PT-2025-26331

Name of the Vulnerable Software and Affected Versions: NasaTheme Elessi versions n/a through 6.3.9 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. Recommendations: For versions n/a...

PT-2025-27393 · Git +1 · Glaze

Name of the Vulnerable Software and Affected Versions: glz affected versions not specified Description: The software contains a stack-buffer-overflow vulnerability. The crash occurs during the glz::from and glz::visit functions when processing data, potentially leading to a read error. The crash...

PT-2025-26274 · Unknown · Code-Projects Online Shoe Store

Name of the Vulnerable Software and Affected Versions: code-projects Online Shoe Store version 1.0 Description: A critical issue has been discovered in the code, specifically affecting the /admin/admin index.php file. The manipulation of the Username argument leads to a SQL injection. This issue...

PT-2025-26239

Name of the Vulnerable Software and Affected Versions Brilliance Golden Link Secondary System up to 20250609 Description A critical vulnerability has been found in the Brilliance Golden Link Secondary System. The issue affects an unknown part of the file /storagework/custTakeInfoPage.htm. The...

PT-2025-26228 · Ibm · Ibm Qradar Siem

Name of the Vulnerable Software and Affected Versions: IBM QRadar SIEM versions 7.5 through 7.5.0 Update Package 12 Description: The issue allows a privileged user to modify configuration files, enabling the upload of a malicious autoupdate file to execute arbitrary commands. Recommendations: For...

PT-2025-25770 · Kcm3100 · Kcm3100

Name of the Vulnerable Software and Affected Versions: KCM3100 versions 1.4.2 and earlier Description: An authentication bypass issue exists, allowing an attacker to bypass product authentication from within the connected LAN. Recommendations: For versions 1.4.2 and earlier, update to a version...

PT-2025-28942

Name of the Vulnerable Software and Affected Versions: Zimbra Collaboration Suite versions prior to 9.0.0 Patch 46 Zimbra Collaboration Suite versions 10.0.x prior to 10.0.15 Zimbra Collaboration Suite versions 10.1.x prior to 10.1.9 Description: The software is susceptible to a denial of service...

PT-2025-26163 · Minitcg · Minitcg

Name of the Vulnerable Software and Affected Versions: miniTCG version 1.3.1 beta Description: A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML by injecting a crafted payload into the id parameter at the "/members/edit.php" API endpoint. Recommendations:...

PT-2025-25730 · Unknown · If-So Dynamic Content Personalization

Name of the Vulnerable Software and Affected Versions: If-So Dynamic Content Personalization versions 1.9.3.1 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks...

PT-2025-26173 · Quiche · Quiche

Name of the Vulnerable Software and Affected Versions: quiche versions prior to 0.24.4 Description: The issue is related to incorrect congestion window growth, which could cause quiche to send data at a rate faster than the path might actually support. An unauthenticated remote attacker can explo...

PT-2025-25658 · Conda Forge · Conda-Forge-Webservices

Name of the Vulnerable Software and Affected Versions: conda-forge-webservices versions prior to 2025.3.24 Description: The conda-forge-webservices web app, used to run conda-forge admin commands and linting, has an issue where the conda forge webservice Docker container executes commands without...

PT-2025-25755 · Fortra · Ca Privileged Access Manager

Name of the Vulnerable Software and Affected Versions: Fortra's Core Privileged Access Manager BoKS versions 7.2.0 through 7.2.0.17 Fortra's Core Privileged Access Manager BoKS versions 8.1.0 through 8.1.0.22 Fortra's Core Privileged Access Manager BoKS versions 8.1.1 through 8.1.1.7 Fortra's Cor...

PT-2025-25647 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue was initially reported but later rejected as it was not considered a security issue. No further details are available regarding the nature of the issue or its potential impact...

PT-2025-25702 · Unknown · Thembay Aora

Name of the Vulnerable Software and Affected Versions: thembay Aora versions 1.3.9 and earlier Description: The issue is related to improper control of filename for include/require statement in PHP program, also known as 'PHP Remote File Inclusion' vulnerability. This allows PHP Local File...

PT-2025-25631 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A remote code execution issue is mentioned, but details are scarce due to the rejection reason provided. No information is available on the estimated number of potentially affected devices o...

PT-2025-25680 · Mapsvg · Mapsvg

Name of the Vulnerable Software and Affected Versions: MapSVG versions prior to 8.5.32 Description: The issue allows for the unrestricted upload of files with dangerous types, enabling an attacker to upload a web shell to a web server. This can lead to further exploitation and potential control o...

PT-2025-25686 · Unknown · Wp Job Portal

Name of the Vulnerable Software and Affected Versions: WP Job Portal versions n/a through 2.3.2 Description: The issue is related to an SQL Injection vulnerability, specifically an Improper Neutralization of Special Elements used in an SQL Command. This allows for Blind SQL Injection, which can b...

PT-2025-25751

Name of the Vulnerable Software and Affected Versions: Sitecore PowerShell Extensions versions through 7.0 Description: Sitecore PowerShell Extensions, an add-on to Sitecore Experience Manager XM and Experience Platform XP, is vulnerable to an unrestricted file upload issue. A remote, authenticat...

PT-2025-25612 · Unknown · Phpgurukul Hospital Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Hostel Management System version 1.0 Description: A critical issue affects the processing of the file /includes/login.inc.php, where the manipulation of the student roll no argument leads to SQL injection. The attack can be initiat...

PT-2025-25748 · Ls Electric · Gmwin 4

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: An Out-of-bounds Read issue exists within the parsing of PRJ files due to the lack of proper validation of user-supplied data. This can result in memory corruption issues, such as reading an...