PT-2026-6667

Name of the Vulnerable Software and Affected Versions The Timeline Block – Beautiful Timeline Builder for WordPress versions up to and including 1.3.3 Description The software is susceptible to an Insecure Direct Object Reference issue. This is due to a lack of validation on a user-controlled key...

PT-2026-6087

Name of the Vulnerable Software and Affected Versions Citrix Emergency Sharing versions prior to SMR Feb-2026 Release 1 Description An improper access control issue exists in Emergency Sharing. This allows local attackers to interrupt the functionality of the service. Recommendations Update to SM...

PT-2026-5062

CVE-2026-1466 Jirafeau normally prevents browser preview for text files due to the possibility that for example SVG and HTML documents could be exploited for cross site scripting. Th… https://t.co/rSEVfvxJRR...

PT-2026-5187

Name of the Vulnerable Software and Affected Versions 66biolinks version 44.0.0 Description A directory traversal issue exists in the “Static Sites” feature. Uploaded ZIP archives are automatically extracted without validating or sanitizing file paths. An attacker can include traversal sequences...

PT-2026-4972

An out-of-band SQL injection vulnerability OOB SQLi has been detected in the Performance Evaluation EDD application developed by Gabinete Técnico de Programación. Exploiting this vulnerability in the parameter ‘Id usuario' in ‘/evaluacion acciones evalua.aspx’, could allow an attacker to extract...

PT-2026-5027

Name of the Vulnerable Software and Affected Versions RAGFlow versions prior to 0.23.1 Description RAGFlow, an open-source RAG Retrieval-Augmented Generation engine, is affected by a "Zip Slip" issue in the MinerU parser. This allows an attacker to overwrite arbitrary files on the server,...

PT-2026-4744

A local privilege escalation vulnerability has been identified in the Kaba exos 9300 System management application d9sysdef.exe. Within this application it is possible to specify an arbitrary executable as well as the weekday and start time, when the specified executable should be run with SYSTEM...

PT-2026-4706

Look at the security patch preview section of https://t.co/ySklSke3uy. These are from the upcoming patch levels: Critical: CVE-2026-0039, CVE-2026-0040, CVE-2026-0041, CVE-2026-0042, CVE-2026-0043, CVE-2026-0044 High: CVE-2025-22424, CVE-2025-22426, CVE-2025-32348, CVE-2025-48561, CVE-2025-48615,...

PT-2026-2984

Name of the Vulnerable Software and Affected Versions Keycloak affected versions not specified Description Improper input validation occurs because Keycloak accepts RFC-compliant matrix parameters in URL path segments. Since common reverse proxy configurations may ignore or mishandle these...

PT-2026-1002

Name of the Vulnerable Software and Affected Versions feast-dev/feast version 0.53.0 Description A high-severity remote code execution issue exists in the Kubernetes materializer job located at feast/sdk/python/feast/infra/compute engines/kubernetes/main.py. The problem stems from using...

PT-2026-6114

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw related to handling crypto compressors during hibernation. Specifically, the crypto alloc acomp function can return an error pointer ERR PTR instead of...

PT-2026-43815

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the ext4 ext shift extents function. When the extent is NULL within the while loop, the function returns immediately without releasing the path acquired through t...

PT-2025-53291

Name of the Vulnerable Software and Affected Versions Marketing Fire Editorial Calendar versions 3.8.8 and earlier Description An authorization issue exists in the Editorial Calendar component of Marketing Fire Editorial Calendar. This allows exploitation of incorrectly configured access control...

PT-2025-50332

Hi All, Looking at the Action1 reports, and unable to see anything which would be useful to for reporting from for the vulnerability of devices. I'm looking for an export with the data similar to the below DeviceName, CveId, Severity, CVSS, PatchAvailable, Product, OS, LastSeen PC-001,...

PT-2025-50223

Name of the Vulnerable Software and Affected Versions Apache HugeGraph-Server versions prior to 1.7.0 Description A remote code execution issue exists where a malicious Raft node can exploit insecure Hessian deserialization within the PD store. The fix enforces IP-based authentication to restrict...

PT-2025-41712

Name of the Vulnerable Software and Affected Versions HCL Unica Platform affected versions not specified Description The HCL Unica Platform is susceptible to issues stemming from a misconfigured Content Security Policy CSP. This misconfiguration can allow malicious resources to load, potentially...

PT-2025-38357

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the DRM/i915/dpt subsystem. The i915 gem object is framebuffer function does not recognize the buffer object BO containing the framebuffer’s DPT a...

PT-2025-35996

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the BPF subsystem related to jump offset calculation in tailcall functionality. An extra pass during BPF compilation can skip JIT context...

