CVE-2022-28620

A remote authentication bypass vulnerability was discovered in HPE Cray Legacy Shasta System Solutions; HPE Slingshot; and HPE Cray EX supercomputers versions: Prior to node controller firmware associated with HPE Cray EX liquid cooled blades, and all versions of chassis controller firmware...

CVE-2022-28619

A potential security vulnerability has been identified in the installer of HPE Version Control Repository Manager. The vulnerability could allow local escalation of privilege. HPE has made the following software update to resolve the vulnerability in HPE Version Control Repository Manager install...

CVE-2022-24906

Nextcloud Deck is a Kanban-style project & personal management tool for Nextcloud, similar to Trello. The full path of the application is exposed to unauthorized users. It is recommended that the Nextcloud Deck app is upgraded to 1.2.11, 1.4.6, or 1.5.4. There is no workaround available...

CVE-2022-24811

Combodi iTop is a web based IT Service Management tool. Prior to versions 2.7.6 and 3.0.0, cross-site scripting is possible for scripts outside of script tags when displaying HTML attachments. This issue is fixed in versions 2.7.6 and 3.0.0. There are currently no known workarounds...

PT-2025-22772 · Unknown · Wc Affiliate

Name of the Vulnerable Software and Affected Versions: WC Affiliate versions n/a through 2.9.1 Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection. This is a problem where an application deserializes data from an untrusted source, potentially...

PT-2025-22789 · Unknown · Pagaleve Pix

Name of the Vulnerable Software and Affected Versions: Pagaleve Pix 4x sem juros - Pagaleve versions 1.6.9 and earlier Description: The issue is related to Deserialization of Untrusted Data, allowing Object Injection. This enables potential exploitation by injecting malicious objects into the...

PT-2025-22710 · Goodlayers · Goodlayers Hotel

Name of the Vulnerable Software and Affected Versions: Goodlayers Hotel versions 3.1.4 and earlier Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection. Recommendations: For versions 3.1.4 and earlier, update to a version later than 3.1.4 to resolv...

PT-2025-22801 · Unknown · Sipass Integrated

Name of the Vulnerable Software and Affected Versions: SiPass integrated versions prior to 2.95.3.18 Description: A vulnerability has been identified that could allow an unauthenticated remote attacker to create a denial of service condition. The issue is caused by an out of bounds read past the...

PT-2025-22711 · Goodlayers · Goodlayers Hotel

Name of the Vulnerable Software and Affected Versions: Goodlayers Hotel versions n/a through 3.1.4 Description: The issue is related to an Improper Neutralization of Special Elements used in an SQL Command, also known as a SQL Injection vulnerability. This allows for Blind SQL Injection, which ca...

PT-2025-22754 · WordPress · Opal Woo Custom Product Variation

Name of the Vulnerable Software and Affected Versions: Opal Woo Custom Product Variation versions 1.2.0 and earlier Description: The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as a 'Path Traversal' vulnerability. This allows for Path Traversal i...

PT-2025-22732 · Unknown · Nomupay Payment Processing Gateway

Name of the Vulnerable Software and Affected Versions: Nomupay Payment Processing Gateway versions n/a through 7.1.7 Description: The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as 'Path Traversal'. This allows unauthorized access to files and...

PT-2025-22721 · Unknown · Scripteo Ads Pro Plugin

Name of the Vulnerable Software and Affected Versions: scripteo Ads Pro Plugin versions n/a through 4.88 Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion' vulnerability. This allows PHP Loca...

PT-2025-22780 · Woocommerce · Storekeeper For Woocommerce

Name of the Vulnerable Software and Affected Versions: StoreKeeper for WooCommerce versions through 14.4.4 Description: The issue allows for the unrestricted upload of files with dangerous types, enabling an attacker to upload a web shell to a web server. This can lead to further exploitation and...

PT-2025-22775 · Unknown · Letscms Mlm

Name of the Vulnerable Software and Affected Versions: LETSCMS MLM Software Binary MLM Plan versions n/a through 3.0 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

PT-2025-22778 · Unknown · Funnelcockpit

Name of the Vulnerable Software and Affected Versions: FunnelCockpit versions 1.4.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. Specifically, it is a Reflected XSS vulnerability. This means...

PT-2025-22702 · Pebas · Pebas Couponxl

Name of the Vulnerable Software and Affected Versions: pebas CouponXL versions n/a through 4.5.0 Description: The issue is related to an Incorrect Privilege Assignment vulnerability, which allows Privilege Escalation in pebas CouponXL. Recommendations: For versions n/a through 4.5.0, update to a...

PT-2025-22787 · Unknown · Majestic Support

Name of the Vulnerable Software and Affected Versions: Majestic Support versions n/a through 1.1.0 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks against Majestic...

PT-2025-22722 · Unknown · Libro De Reclamaciones

Name of the Vulnerable Software and Affected Versions: Libro de Reclamaciones versions 1.0.1 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This means that an attacker can injec...

PT-2025-22811 · Openemr · Openemr

Name of the Vulnerable Software and Affected Versions: OpenEMR versions prior to 7.0.3.4 Description: A stored cross-site scripting XSS issue allows any authenticated user with patient creation and editing privileges to inject arbitrary JavaScript code into the system. This can be done by enterin...

PT-2025-22779 · Unknown · Xili-Tidy-Tags

Name of the Vulnerable Software and Affected Versions: xili-tidy-tags versions 1.12.06 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, which allows Reflected XSS. This type of issue occurs when...