Debian dla-4211 : roundcube - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4211 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4211-1 [email protected] https://www.debian.org/lts/security/...

Security advisory: Recently discovered issue in qDecodeDataUrl() in QtCore impacts Qt

An issue was found in the private API function qDecodeDataUrl in QtCore, which is used in QTextDocument and QNetworkReply, and, potentially, in user code. This has been assigned the CVE id CVE-2025-5455. Affected versions: All version of Qt up to and including 5.15.18, from 6.0.0 through 6.5.8,...

[SECURITY] [DSA 5936-1] libfile-find-rule-perl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5936-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 05, 2025 https://www.debian.org/security/faq -...

WordPress Pay with Contact Form 7 plugin <= 1.0.4 - Cross Site Request Forgery (CSRF) Vulnerability

Cross Site Request Forgery CSRF Vulnerability discovered by haudayroi in WordPress Plugin Pay with Contact Form 7 versions = 1.0.4...

CVE-2025-20989

creationtimestamp| type| source ---|---|--- 2025-06-04 05:41:56+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqr3sl2tvsb2 2025-06-04 06:37:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqr6yaz3vb2a...

PT-2025-24069 · Undefined · Undefined

CVE-2025-49203 - Apache HTTP Server Cross-Site Request Forgery CVE ID : CVE-2025-49203 Published : June 4, 2025, 3:15 a.m. | 19 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE-2025-43923

creationtimestamp| type| source ---|---|--- 2025-06-03 15:49:41+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqpndnj7psp2...

CVE-2025-45542

creationtimestamp| type| source ---|---|--- 2025-06-02 17:01:55+00:00| published-proof-of-concept| Telegram/evyU1N0NEzlqWkLQZaMrYM3OKb94J6CqLDhasOVakxq7P0 2025-06-03 14:33:06+00:00| seen| https://schleuss.online/users/vulnbot/statuses/114619920256351189 2025-06-03 14:36:15+00:00| seen|...

CVE-2025-0073 Mali GPU Kernel Driver allows improper GPU memory processing operations

Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform improper GPU memory processing operations to gain access to already freed memory.This issue affects Valhall GPU Kernel Driver...

CVE-2025-5432

creationtimestamp| type| source ---|---|--- 2025-06-02 06:31:12+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqm5oehiiae2...

Debian dla-4197 : python3-flask-cors - security update

The remote Debian 11 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-4197 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4197-1 [email protected]...

CVE-2025-41235

CVE-2025-41235 concerns Spring Cloud Gateway Server and is linked to an HTTP header handling flaw: it forwards X-Forwarded-For and Forwarded headers from untrusted proxies, enabling potential HTTP request/response smuggling (CWE-444). The vulnerability is associated with the gateway’s header proc...

CVE-2024-54952

creationtimestamp| type| source ---|---|--- 2025-05-29 21:06:09+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqdmoryfbc52...

Exploit for CVE-2025-1461

Vuetify VCalendar XSS Vulnerability POC CVE-2025-1461 This...

Debian: Security Advisory (DSA-5927-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian dla-4193 : linux-config-6.1 - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4193 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4193-1 [email protected]...

[SECURITY] [DSA 5928-1] libvpx security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5928-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 28, 2025 https://www.debian.org/security/faq -...

PT-2025-23329 · Undefined · Undefined

CVE-2022-45114 - Apache Struts Remote Code Execution Vulnerability CVE ID : CVE-2022-45114 Published : May 28, 2025, 7:15 p.m. | 2 hours, 16 minutes ago Description : Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused Severity: 0.0 | NA...

PT-2025-23355 · Undefined · Undefined

CVE-2022-46736 - Apache HTTP Server Cross-Site Request Forgery CVE ID : CVE-2022-46736 Published : May 28, 2025, 7:15 p.m. | 2 hours, 15 minutes ago Description : Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused Severity: 0.0 | NA Vis...

PT-2025-23347 · Undefined · