CVE-2025-23810

CVE-2025-23810 affects Len Slider (WordPress plugin) with a CSRF that enables Reflected XSS. Affected: Len Slider versions up to 2.0.11 (the initial document lists no exact fixed version). Root cause and exploit details are not publicly provided in the connected documents. No remediation details ...

CVE-2025-23778

CVE-2025-23778: Missing Authorization vulnerability in the WordPress plugin User Sync ActiveCampaign (registered-user-sync-activecampaign) allows exploitation of misconfigured access control. Affected versions are from n/a up to 1.3.2. Root cause identified as broken access control; CVSS 3.1 base...

CVE-2025-23690

CVE-2025-23690: CSRF to Stored XSS in the ArtkanMedia Book a Place plugin (WordPress). Affected: Book a Place from n/a through 0.7.1. Root cause/impact and remediation details are not provided in the connected documents; exploitation status is not specified.

CVE-2024-12427 Multi Step Form <= 1.7.23 - Missing Authorization to Unauthenticated Limited File Upload

The Multi Step Form plugin for WordPress is vulnerable to unauthorized limited file upload due to a missing capability check on the fwuploadfile AJAX action in all versions up to, and including, 1.7.23. This makes it possible for unauthenticated attackers to upload limited file types such as imag...

CVE-2024-48885

creationtimestamp| type| source ---|---|--- 2025-01-16 09:04:45+00:00| seen| https://infosec.exchange/users/cve/statuses/113837230346110730 2025-01-16 09:15:18+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lftwxtgaet2t 2025-01-16 09:43:32+00:00| seen|...

Chromium: CVE-2025-0435 Inappropriate implementation in Navigation

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2024-57578

CVE-2024-57578 affects Tenda AC18, version 15.03.05.19. Connected reports confirm a stack overflow in the formSetCfm function caused by the funcpara1 parameter, enabling potential arbitrary code execution or denial of service. The PT-2024-10240 entry provides practical mitigation guidance: tempor...

CVE-2024-57159

07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery CSRF via /erp.07fly.net:80/oa/OaWorkReport/add.html...

CVE-2025-22904

RE11S v1.11 was discovered to contain a stack overflow via the pptpUserName parameter in the setWAN function...

CVE-2024-36751

creationtimestamp| type| source ---|---|--- 2025-01-15 22:08:09+00:00| seen| https://infosec.exchange/users/cve/statuses/113834648470715594 2025-01-15 22:15:44+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfss4fqvha2p 2025-01-15 22:55:16+00:00|...

CVE-2024-52005

Git is a source code management tool. When cloning from a server or fetching, or pushing, informational or error messages are transported from the remote Git process to the client via the so-called "sideband channel". These messages will be prefixed with "remote:" and printed directly to the...

CVE-2024-57900

In the Linux kernel, the following vulnerability has been resolved: ila: serialize calls to nfregisternethooks syzbot found a race in ilaaddmapping 1 commit 031ae72825ce "ila: call nfunregisternethooks sooner" attempted to fix a similar issue. Looking at the syzbot repro, we have concurrent...

CVE-2024-57895

creationtimestamp| type| source ---|---|--- 2025-01-15 13:17:01+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfrtz4fwlw2r 2025-01-15 15:06:55+00:00| seen| https://t.me/cvedetector/15451 2026-03-13 00:00:00+00:00| seen|...

CVE-2024-57902

In the Linux kernel, the following vulnerability has been resolved: afpacket: fix vlangettci vs MSGPEEK Blamed commit forgot MSGPEEK case, allowing a crash 1 as found by syzbot. Rework vlangettci to not touch skb at all, so that it can be used from many cpus on the same skb. Add a const qualifier...

CVE-2024-57892

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix slab-use-after-free due to dangling pointer dqipriv When mounting ocfs2 and then remounting it as read-only, a slab-use-after-free occurs after the user uses a syscall to quotagetnextquota. Specifically, sbdqinfosb,...

CVE-2024-57898

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: clear link ID from bitmap during link delete after clean up Currently, during link deletion, the link ID is first removed from the validlinks bitmap before performing any clean-up operations. However, some functio...

CVE-2024-57841

In the Linux kernel, the following vulnerability has been resolved: net: fix memory leak in tcpconnrequest If inetcskreqskqueuehashadd return false, tcpconnrequest will return without free the dst memory, which allocated in afops-routereq. Here is the kmemleak stack: unreferenced object...

CVE-2024-57801 net/mlx5e: Skip restore TC rules for vport rep without loaded flag

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Skip restore TC rules for vport rep without loaded flag During driver unload, unregisternetdev is called after unloading vport rep. So, the mlx5ereppriv is already freed while trying to get rpriv-netdev, or walk...

CVE-2024-57903 net: restrict SO_REUSEPORT to inet sockets

In the Linux kernel, the following vulnerability has been resolved: net: restrict SOREUSEPORT to inet sockets After blamed commit, crypto sockets could accidentally be destroyed from RCU call back, as spotted by zyzbot 1. Trying to acquire a mutex in RCU callback is not allowed. Restrict...

CVE-2024-57884 mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim()

In the Linux kernel, the following vulnerability has been resolved: mm: vmscan: account for free pages to prevent infinite Loop in throttledirectreclaim The task sometimes continues looping in throttledirectreclaim because allowdirectreclaimpgdat keeps returning false. 0 ffff80002cb6f8d0 switchto...