PT-2025-30063

Name of the Vulnerable Software and Affected Versions Splashin iOS version 2.0 Description The Splashin iOS application version 2.0 does not enforce server-side interval restrictions for location updates for free-tier users. Recommendations Update to a newer version that contains a fix for this...

PT-2025-30077 · Unknown · Agorum Core Open

Name of the Vulnerable Software and Affected Versions: Agorum core open versions 11.9.2 and 11.10.1 Description: The software stores credentials in plaintext. Recommendations: Apply necessary measures to prevent the storage of credentials in plaintext for Agorum core open version 11.9.2. Apply...

Protecting customers from Octo Tempest attacks across multiple industries

In recent weeks, Microsoft has observed Octo Tempest, also known as Scattered Spider, impacting the airlines sector, following previous activity impacting retail, food services, hospitality organizations, and insurance between April and July 2025. This aligns with Octo Tempest’s typical patterns ...

PT-2025-29708 · WordPress · Malcure Malware Scanner — #1 Toolset For Wordpress Malware Removal

Name of the Vulnerable Software and Affected Versions: Malcure Malware Scanner — 1 Toolset for WordPress Malware Removal plugin for WordPress versions through 16.8 Description: The Malcure Malware Scanner — 1 Toolset for WordPress Malware Removal plugin for WordPress is vulnerable to Arbitrary Fi...

PT-2025-29754 · Unknown · Gymbase Theme Classes

Name of the Vulnerable Software and Affected Versions: GymBase Theme Classes versions n/a through 1.4 Description: GymBase Theme Classes suffers from a SQL Injection issue due to improper neutralization of special elements used in an SQL command. This allows for potential SQL Injection attacks...

PT-2025-29837

Name of the Vulnerable Software and Affected Versions Unbound affected versions not specified Description A multi-vendor cache poisoning vulnerability, named 'Rebirthday Attack', has been discovered in caching resolvers that support EDNS Client Subnet ECS. Unbound is vulnerable when compiled with...

PT-2025-29719

Name of the Vulnerable Software and Affected Versions Eclipse GlassFish versions 7.0.16 and earlier Description Eclipse GlassFish is susceptible to login brute-force attacks due to the absence of restrictions on the number of failed login attempts. Recommendations Apply a configuration to limit t...

PT-2025-29639

Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 8.0.0 through 8.0.42 Oracle MySQL versions 8.4.0 through 8.4.5 Oracle MySQL versions 9.0.0 through 9.3.0 Description This issue affects the Server: Components Services component of Oracle MySQL. A high-privileged attacker...

PT-2025-29657

Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 8.0.0 through 8.0.42 Oracle MySQL versions 8.4.0 through 8.4.5 Oracle MySQL versions 9.0.0 through 9.3.0 Description This issue affects the Server: DDL component of Oracle MySQL Server. A high-privileged attacker with...

PT-2025-29554 · Riverbed Technology · Riverbed Steelcentral Netprofiler +1

Name of the Vulnerable Software and Affected Versions: Riverbed SteelCentral NetProfiler and NetExpress version 10.8.7 Description: An authenticated multi-stage remote code execution issue exists. A SQL injection vulnerability in the /api/common/1.0/login endpoint can be exploited to create a new...

PT-2025-29419 · Unknown · Utt Hiper 840G

Name of the Vulnerable Software and Affected Versions: UTT HiPER 840G versions up to 3.1.1-190328 Description: A critical buffer overflow vulnerability exists in UTT HiPER 840G. The issue is due to the manipulation of the remoteSrcTemp argument within the file /goform/aspRemoteApConfTempSend. The...

PT-2025-29490 · Foxcms · Foxcms

Name of the Vulnerable Software and Affected Versions: FoxCMS version 1.2.6 Description: An arbitrary file upload vulnerability exists in the /controller/PicManager.php component. This allows attackers to execute arbitrary code by uploading a crafted template file. Recommendations: Update to a...

PT-2025-29432 · Phpgurukul · Phpgurukul Online Fire Reporting System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Online Fire Reporting System version 1.2 Description: A critical issue exists in PHPGurukul Online Fire Reporting System 1.2. The vulnerability is due to SQL injection in an unknown part of the /admin/assigned-requests.php file...

PT-2025-29385 · Code Projects · Online Appointment Booking System

Name of the Vulnerable Software and Affected Versions: code-projects Online Appointment Booking System version 1.0 Description: A critical vulnerability exists in code-projects Online Appointment Booking System 1.0. The issue involves a SQL injection vulnerability in an unknown function within th...

PT-2025-29290 · Apache · Apache Sentry

Name of the Vulnerable Software and Affected Versions: Apache Sentry affected versions not specified Description: An authenticated user enrolled device may access a service protected by Sentry even if they are not authorized according to the sentry policy to access that service. This does not...

PT-2025-29305 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server affected versions not specified Description: The vulnerability is a denial-of-service issue. The reason for rejection is stated as 'Not used'. Recommendations: At the moment, there is no information about a newer version th...

PT-2025-29333 · Phpgurukul · Phpgurukul Vehicle Parking Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Vehicle Parking Management System version 1.13 Description: A critical issue exists in PHPGurukul Vehicle Parking Management System version 1.13. The vulnerability is located in an unknown part of the /users/profile.php file...

PT-2025-29085

Name of the Vulnerable Software and Affected Versions LibHTP versions 0.5.50 and below Description LibHTP is a security-aware parser for the HTTP protocol. Versions 0.5.50 and below contain a traffic-induced memory leak that can lead to process memory starvation and loss of visibility...

PT-2025-29108 · Zoom Video Communications · Zoom Clients For Windows

Name of the Vulnerable Software and Affected Versions: Zoom Clients for Windows affected versions not specified Description: A buffer overflow issue exists in certain Zoom Clients for Windows. This issue may allow an authorized user to cause a denial of service through network access...

PT-2025-29137 · Unknown · Mako Server

Name of the Vulnerable Software and Affected Versions: Mako Server versions 2.5 and 2.6 Description: An OS command injection vulnerability exists within the tutorial interface. An unauthenticated attacker can send a crafted PUT request containing arbitrary Lua os.execute code to the...