Description A critical issue exists within the Windows Disk Cleanup Tool cleanmgr.exe that allows for privilege escalation to SYSTEM privileges. The flaw involves errors in handling...

PT-2025-17671

Name of the Vulnerable Software and Affected Versions fig2dev version 3.2.9a Description The issue is related to a segmentation fault in the fig2dev software, specifically in version 3.2.9a. This fault can be triggered by an attacker through local input manipulation via the genge itp spline...

PT-2025-5881 · Unknown · Webfilesys

Name of the Vulnerable Software and Affected Versions: WebFileSys version 2.31.0 Description: An issue in the relPath parameter allows attackers to perform directory traversal via a crafted HTTP request. By injecting traversal payloads into the relPath parameter, attackers can manipulate file pat...