PT-2025-21968 · Unknown · Xylus Themes Import Social Events

Name of the Vulnerable Software and Affected Versions: Xylus Themes Import Social Events versions 1.8.5 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an...

laravel-auth0 SDK Vulnerable to Brute Force Authentication Tags of CookieStore Sessions

Overview Session cookies of applications using the laravel-auth0 SDK configured with CookieStore have authentication tags that can be brute forced, which may result in unauthorized access. Am I Affected? You are affected by this vulnerability if you meet the following pre-conditions: 1...

CGA-7M4Q-7233-P368

Bulletin has no description...

OPENSUSE-SU-2025:15099-1 python311-nltk-3.9.1-2.4 on GA media

These are all security issues fixed in the python311-nltk-3.9.1-2.4 package on the GA media of openSUSE Tumbleweed...

PT-2025-21811 · Mozilla +1 · Firefox +1

Name of the Vulnerable Software and Affected Versions: Firefox versions prior to 138.0.4 Firefox ESR versions prior to 128.10.1 Description: An attacker was able to perform an out-of-bounds read or write on a JavaScript object by confusing array index sizes. Recommendations: For Firefox versions...

OPENSUSE-SU-2025:15105-1 python311-suds-1.2.0-2.4 on GA media

These are all security issues fixed in the python311-suds-1.2.0-2.4 package on the GA media of openSUSE Tumbleweed...

RHSA-2025:7691 Red Hat Security Advisory: thunderbird security update

Bulletin has no description...

RHSA-2025:7689 Red Hat Security Advisory: thunderbird security update

Bulletin has no description...

RHSA-2025:7672 Red Hat Security Advisory: xdg-utils security update

Bulletin has no description...

PT-2025-21696

Name of the Vulnerable Software and Affected Versions: imithemes Eventer versions 3.9.6 and earlier Description: The issue is related to an SQL Injection vulnerability, specifically Improper Neutralization of Special Elements used in an SQL Command, which allows Blind SQL Injection...

PT-2025-21656 · Nextcloud · Nextcloud Enterprise Server +1

Name of the Vulnerable Software and Affected Versions: Nextcloud Server versions prior to 29.0.15, 30.0.9, and 31.0.3 Nextcloud Enterprise Server versions prior to 26.0.13.15, 27.1.11.15, 28.0.14.6, 29.0.15, 30.0.9, and 31.0.3 Description: The issue concerns a bug in session handling. When the...

PT-2025-21617 · Hitachi · Hitachi Ops Center Analyzer

Name of the Vulnerable Software and Affected Versions: Hitachi Ops Center Analyzer versions 10.8.0-00 through 11.0.4-00 Hitachi Ops Center Analyzer versions 10.9.0-00 through 11.0.4-00 Description: The issue is related to a Cross-Site WebSocket Hijacking problem in the RAID Agent component of...

PT-2025-21731 · Shapedplugin Llc · Wp Tabs

Name of the Vulnerable Software and Affected Versions: ShapedPlugin LLC WP Tabs versions 2.2.11 and earlier Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection. Recommendations: For versions 2.2.11 and earlier, update to a version that contains a...

PT-2025-21680 · WordPress · Css3 Accordions

Name of the Vulnerable Software and Affected Versions: CSS3 Accordions for WordPress versions 3.0 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web...

PT-2025-21678 · WordPress · Pixel Wordpress Form Builderplugin & Autoresponder

Name of the Vulnerable Software and Affected Versions: Pixel WordPress Form BuilderPlugin & Autoresponder versions 1.0.2 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows Cross Site Request Forgery. Recommendations: For Pixel WordPress Form...

PT-2025-21698 · Whmpress · Whmpress

Name of the Vulnerable Software and Affected Versions: WHMpress versions 6.2 through revision Description: The issue is a Path Traversal vulnerability in WHMpress, which allows Path Traversal. Recommendations: For versions 6.2 through revision, update to a version that fixes this issue. At the...

PT-2025-21669 · Unknown · Themeton Rozario

Name of the Vulnerable Software and Affected Versions: themeton Rozario versions prior to 1.4 Description: The issue is related to a Missing Authorization vulnerability, which allows the exploitation of incorrectly configured access control security levels. Recommendations: For themeton Rozario...

PT-2025-21711 · Unknown · Villatheme Curcy

Name of the Vulnerable Software and Affected Versions: villatheme CURCY versions 2.3.7 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows accessing functionality not properly constrained by ACLs. Recommendations: For versions 2.3.7 and earlier,...

PT-2025-21674 · Lambertgroup · Lambertgroup Shout

Name of the Vulnerable Software and Affected Versions: LambertGroup SHOUT versions n/a through 3.5.3 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. Recommendation...

PT-2025-21689 · Unknown · Simple Link Directory

Name of the Vulnerable Software and Affected Versions: Simple Link Directory Pro versions through 14.7.3 Description: The issue is related to a Missing Authorization vulnerability, which allows the exploitation of incorrectly configured access control security levels. Recommendations: For version...