Fedora 41 : golang (2025-ef6e0fa117)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-ef6e0fa117 advisory. go1.23.11 released 2025-07-08 includes security fixes to the go command, as well as bug fixes to the compiler, the linker, and the runtime. See the issue...

PT-2025-30619 · Robocode · Robocode

Name of the Vulnerable Software and Affected Versions: Roo Code versions 3.23.18 and below Description: Roo Code, an AI-powered autonomous coding agent, does not validate line breaks in its command input. This bypasses the allow-list mechanism due to a lack of parsing or validation logic,...

PT-2025-30571

Name of the Vulnerable Software and Affected Versions HotelRunner B2B versions prior to 04.06.2025 Description An open redirect issue exists in HotelRunner B2B, potentially allowing forceful browsing through URL redirection to untrusted sites. Recommendations Update HotelRunner B2B to version...

PT-2025-30555 · Invision Power Board · Invision Community

Name of the Vulnerable Software and Affected Versions: Invision Community versions 5.0.0 through 5.0.7 Description: The software contains a reflected cross-site scripting issue in the oauth/callback endpoint. Recommendations: Update to a version later than 5.0.7. As a temporary workaround, consid...

PT-2025-30389 · WordPress · Latest Post Accordian Slider

Name of the Vulnerable Software and Affected Versions: Latest Post Accordian Slider plugin for WordPress versions prior to 1.4 Description: The Latest Post Accordian Slider plugin for WordPress is susceptible to Cross-Site Request Forgery due to missing or incorrect nonce validation on the...

PT-2025-30440 · Ibm · Security Qradar Network Threat Analytics

Name of the Vulnerable Software and Affected Versions: IBM Security QRadar Network Threat Analytics versions 1.0.0 through 1.3.1 Description: IBM Security QRadar Network Threat Analytics versions 1.0.0 through 1.3.1 may allow a privileged user to cause a denial of service due to improper allocati...

PT-2025-30496 · Viewvc · Viewvc

Name of the Vulnerable Software and Affected Versions: ViewVC versions 1.1.0 through 1.1.31 ViewVC versions 1.2.0 through 1.2.3 Description: ViewVC is a browser interface for CVS and Subversion version control repositories. The standalone.py script within the ViewVC distribution can expose the...

PT-2025-30397 · Rolantis Information Technologies · Agentis

Name of the Vulnerable Software and Affected Versions: Rolantis Information Technologies Agentis versions prior to 4.32 Description: The software contains an Improper Neutralization of Special Elements used in an SQL Command vulnerability, which allows for SQL Injection. Recommendations: Update...

PT-2025-30381 · Unknown · Region Pay App For Android

Name of the Vulnerable Software and Affected Versions: region PAY App for Android versions prior to 1.5.28 Description: A sensitive information disclosure issue exists due to the insertion of confidential information into log files. If exploited, sensitive user information may be exposed to an...

PT-2025-30507 · Poly · Poly Clariti Manager

Name of the Vulnerable Software and Affected Versions: Poly Clariti Manager versions prior to 10.12.1 Description: A security issue has been identified that involves the deserialization of untrusted data without proper validation. Recommendations: Update Poly Clariti Manager to version 10.12.1 or...

PT-2025-30498 · Poly · Poly Clariti Manager

Name of the Vulnerable Software and Affected Versions: Poly Clariti Manager versions prior to 10.12.2 Description: A potential command injection issue has been identified. The issue could allow a privileged user to submit arbitrary input. Recommendations: Update Poly Clariti Manager to version...

PT-2025-30499 · Poly · Poly Clariti Manager

Name of the Vulnerable Software and Affected Versions: Poly Clariti Manager versions prior to 10.12.1 Description: A security issue has been identified in Poly Clariti Manager that may allow the use and retrieval of the default password. Recommendations: Update Poly Clariti Manager to version...

PT-2025-30482

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 141 Firefox ESR versions prior to 115.26 Firefox ESR versions prior to 128.13 Firefox ESR versions prior to 140.1 Thunderbird versions prior to 141 Thunderbird versions prior to 128.13 Thunderbird versions prior to...

PT-2025-30263 · Akbim · Akbim Software Online Exam Registration

Name of the Vulnerable Software and Affected Versions: Akbim Software Online Exam Registration versions prior to 14.03.2025 Description: An authorization bypass exists due to user-controlled keys and exploitation of trusted identifiers in Akbim Software Online Exam Registration. Recommendations:...

PT-2025-30270 · Sophos · Sophos Firewall

Name of the Vulnerable Software and Affected Versions: Sophos Firewall versions prior to 21.0 MR1 20.0.1 Description: A business logic vulnerability exists in the Up2Date component of Sophos Firewall. This vulnerability could allow attackers to control the firewall’s DNS environment, potentially...

PT-2025-30250 · Librenms · Librenms

Name of the Vulnerable Software and Affected Versions: versions prior to 2.3 Description: A high privileged remote attacker can execute arbitrary system commands via POST requests in the diagnostic action due to improper neutralization of special elements used in an OS command. Recommendations:...

PT-2025-30311 · Drupal +1 · Drupal +1

Name of the Vulnerable Software and Affected Versions: Drupal Real-time SEO for Drupal versions 2.0.0 through 2.1.9 Description: The Real-time SEO for Drupal module contains a flaw due to improper neutralization of input during web page generation, which allows for Cross-Site Scripting XSS...

PT-2025-30347 · Hax Cms +1 · Hax Cms +1

Name of the Vulnerable Software and Affected Versions: HAXiam versions 11.0.4 and below Description: HAXiam is a packaging wrapper for HAXcms which allows anyone to spawn their own microsite management platform. The application returns a 200 response when requesting the data of a valid user and a...

PT-2025-30633

Name of the Vulnerable Software and Affected Versions WPBookit versions prior to 1.0.7 Description The WPBookit plugin for WordPress is susceptible to arbitrary file uploads due to a lack of file type validation in the image upload handle function. This function is connected via the 'add new...

PT-2025-30195 · Idnow · Idnow App

Name of the Vulnerable Software and Affected Versions: IDnow App versions up to 9.6.0 Description: A problematic issue has been identified in the IDnow App for Android, potentially leading to improper export of Android application components due to manipulation of the AndroidManifest.xml file...