PT-2025-17718 · WordPress · Frontend Login/Registration Blocks

Name of the Vulnerable Software and Affected Versions: Frontend Login and Registration Blocks plugin for WordPress versions up to, and including, 1.0.7 Description: The issue is related to privilege escalation via account takeover due to the plugin not properly validating a user's identity prior ...

PT-2025-28357

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue concerns the Linux kernel, specifically the fimc is hw change mode function, which changes camera modes without waiting for hardware completion. This can lead to corrupted da...

PT-2025-17909

Name of the Vulnerable Software and Affected Versions Moodle affected versions not specified Description A security issue was discovered that allows some users to access sensitive information about other students before they finish verifying their identities using two-factor authentication 2FA...

CVE-2025-32793

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Versions 1.15.0 to 1.15.15, 1.16.0 to 1.16.8, and 1.17.0 to 1.17.2, are vulnerable when using Wireguard transparent encryption in a Cilium cluster, packets that originate from a terminating endpoint can lea...

PT-2025-17404 · Sourcecodester · Sourcecodester Web-Based Pharmacy Product Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Web-based Pharmacy Product Management System version 1.0 Description: A problem was found in the processing of the file changepassword.php. The manipulation of the arguments txtconfirm password, txtnew password, and txtold...

CVE-2025-32544

CVE-2025-32544 is a Missing Authorization vulnerability in the WooCommerce Loyal Customers plugin (WordPress) affecting versions up to 2.6. The CVE entry states that access to functionality is not properly constrained by ACLs, enabling improper access. CVSSv3.1 vector: AV:N/AC:L/PR:N/UI:N/S:U/C:H...

CVE-2025-32573 WordPress KiotViet Sync Plugin <= 1.8.3 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Kiotviet KiotViet Sync allows SQL Injection. This issue affects KiotViet Sync: from n/a through 1.8.3...

CVE-2024-58096

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: add srng-lock for ath11khalsrng in monitor mode ath11khalsrng should be used with srng-lock to protect srng data. For ath11kdprxmondestprocess and ath11kdpfullmonprocessrx, they use ath11khalsrng for many times but...

PT-2025-16962 · Opentext · Opentext Ucmdb +2

Name of the Vulnerable Software and Affected Versions: OpenText Operations Bridge Manager versions through 2021.05 OpenText Operations Bridge Suite Containerized versions through 2021.05 OpenText UCMDB Classic and Containerized versions through 2021.05 Description: The issue allows authenticated...

PT-2025-16601 · WordPress · Wp Posts Carousel

Name of the Vulnerable Software and Affected Versions: WP Posts Carousel versions 1.3.10 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. Recommendations: For WP...

PT-2025-16800 · Drupal · Drupal Simple Gtm

Name of the Vulnerable Software and Affected Versions: Drupal Simple GTM affected versions not specified Description: The issue affects Drupal Simple GTM, but specific details about the nature of the problem are not provided. There is no information available about the estimated number of...

CVE-2025-30701

...

PT-2025-17418

Name of the Vulnerable Software and Affected Versions LibRaw versions prior to 0.21.4 Description The issue is related to an out-of-bounds read in the Fujifilm 0xf00c tag parser within the metadata/tiff.cpp file. Recommendations For versions prior to 0.21.4, update to version 0.21.4 or later to...

PT-2025-17421

Name of the Vulnerable Software and Affected Versions LibRaw versions prior to 0.21.4 Description The issue arises from the processing of tag 0x412 in the phase one correct function within decoders/load mfbacks.cpp, where minimum w0 and w1 values are not enforced. Recommendations For versions pri...

CVE-2025-2814 Crypt::CBC versions between 1.21 and 3.05 for Perl may use insecure rand() function for cryptographic functions

Crypt::CBC versions between 1.21 and 3.05 for Perl may use the rand function as the default source of entropy, which is not cryptographically secure, for cryptographic functions. This issue affects operating systems where "/dev/urandom'" is unavailable. In that case, Crypt::CBC will fallback to...

PT-2025-16378 · Totolink · Totolink N600R

Name of the Vulnerable Software and Affected Versions: TOTOLINK N600R version 4.3.0cu.7647 B20210106 Description: A stack overflow issue was discovered via the pin parameter in the setWiFiWpsConfig function. Recommendations: For TOTOLINK N600R version 4.3.0cu.7647 B20210106, consider disabling th...

PT-2025-16104 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue concerns a rejected reason, with no further details provided about the nature of the problem. No information is available regarding the estimated number of potentially affected...

PT-2025-23411 · Git +1 · Suricata

Name of the Vulnerable Software and Affected Versions: Lua affected versions not specified Description: The software contains a use-of-uninitialized-value issue. The crash state involves the luaS new, auxsetstr, and luaL requiref functions. Recommendations: At the moment, there is no information...

PT-2025-16106 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A remote code execution issue has been identified. No further details are available regarding the estimated number of potentially affected devices or real-world incidents. Recommendations: A...

PT-2025-15941 · Unknown · Labcat Processing Projects

Name of the Vulnerable Software and Affected Versions: LABCAT Processing Projects versions 1.0.0 through 1.0.2 Description: The issue allows an attacker to upload a web shell to a web server, potentially leading to unauthorized access and control. This is due to an unrestricted upload of files wi...