<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: smartbear</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2025-29157: An issue in petstore v.1.0.7 allows a remote attacker to execute arbitrary code via accessing a non-existent e</title><link>https://patchthecve.com/cve/CVE-2025-29157.html</link><guid>https://patchthecve.com/cve/CVE-2025-29157.html</guid><pubDate>Wed, 17 Jun 2026 09:05:10 +0000</pubDate><description>MEDIUM 6.5: An issue in petstore v.1.0.7 allows a remote attacker to execute arbitrary code via accessing a non-existent endpoint/cart, the server returns a 404-error page exposing sensitive information including the Servlet name (default) and server version</description></item><item><title>CVE-2025-29156: Cross Site Scripting vulnerability in petstore v.1.0.7 allows a remote attacker to execute arbitrary code via </title><link>https://patchthecve.com/cve/CVE-2025-29156.html</link><guid>https://patchthecve.com/cve/CVE-2025-29156.html</guid><pubDate>Wed, 17 Jun 2026 09:05:09 +0000</pubDate><description>MEDIUM 6.1: Cross Site Scripting vulnerability in petstore v.1.0.7 allows a remote attacker to execute arbitrary code via a crafted script to the /api/v3/pet</description></item><item><title>CVE-2025-29155: An issue in petstore v.1.0.7 allows a remote attacker to execute arbitrary code via the DELETE endpoint</title><link>https://patchthecve.com/cve/CVE-2025-29155.html</link><guid>https://patchthecve.com/cve/CVE-2025-29155.html</guid><pubDate>Wed, 17 Jun 2026 09:05:09 +0000</pubDate><description>MEDIUM 6.5: An issue in petstore v.1.0.7 allows a remote attacker to execute arbitrary code via the DELETE endpoint</description></item><item><title>CVE-2024-7565: SMARTBEAR SoapUI unpackageAll Directory Traversal Remote Code Execution Vulnerability</title><link>https://patchthecve.com/cve/CVE-2024-7565.html</link><guid>https://patchthecve.com/cve/CVE-2024-7565.html</guid><pubDate>Wed, 17 Jun 2026 08:20:27 +0000</pubDate><description>HIGH 7.8: SMARTBEAR SoapUI unpackageAll Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of SMARTBEAR SoapUI. User interaction is required to exploit this vulnerability in that the target must visit a malici</description></item></channel></rss>