Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000233)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000233 advisory. The Broadcom brcmfmac WiFi driver prior to commit 1b5e2423164b3670e8bc9174e4762d297990deff is vulnerable to a heap buffer overflow. If the Wake-up on Wireless LAN...

CVE-2019-25251

creationtimestamp| type| source ---|---|--- 2026-01-05 16:34:13+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115843455585115998...

Exploit for Path Traversal in Nevma Adaptive_Images

CVE-2019-14206 - Adaptive Images for WordPress Arbitrary File...

CVE-2019-14206

creationtimestamp| type| source ---|---|--- 2026-01-04 03:51:38+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2019/CVE-2019-14206.yaml 2026-01-12 09:15:48+00:00| confirmed|...

CVE-2019-14462

creationtimestamp| type| source ---|---|--- 2026-01-02 03:00:06+00:00| published-proof-of-concept| Telegram/huvAG7okNQ2XysBd-yGzTnV1q0to41zfvXVsGPDdjB-DIlU...

CVE-2019-25262 elinicksic Razgover Chat Message send.php cross site scripting

A security vulnerability has been detected in elinicksic Razgover up to db37dfc5c82f023a40f2f7834ded6633fb2b5262. This affects an unknown part of the file Chattify/send.php of the component Chat Message Handler. Such manipulation of the argument msg leads to cross site scripting. The attack may b...

CVE-2019-25255

creationtimestamp| type| source ---|---|--- 2025-12-24 21:53:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3marasve7oz2q...

CVE-2019-25248

creationtimestamp| type| source ---|---|--- 2025-12-24 21:48:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3marajwwvdn2q...

CVE-2019-25257

creationtimestamp| type| source ---|---|--- 2025-12-24 21:38:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mar7y23jak2e...

CVE-2019-25239

creationtimestamp| type| source ---|---|--- 2025-12-24 21:05:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mar64ymjxx2c...

CVE-2019-25240

creationtimestamp| type| source ---|---|--- 2025-12-24 21:02:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mar5wtnhaa22 2025-12-24 21:48:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3marajsujz52f...

CVE-2019-25237

creationtimestamp| type| source ---|---|--- 2025-12-24 20:55:14+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mar5kafqhz2e 2025-12-24 21:09:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mar6dwyngo2m...

CVE-2019-25236

creationtimestamp| type| source ---|---|--- 2025-12-24 20:55:07+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mar5jzo6uj2a 2025-12-24 21:43:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3maraayjehi2q 2026-01-05 16:34:14+00:00| seen|...

CVE-2019-25235

creationtimestamp| type| source ---|---|--- 2025-12-24 20:55:00+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mar5jss25h22 2025-12-24 21:07:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mar6ae7uot2y...

CVE-2019-25246

creationtimestamp| type| source ---|---|--- 2025-12-24 20:27:05+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mar3xvq7yt2t 2025-12-24 20:27:10+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mar3xzm2fs2b 2025-12-24 20:27:44+00:00| seen|...

CVE-2019-25243

creationtimestamp| type| source ---|---|--- 2025-12-24 20:25:34+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mar3v75iw32t 2025-12-24 20:26:00+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mar3vxv4mh2g...

CVE-2019-25249

creationtimestamp| type| source ---|---|--- 2025-12-24 20:25:26+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mar3uxll7s2b 2025-12-24 20:25:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mar3vq4pwh2a 2025-12-24 21:58:45+00:00| seen|...

CVE-2019-25254

KYOCERA Net Admin 3.4.0906 contains a cross-site request forgery vulnerability that allows attackers to create administrative users without proper request validation. Attackers can craft malicious web pages that automatically submit forms to add new admin accounts with predefined credentials when...

CVE-2019-25255

VideoFlow Digital Video Protection DVP 2.10 contains an authenticated remote code execution vulnerability that allows attackers to execute system commands with root privileges. Attackers can exploit the vulnerability through a cross-site request forgery CSRF mechanism to gain unauthorized system...

CVE-2019-25252

Teradek VidiU Pro 3.0.3 contains a cross-site request forgery vulnerability that allows attackers to change administrative passwords without proper request validation. Attackers can craft malicious web pages that automatically submit password change requests to the device when a logged-in...