PhoneGap / Cordova Social Sharing plugin 安全漏洞

PhoneGap / Cordova Social Sharing plugin is a text file sharing plugin by Eddy Verbruggen Personal Developer. A security vulnerability exists in the PhoneGap / Cordova Social Sharing plugin version 6.0.4, which stems from the exported broadcast receiver not checking if Intent.EXTRACHOSENCOMPONENT...

FreeBSD : lightdm-kde-greeter -- Privilege Escalation from lightdm Service User to root (2063f110-c0b8-11f0-a633-8c164580114f)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 2063f110-c0b8-11f0-a633-8c164580114f advisory. SUSE Security Team reports: A Execution with Unnecessary Privileges vulnerability in lightdm-kde-greete...

EUVD-2025-131905

A Execution with Unnecessary Privileges vulnerability in lightdm-kde-greeter allows escalation from the service user to root.This issue affects lightdm-kde-greeter. before 6.0.4...

CVE-2025-62876

A Execution with Unnecessary Privileges vulnerability in lightdm-kde-greeter allows escalation from the service user to root.This issue affects lightdm-kde-greeter. before 6.0.4...

CVE-2025-62876

A Execution with Unnecessary Privileges vulnerability in lightdm-kde-greeter allows escalation from the service user to root.This issue affects lightdm-kde-greeter. before 6.0.4...

CVE-2025-62876

CVE-2025-62876 affects lightdm-kde-greeter and enables a local privilege escalation from the service user to root due to an execution with unnecessary privileges. Public advisories confirm the issue exists in versions before 6.0.4, with fixes released in 6.0.4 (and later) as part of vendor update...

PT-2025-46656

Name of the Vulnerable Software and Affected Versions lightdm-kde-greeter versions prior to 6.0.4 Description An issue exists in lightdm-kde-greeter that allows for privilege escalation from the service user to root. This is due to execution with unnecessary privileges. Recommendations Update...

WordPress plugin Jock On Air Now (JOAN) 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

[BSA-125] Security Update for incus

Mathias Gibbens uploaded new packages for incus which fixed the following security problems: CVE ID : CVE-2025-54286 CVE-2025-54287 CVE-2025-54288 CVE-2025-54289 CVE-2025-54290 CVE-2025-54291 CVE-2025-54293 Multiple security issues were discovered in Incus, a system container and virtual machine...

Debian dsa-6027 : golang-github-lxc-incus-dev - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6027 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6027-1 [email protected] https://www.debian.org/securit...

EUVD-2020-29061

Malware in sbrugna...

EUVD-2021-19430

Malware in sbrugna...

EUVD-2022-2938

Malicious code in bioql PyPI...

EUVD-2025-16939

Malicious code in bioql PyPI...

EUVD-2024-37603

Malicious code in bioql PyPI...

EUVD-2022-15643

Malicious code in bioql PyPI...

EUVD-2022-3314

Malicious code in bioql PyPI...

CVE-2025-49008

Atheos is a self-hosted browser-based cloud integrated development environment. Prior to version 6.0.4, improper use of escapeshellcmd in /components/codegit/traits/execute.php allows argument injection, leading to arbitrary command execution. Atheos administrators and users of vulnerable version...

CVE-2025-49008 Atheos Improper Input Validation Vulnerability Enables RCE in Common.php

Atheos is a self-hosted browser-based cloud integrated development environment. Prior to version 6.0.4, improper use of escapeshellcmd in /components/codegit/traits/execute.php allows argument injection, leading to arbitrary command execution. Atheos administrators and users of vulnerable version...

CVE-2025-49008 Atheos Improper Input Validation Vulnerability Enables RCE in Common.php

Atheos is a self-hosted browser-based cloud integrated development environment. Prior to version 6.0.4, improper use of escapeshellcmd in /components/codegit/traits/execute.php allows argument injection, leading to arbitrary command execution. Atheos administrators and users of vulnerable version...