Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerability has been resolved: swiotlb: Fixed the issue of information leakage due to DMAFROMDEVICE. The problem I’m addressing was discovered during the LTP test covering cve-2018-1000204. A brief description of what happens is as follows: 1 The test case sen...

Astra Linux – Vulnerability in Samba

The fixes in 4.6.16, 4.7.9, 4.8.4, and 4.9.7 for CVE-2018-10919, which address the issue of confidential attributes being disclosed via LDAP filters, were insufficient. An attacker may be able to obtain confidential BitLocker recovery keys from a Samba AD DC...

CVE-2018-25328

VX Search 10.6.18 contains a local buffer overflow vulnerability that allows attackers to overwrite the instruction pointer by supplying an oversized string in the directory field. Attackers can craft a malicious input file containing 271 bytes of junk data followed by a return address to execute...

CVE-2018-25330

creationtimestamp| type| source ---|---|--- 2026-05-17 14:59:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm2msvtccr2i...

CVE-2018-25328

creationtimestamp| type| source ---|---|--- 2026-05-17 14:56:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm2mmwodr52k...

CVE-2018-25327

creationtimestamp| type| source ---|---|--- 2026-05-17 14:53:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm2mhklkqp2p...

CVE-2018-25329

creationtimestamp| type| source ---|---|--- 2026-05-17 14:45:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm2m222nlt2h...

CVE-2018-25332

creationtimestamp| type| source ---|---|--- 2026-05-17 14:43:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm2lw72uhj2k 2026-05-27 22:37:05+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mmul26bjea2u...

CVE-2018-25326

creationtimestamp| type| source ---|---|--- 2026-05-17 14:41:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm2lsmb3652o...

CVE-2018-25325

creationtimestamp| type| source ---|---|--- 2026-05-17 14:37:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm2lm36p7j2c...

CVE-2018-25331

creationtimestamp| type| source ---|---|--- 2026-05-17 14:36:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm2lj3hrou2o...

CVE-2018-25333

creationtimestamp| type| source ---|---|--- 2026-05-17 14:34:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm2lgarnhh2r...

CVE-2018-25326

Google Drive for WordPress 2.2 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files by injecting directory traversal sequences in the filename parameter. Attackers can send POST requests to gdrive-ajaxs.php with the ajaxstype parameter set to...

CVE-2018-25333

Nordex N149/4.0-4.5 Wind Turbine Web Server 4.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the login parameter in login.php. Attackers can submit crafted POST requests with SQL injection payloa...

CVE-2018-25338

Zechat 1.5 contains a SQL injection vulnerability in the hashtag parameter that allows unauthenticated attackers to extract database information using union-based techniques. Attackers can exploit the hashtag parameter with union-based payloads to retrieve table and column names...

CVE-2018-25335

CVE-2018-25335 affects the WordPress plugin Peugeot Music 1.0. It contains an arbitrary file upload vulnerability that allows unauthenticated attackers to upload files via POST to upload.php, with attackers able to set arbitrary file extensions by manipulating the name parameter to execute code f...

CVE-2018-25333 Nordex N149/4.0-4.5 Wind Turbine Web Server SQL Injection

Nordex N149/4.0-4.5 Wind Turbine Web Server 4.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the login parameter in login.php. Attackers can submit crafted POST requests with SQL injection payloa...

CVE-2018-25329

The CVE CVE-2018-25329 concerns WordPress Plugin WP with Spritz 1.0. A remote file inclusion flaw exists in the wp.spritz.content.filter.php URL parameter, allowing unauthenticated attackers to read arbitrary files by injecting file paths. This can expose sensitive files (e.g., system configurati...

CVE-2018-25327

Joomla! Component Js Jobs 1.2.0 contains a cross-site request forgery vulnerability that allows attackers to perform state-changing actions without token validation. Attackers can craft malicious HTML forms targeting administrative endpoints like job.jobenforcedelete to delete job entries or modi...

CVE-2018-25326

Google Drive for WordPress 2.2 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files by injecting directory traversal sequences in the filename parameter. Attackers can send POST requests to gdrive-ajaxs.php with the ajaxstype parameter set to...