PT-2025-30915 · Grav · Grav

Name of the Vulnerable Software and Affected Versions: grav versions prior to 1.7.49 Description: A Cross Site Scripting vulnerability exists in grav versions prior to 1.7.49. This allows an attacker to execute arbitrary code via a crafted script to the form fields. Recommendations: Update to gra...

PT-2025-30449

Name of the Vulnerable Software and Affected Versions Ollama version 0.6.7 Description A cross-domain token exposure exists in the server.auth.getAuthorizationToken function. This allows remote attackers to steal authentication tokens and bypass access controls by exploiting a malicious realm val...

PT-2025-28953 · Undefined · Undefined

Решения Ruckus Wireless Virtual SmartZone vSZ и Network Director RND подвержены многочисленным уязвимостям, которые могут позволить злоумышленникам скомпрометировать управляемые среды, оставаясь при этом неисправленными до настоящего времени. Ruckus Wireless Ruckus Networks реализует широкую...

PT-2025-22871 · H3C · H3C Seccenter Smp-E1114P02

Name of the Vulnerable Software and Affected Versions: H3C SecCenter SMP-E1114P02 up to 20250513 Description: A vulnerability was found in the function Download of the file /cfgFile/1/download. The manipulation of the argument Name leads to path traversal. The attack may be initiated remotely...

PT-2025-14785 · Openemr · Openemr

Name of the Vulnerable Software and Affected Versions: OpenEMR version 7.0.2 Description: The issue is related to SQL Injection. It affects files such as openemrlibraryclassesPharmacy.class.php, controllersC Pharmacy.class.php, and openemrcontroller.php. Recommendations: For OpenEMR version 7.0.2...

PT-2025-13560 · Futurenet · Futurenet Nxr Series

Name of the Vulnerable Software and Affected Versions: FutureNet NXR series, VXR series and WXR series routers affected versions not specified Description: The issue exists due to improper handling of symbolic link files. An attacker can exploit this by attaching an external storage containing...

PT-2025-3407 · Unknown · Phpgurukul Online Birth Certificate System

Name of the Vulnerable Software and Affected Versions: PHPGURUKUL Online Birth Certificate System version 1.0 Description: A Stored Cross-Site Scripting XSS issue was identified in the PHPGURUKUL Online Birth Certificate System. The issue arises via the profile name to the...

PT-2025-1790 · Epsimed +1 · Epsimed Mn-120 +1

Name of the Vulnerable Software and Affected Versions: Contec Health CMS8000 Patient Monitor versions smart3250-2.6.27-wlan2.1.7.cramfs Contec Health CMS8000 Patient Monitor versions CMS7.820.075.08/0.740.75 Contec Health CMS8000 Patient Monitor versions CMS7.820.120.01/0.930.95 Epsimed MN-120...

PT-2024-27461 · Matrix · Synapse

Name of the Vulnerable Software and Affected Versions: Synapse versions prior to 1.106 Description: Synapse, an open-source Matrix homeserver, allows unauthenticated remote participants to trigger a download and caching of remote media from a remote homeserver to the local media repository. This...

PT-2024-35332 · Unknown · Sanil Shakya Sticky Social Icons

Name of the Vulnerable Software and Affected Versions: Sanil Shakya Sticky Social Icons versions 1.2.1 and earlier Description: The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting', which allows stored XSS. Recommendations: For...

PT-2024-34148 · Suitecrm · Suitecrm

Name of the Vulnerable Software and Affected Versions: SuiteCRM versions prior to 7.14.6 SuiteCRM versions prior to 8.7.1 Description: The issue arises due to insufficient input validation and sanitization of the Publish Key field within the SuiteCRM application, allowing an attacker to inject...

PT-2024-19030 · WordPress · Houzez Login Register

Name of the Vulnerable Software and Affected Versions: Houzez Login Register versions 3.2.5 and earlier Description: A Privilege Escalation issue has been identified in the Houzez Login Register plugin. Recommendations: For Houzez Login Register versions 3.2.5 and earlier, update to a version tha...

PT-2024-27537 · Electrolink · Electrolink Transmitters

Name of the Vulnerable Software and Affected Versions: Electrolink transmitters affected versions not specified Description: The issue concerns Electrolink transmitters storing credentials in clear-text, which could allow an attacker to access the system using these credentials. Recommendations: ...

PT-2024-14038 · Stud.Ip · Stud.Ip

Name of the Vulnerable Software and Affected Versions: Stud.IP versions 5.x through 5.3.3 Description: The issue allows XSS with resultant upload of executable files because upload action and edit action in Admin SmileysController do not check the file extension. This leads to remote code executi...

PT-2023-30654 · Unknown · Perfmatters

Name of the Vulnerable Software and Affected Versions: Perfmatters versions prior to 2.2.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inject maliciou...

