304 matches found
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: PCI: pciehp: Avoid unnecessary device replacement checks The hot removal of nested PCI hotplug ports involves a long-standing race condition that can lead to a deadlock. A parent hotplug port acquires pcilockrescanremove, then...
The US Is Storing Migrant Children’s DNA in a Criminal Database
Customs and Border Protection has swabbed the DNA of migrant children as young as 4, whose genetic data is uploaded to an FBI-run database that can track them if they commit crimes in the future...
CVE-2022-48305
There is an identity authentication bypass vulnerability in Huawei Children Smart Watch Simba-AL00 1.1.1.274. Successful exploitation of this vulnerability may cause the access control function of specific applications to fail...
CVE-2021-37477
In NavigateCMS version 2.9.4 and below, function in structure.php is vulnerable to sql injection on parameter childrenorder, which results in arbitrary sql query execution in the backend database...
kernel: fsnotify: clear PARENT_WATCHED flags lazily
A flaw was found in the Linux kernel's fsnotify subsystem. When a parent directory stops watching its children, a race condition can occur during the clearing of PARENTWATCHED flags. This contention on the inode-ilock can lead to system unresponsiveness or softlockups, effectively causing a Denia...
CVE-2025-4099
The List Children plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'listchildren' shortcode in all versions up to, and including, 2.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...
CVE-2025-4099 List Children <= 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
The List Children plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'listchildren' shortcode in all versions up to, and including, 2.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...
CVE-2025-4099 List Children <= 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
The List Children plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'listchildren' shortcode in all versions up to, and including, 2.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...
CVE-2025-4099: Improper Neutralization of Input During Web Page Generation
The List Children plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'listchildren' shortcode in all versions up to, and including, 2.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...
PT-2025-18359 · WordPress · List Children
Name of the Vulnerable Software and Affected Versions: The List Children plugin for WordPress versions up to, and including, 2.1 Description: The issue is related to Stored Cross-Site Scripting via the plugin's 'list children' shortcode due to insufficient input sanitization and output escaping o...
Child predators are lurking on dating apps, warns report
Using a dating app? Beware of your potential partner's motives. A report from Edinburgh University warns that child abusers are using these apps to find single parents with vulnerable children. The Searchlight 2025 report, from the University's Childlight Global Child Safety Institute, analyses t...
79 Arrested as Dark Web’s Largest Child Abuse Network ‘Kidflix’ Busted
Dark web child abuse hub ‘Kidflix’ dismantled in global operation. 1.8M users, 91,000+ CSAM videos exposed. 79 arrests, 39 children rescued...
Don’t let your kids on Roblox if you’re not comfortable, says Roblox CEO
In response to growing worries about the safety of children using Roblox, the CEO of the company has said to parents: "My first message would be, if you're not comfortable, don't let your kids be on Roblox." Roblox is one of the most popular gaming platforms, especially among young children...
A week in security (March 3 – March 9)
Last week on Malwarebytes Labs: TikTok: Major investigation launched into platform’s use of children’s data PayPal scam abuses Docusign API to spread phishy emails Android zero-day vulnerabilities actively abused. Update as soon as you can I spoke to a task scammer. Here’s how it went Android...
CVE-2025-21813 timers/migration: Fix off-by-one root mis-connection
In the Linux kernel, the following vulnerability has been resolved: timers/migration: Fix off-by-one root mis-connection Before attaching a new root to the old root, the children counter of the new root is checked to verify that only the upcoming CPU's top group have been connected to it. However...
CVE-2025-21813
CVE-2025-21813 affects the Linux kernel timers/migration code. The root cause is an off-by-one mis-count during the migration of the top CPU group to a new root, where the old root is pre-accounted as a child of the new root. After attaching the upcoming CPU’s top group, the expected children cou...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: fsnotify: Clearing PARENTWATCHED flags lazily In some setups, directories can have many usually negative entries. Therefore, the fsnotifyupdatechilddentryflags function can take a significant amount of time. Since most of this...
Online gaming safety for kids: learn how to protect your children
Children love online gaming, and it's no surprise they do it, considering it offers them fun and interactive…...
CLSA-2025-1738170437 hivex: Fix of CVE-2021-3622
CVE-2021-3622: fix possible stack overflow by adding the depth of recursion in the getchildren...
Security flaws found in tiny phones promoted to children
TL;DR Three mini smartphones promoted to children were analysed Those devices are heavily promoted on TikTok All had outdated operating systems All could be rooted without wiping the phone, allowing data to be compromised with physical access One had malware artefacts pre-installed One had an...