PT-2025-53789

Name of the Vulnerable Software and Affected Versions givanz VvvebJs version 1.7.2 Description givanz VvvebJs version 1.7.2 is subject to a File Upload issue through the save.php file. Recommendations At the moment, there is no information about a newer version that contains a fix for this...

PT-2025-53759

Name of the Vulnerable Software and Affected Versions BinUtils version 2.26 Description An issue exists in the d discriminator function within the cp-demangle.c file of BinUtils. This can lead to a denial of service when processing specially crafted PE files. Recommendations Update BinUtils to a...

PT-2025-53692

Name of the Vulnerable Software and Affected Versions Gmission Web Fax versions 3.0 through 3.9 Description An improper authentication issue exists in Gmission Web Fax that can lead to privilege escalation. The issue affects the application’s authentication mechanisms, potentially allowing...

Fedora: Security Advisory (FEDORA-2025-3b0fa1ac26)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2025-53796

Name of the Vulnerable Software and Affected Versions Crocoblock JetSearch versions through 3.5.16 Description A flaw exists in Crocoblock JetSearch that allows for DOM-Based Cross-Site Scripting XSS. This issue is due to improper neutralization of input during web page generation. The...

Frappe Technologies – Frappe security vulnerabilities

Frappe Technologies Frappe is a Python, Mariadb-based web development framework with integrated front-end pages from Frappe Technologies, India. A security vulnerability exists in Frappe Technologies Frappe versions prior to 14.99.6 and prior to 15.88.1, which originates from a specially crafted...

WordPress plugin PixelYourSite has a vulnerability related to information leakage.

WordPress PixelYourSite is a tracking plugin that supports WordPress business owners. WordPress PixelYourSite suffers from an information disclosure vulnerability that stems from a lack of protection for publicly exposed log files when the Meta API logging setting is enabled disabled by default. ...

PT-2026-1267

Name of the Vulnerable Software and Affected Versions WP Swings Wallet System for WooCommerce versions through 2.7.2 Description A flaw exists in WP Swings Wallet System for WooCommerce that allows the retrieval of embedded sensitive data due to the insertion of sensitive information into sent...

WordPress Discussion Board plugin <= 2.5.7 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nabil Irawan in WordPress Plugin Discussion Board versions = 2.5.7...

WordPress Popup box plugin <= 6.0.7 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Doan Dinh Van in WordPress Plugin Popup box versions = 6.0.7...

WordPress Fana theme <= 1.1.35 - Local File Inclusion vulnerability

Software : Fana Type : Theme Vulnerable versions : = 1.1.35 Fixed in : 1.1.36 OWASP Top 10 : A3: Injection Classification : Local File Inclusion CVE ID : CVE-2025-68540 Patchstack priority : Low CVSS severity : 7.5 Required privilege : Contributor Developer : Claim ownership PSID : 1370613da8d7...

CVE-2025-15132

A vulnerability was determined in ZSPACE Z4Pro+ 1.0.0440024. The affected element is the function zfilev2apiopen of the file /v2/file/safe/open of the component HTTP POST Request Handler. This manipulation causes command injection. It is possible to initiate the attack remotely. The exploit has...

WordPress Astra Widgets plugin <= 1.2.16 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by benzdeus in WordPress Plugin Astra Widgets versions = 1.2.16...

WordPress FlippingBook plugin <= 2.0.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin FlippingBook versions = 2.0.1...

WordPress Web Directory Free plugin <= 1.7.12 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Web Directory Free versions = 1.7.12...

Moga-Mall code issue vulnerabilities

moga-mall is a microservices architecture based e-commerce platform by h-moses individual developers. A code issue vulnerability exists in moga-mall 392d631a5ef15962a9bddeeb9f1269b9085473fa and earlier versions, which originates from the file...

PT-2025-53666

Name of the Vulnerable Software and Affected Versions TaleLin Lin-CMS versions up to 0.6.0 Description A security issue exists in TaleLin Lin-CMS. The issue involves the manipulation of the username/password arguments, potentially leading to exposure of passwords within the configuration file...

PT-2025-53658

Name of the Vulnerable Software and Affected Versions EyouCMS versions prior to 1.7.7 Description A security flaw exists in EyouCMS up to version 1.7.6. The issue is related to a SQL injection within the Backend Template Management component, specifically in the file...

PT-2025-53660

Name of the Vulnerable Software and Affected Versions dayrui XunRuiCMS versions up to 4.7.1 Description A flaw exists in dayrui XunRuiCMS that allows for cross site scripting. The issue is located in the JSONP Callback Handler component, specifically within the dr show error/dr exit msg function ...

PT-2025-53655

Name of the Vulnerable Software and Affected Versions saiftheboss7 onlinemcqexam versions prior to 0e56806132971e49721db3ef01868098c7b42ada Description A SQL injection issue exists in saiftheboss7 onlinemcqexam. The issue is located in the file /admin/quesadd.php and involves manipulation of the...