PT-2025-27467 · Akamai · Akamai Cloudtest

Name of the Vulnerable Software and Affected Versions: Akamai CloudTest versions prior to 60 2025.06.02 12988 Description: Akamai CloudTest is susceptible to an XML External Entity XXE injection flaw. This allows for file inclusion by manipulating XML input, potentially leading to unauthorized...

PT-2025-23536 · Mybb · Mybb

Name of the Vulnerable Software and Affected Versions: MyBB versions prior to 1.8.39 Description: The search component in MyBB does not validate permissions correctly, allowing attackers to determine the existence of hidden threads, including draft, unapproved, or soft-deleted threads, by analyzi...

PT-2025-23511 · Solarwinds · Solarwinds Dameware Mini Remote Control

Name of the Vulnerable Software and Affected Versions: SolarWinds Dameware Mini Remote Control versions prior to 12.3.2 Description: The issue is related to incorrect permissions in the SolarWinds Dameware Mini Remote Control Service, which can allow an attacker to escalate privileges locally. Th...

PT-2025-23537

Name of the Vulnerable Software and Affected Versions SignXML versions prior to 4.0.4 Description The issue concerns a potential algorithm confusion attack when verifying signatures with X509 certificate validation turned off and HMAC shared secret set. This could allow an attacker to supply a...

PT-2025-23558 · WordPress · Wordpress Comments Import & Export

Name of the Vulnerable Software and Affected Versions: WordPress Comments Import & Export plugin versions up to 2.4.3 Description: The issue arises from a missing capability check on the save settings function and the failure to properly sanitize and escape FTP settings parameters. This allows...

PT-2025-23556 · Cimatti · Contact Forms By Cimatti

Name of the Vulnerable Software and Affected Versions: Contact Forms by Cimatti versions 1.9.8 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's behalf. This can be achieved by tricking the...

DLA-4204-1 twitter-bootstrap3 - security update

Bulletin has no description...

RHBA-2025:2973 Red Hat Bug Fix Advisory: mod_proxy_cluster bug fix update

Bulletin has no description...

PT-2025-23367 · WordPress · Relevanssi

Name of the Vulnerable Software and Affected Versions: Relevanssi – A Better Search plugin for WordPress versions up to, and including, 4.24.5 Free and 2.27.6 Premium Description: The issue is related to Stored Cross-Site Scripting via the Excerpt Highlights due to insufficient input sanitization...

DLA-4198-1 espeak-ng - security update

Bulletin has no description...

PYSEC-2025-55

vLLM is an inference and serving engine for large language models LLMs. Version 0.8.0 up to but excluding 0.9.0 have a Denial of Service ReDoS that causes the vLLM server to crash if an invalid regex was provided while using structured output. This vulnerability is similar to...

CVE-2025-48942 vLLM DOS: Remotely kill vllm over http with invalid JSON schema

vLLM is an inference and serving engine for large language models LLMs. In versions 0.8.0 up to but excluding 0.9.0, hitting the /v1/completions API with a invalid jsonschema as a Guided Param kills the vllm server. This vulnerability is similar GHSA-9hcf-v7m4-6m2j/CVE-2025-48943, but for regex...

RHSA-2025:8325 Red Hat Security Advisory: thunderbird security update

Bulletin has no description...

RHSA-2025:8322 Red Hat Security Advisory: pcs security update

Bulletin has no description...

RHBA-2025:4872 Red Hat Bug Fix Advisory: rpm-ostree bug fix and enhancement update

Bulletin has no description...

CVE-2025-48880 FreeScout has Race Condition When Deleting Users

FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.181, when an administrative account is a deleting a user, there is the the possibility of a race condition occurring. This issue has been patched in version 1.8.181...

DSA-5932-1 thunderbird - security update

Bulletin has no description...

PT-2025-23234 · Unknown · Tinxy Wifi Lock Controller

Name of the Vulnerable Software and Affected Versions: Tinxy WiFi Lock Controller version v1 RF Description: The issue concerns the storage of sensitive user information, including credentials and mobile phone numbers, in plaintext. Recommendations: For Tinxy WiFi Lock Controller version v1 RF,...

PT-2025-23279 · WordPress · Woo Slider Pro

Name of the Vulnerable Software and Affected Versions: The Woo Slider Pro – Drag Drop Slider Builder For WooCommerce plugin for WordPress versions up to, and including, 1.12 Description: The issue allows authenticated attackers, with Subscriber-level access and above, to delete arbitrary posts du...

PT-2025-23319

Name of the Vulnerable Software and Affected Versions Yandex Browser for Desktop versions prior to 24.4.0.682 Description A use after free memory corruption issue exists. Recommendations For versions prior to 24.4.0.682, update to version 24.4.0.682 or later to resolve the issue...