PT-2023-5316 · Acronis · Acronis Agent +2

Name of the Vulnerable Software and Affected Versions: Acronis Agent versions prior to build 32047 Acronis Cyber Protect 15 versions prior to build 35979 Description: The issue is related to the excessive collection of system information, which may lead to the disclosure of sensitive information...

PT-2023-14392 · Ibm · Ibm Security Guardium

Name of the Vulnerable Software and Affected Versions: IBM Security Guardium version 11.3 Description: The issue is due to improper input validation, which could allow an authenticated user to cause a denial of service. Recommendations: For IBM Security Guardium version 11.3, at the moment, there...

PT-2022-11568 · Elan · Elan Miniport Touchpad Windows Driver

Name of the Vulnerable Software and Affected Versions: ELAN Miniport touchpad Windows driver versions prior to 24.21.51.2 Description: The issue allows local users to cause a system crash by sending a certain IOCTL request, because that request is handled twice. This is related to the handling of...

PT-2022-2360 · Kingsoft · Kingsoft Wps Office

Name of the Vulnerable Software and Affected Versions: Kingsoft WPS Office versions 11.2.0.10382 and earlier Description: The issue is related to the wpsupdater.exe file in Kingsoft WPS Office, which allows remote code execution by modifying the HKEY CURRENT USER in the registry. This is due to...

PT-2022-14263 · Unknown · Ion Driver

Name of the Vulnerable Software and Affected Versions: ion driver affected versions not specified Description: The issue is related to an incorrect bounds check in the ion driver, which could lead to local information disclosure without requiring additional execution privileges. User interaction ...

PT-2021-6477 · NetGear · Netgear Rax50 +13

Name of the Vulnerable Software and Affected Versions: NETGEAR R6400v2 version not specified NETGEAR R6700v3 version not specified NETGEAR R7000 version not specified NETGEAR R8500 version not specified NETGEAR RAX15 version not specified NETGEAR RAX20 version not specified NETGEAR RAX35v2 versio...

PT-2021-7682 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A use-after-free flaw was found in the Linux kernel’s Ext4 File System related to the overlay FS usage. This issue allows a local user to crash or potentially escalate their privileges...

PT-2021-2559 · Linux +9 · Linux Kernel +9

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.11.3 Description: An issue was discovered in the Linux kernel when a webcam device exists, related to a memory leak in the video usercopy function in drivers/media/v4l2-core/v4l2-ioctl.c for large arguments...

PT-2019-4482

Name of the Vulnerable Software and Affected Versions OpenSSL versions 1.1.1 through 1.1.1d OpenSSL versions 1.0.2 through 1.0.2t Description The issue is related to an overflow bug in the x64 64 Montgomery squaring procedure used in exponentiation with 512-bit moduli. No EC algorithms are...

PT-2019-8724 · Jenkins · Jenkins Config File Provider Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Config File Provider Plugin versions 3.1 and earlier Description: A cross-site scripting issue exists in the configfiles.jelly and providerlist.jelly files, allowing users who can configure configuration files to insert arbitrary HTML...

PT-2019-4107 · Linux +7 · Linux Kernel +7

Name of the Vulnerable Software and Affected Versions: Linux kernel versions 2.6.34 through 5.2.x Description: A buffer overflow flaw was found in the Linux kernel's vhost functionality, which translates virtqueue buffers to IOVs and logs buffer descriptors during migration. This flaw can be...

PT-2026-92943

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware Helidon versions 4.0.0 through 4.5.4 Description A flaw in the helidon-microprofile-security component allows a low privileged attacker with network access via HTTP to compromise the system. This can lead to unauthoriz...

PT-2026-91886

First CVE IDs are in — MITRE assigned 10 CVEs to our research CVE-2026-88557 → 88566. All 10 were found, verified end-to-end, and disclosed first by our AI-driven research pipeline. Every single one ships a full root-cause analysis and a working, reproducible PoC — public since day one, no...

PT-2026-83177

Incorrect access control in the startSlaveReboot function of TOTOLINK T6 4.1.5cu.748 B20211015 allows unauthenticated attackers to arbitrarily force a reboot via sending a crafted MQTT message...

PT-2026-82696

Spring for GraphQL applications are vulnerable to Unsafe Deserialization when processing paginated GraphQL queries. Spring for GraphQL 2.0.0 - 2.0.4...

PT-2026-79692

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the at91sam9 wdt watchdog driver where the at91 ping function rearms the watchdog timer from its callback. Because timer delete does not wait for a running callback or...

PT-2026-79355

Name of the Vulnerable Software and Affected Versions io.micrometer:micrometer-registry-statsd affected versions not specified io.micrometer:micrometer-core affected versions not specified Description Failure to sanitize newline characters , r in metrics data allows for injection and spoofing...