PT-2025-29215 · WordPress +7 · Openai Plugin For Wordpress +8

Name of the Vulnerable Software and Affected Versions: Photos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal or Stripe, Social Share Buttons, OpenAI plugin for WordPress versions through 26.0.8 Description: The WordPress plugin is susceptibl...

PT-2025-29274 · Ibm · Ibm Mq

Name of the Vulnerable Software and Affected Versions: IBM MQ versions 9.3 and 9.4 Description: An IBM MQ client connecting to an MQ Queue Manager can cause a SIGSEGV in the AMQRMPPA channel process, leading to its termination. Recommendations: IBM MQ version 9.3: At the moment, there is no...

PT-2025-29866 · Wegia · Wegia

Name of the Vulnerable Software and Affected Versions: WeGIA versions prior to 3.4.5 Description: WeGIA is an open-source web manager designed for Portuguese-language and charitable institutions. A SQL Injection issue exists in the /controle/control.php API endpoint, specifically through the carg...

PT-2025-29213

Name of the Vulnerable Software and Affected Versions: Qt versions 6.6.0 through 6.8.3 Qt versions 6.9.0 through 6.9.1 Description: When passing values outside of the expected range to QColorTransferGenericFunction, it can cause a denial of service. This can occur when passing a specifically...

PT-2025-29784

Name of the Vulnerable Software and Affected Versions Medical Prescription Attachment Plugin for WooCommerce versions n/a through 1.2.3 Description The Medical Prescription Attachment Plugin for WooCommerce contains a flaw that permits the upload of arbitrary files, potentially including web...

PT-2025-29154 · Unknown · Callmanager

Name of the Vulnerable Software and Affected Versions: Chall-Manager versions prior to 0.1.4 Description: Chall-Manager is susceptible to a zip bomb decompression issue when decoding scenario zip archives. The vulnerability does not require authentication or authorization for exploitation...

PT-2025-29134 · Unknown · Secure-Upload

Name of the Vulnerable Software and Affected Versions: Secure-upload versions prior to 0.815.0 Description: Secure-upload is a data submission service that validates single-use tokens when accepting submissions to channels. The service was installed on a limited number of environments. Privileged...

PT-2025-29096 · Ibm · Ibm Analytics Content Hub

Name of the Vulnerable Software and Affected Versions: IBM Analytics Content Hub versions 2.0 through 2.3 Description: IBM Analytics Content Hub may allow malicious file uploads due to insufficient validation of file types uploaded to Explore Content. This could enable attackers to upload and...

PT-2025-28943 · Clerk · @Clerk/Backend

Name of the Vulnerable Software and Affected Versions: @clerk/backend versions prior to 2.4.0 Description: Applications utilizing the verifyWebhook helper to verify incoming Clerk webhooks are susceptible to accepting improperly signed webhook events. Recommendations: Upgrade to @clerk/backend...

PT-2025-28867

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A flaw exists in the Linux kernel related to the Fibre Channel Network Interface Card fnic driver. A crash can occur in the fnic wq cmpl handler function when Fibre Distributed Memory...

PT-2025-28860 · Radiflow · Isap Smart Collector

Name of the Vulnerable Software and Affected Versions: Radiflow iSAP Smart Collector version 1.20 Description: The issue allows a deprivileged Linux user to read the entire file system content, including files belonging to other users and having restricted access, such as the root password hash...

PT-2025-28957 · Dell · Dell Powerflex Manager

Name of the Vulnerable Software and Affected Versions: Dell PowerFlex Manager VM versions prior to 4.6.2.1 Description: Dell PowerFlex Manager VM is affected by an issue allowing the insertion of sensitive information into log files. A low-privileged attacker with remote access could exploit this...

PT-2025-28632 · Mediawiki · Mediawiki

Name of the Vulnerable Software and Affected Versions: MediaWiki - CheckUser extension versions 1.39.X through 1.39.13 MediaWiki - CheckUser extension versions 1.42.X through 1.42.7 MediaWiki - CheckUser extension versions 1.43.X through 1.43.2 Description: The Special:CheckUser interface is...

PT-2025-28654 · Ibm · Ibm Openpages With Watson

Name of the Vulnerable Software and Affected Versions: IBM OpenPages with Watson versions 8.3 through 9.0 Description: The issue provides weaker than expected security in the storage of encrypted data. An authenticated remote attacker with access to the database or a local attacker with access to...

PT-2025-28333 · Unknown · Phpgurukul Zoo Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Zoo Management System version 2.1 Description: A critical issue was found in the PHPGurukul Zoo Management System. The problem is related to an unknown function of the file /admin/add-animals.php, where the manipulation of the cnum...

PT-2025-28455 · Tellus +2 · Tellus +2

Name of the Vulnerable Software and Affected Versions: V-SFT and TELLUS versions affected versions not specified Description: A heap-based buffer overflow issue exists in the VS6Sim.exe component. This can be triggered by opening specially crafted V9 or X1 files, potentially leading to arbitrary...

PT-2025-28804

Name of the Vulnerable Software and Affected Versions: The Support Board plugin for WordPress versions up to, and including, 3.8.0 Description: The issue allows unauthorized access, modification, or deletion of data due to the use of hardcoded default secrets in the sb encryption function. This...

PT-2025-28413

Name of the Vulnerable Software and Affected Versions: Quiter Gateway versions prior to 4.7.0 Description: The issue is related to improper error handling, which allows an attacker to send malformed payloads and generate error messages containing sensitive information. Recommendations: For versio...

PT-2025-28484

Name of the Vulnerable Software and Affected Versions: HP Support Assistant affected versions not specified Description: A potential security issue has been identified, allowing a local attacker to escalate privileges via an arbitrary file deletion. Recommendations: At the moment, there is no...

PT-2025-28347 · Device · Device

Name of the Vulnerable Software and Affected Versions: Affected versions not specified Description: An unauthenticated remote attacker can alter the device configuration to achieve remote code execution as root with specific configurations. Recommendations: At the moment, there is no information...