Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001981)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001981 advisory. Use-after-free vulnerability in the kvmioctlcreatedevice function in virt/kvm/kvmmain.c in the Linux kernel before 4.8.13 allows host OS users to cause a denial of...

EUVD-2021-8161

Malicious code in bioql PyPI...

CVE-2021-20748

Retty App for Android versions prior to 4.8.13 and Retty App for iOS versions prior to 4.11.14 uses a hard-coded API key for an external service. By exploiting this vulnerability, API key for an external service may be obtained by analyzing data in the app...

BIT-WORDPRESS-MULTISITE-2020-11030 Cross-site scripting (XSS) in Search block in WordPress

In affected versions of WordPress, a special payload can be crafted that can lead to scripts getting executed within the search block of the block editor. This requires an authenticated user with the ability to add content. This has been patched in version 5.4.1, along with all the previously...

phpFox < 4.8.13 - (redirect) PHP Object Injection Exploit

?php / -------------------------------------------------------------- phpFox = 4.8.13 redirect PHP Object Injection Vulnerability -------------------------------------------------------------- author..............: Egidio Romano aka EgiX mail................: n0b0d13satgmaildotcom software...

CVE-2021-20748

The CVE-2021-20748 entry concerns Retty App for Android (versions prior to 4.8.13) and iOS (versions prior to 4.11.14) that hard-code an API key for an external service. The root cause is a hard-coded credential embedded in the app, allowing an observer analyzing the app’s data to obtain the API ...

[SECURITY] Fedora 24 Update: kernel-4.8.13-200.fc24

The kernel meta package...

[ASA-201612-14] linux-zen: denial of service

Arch Linux Security Advisory ASA-201612-14 ========================================== Severity: High Date : 2016-12-12 CVE-ID : CVE-2016-9919 Package : linux-zen Type : denial of service Remote : Yes Link : https://wiki.archlinux.org/index.php/CVE Summary ======= The package linux-zen before...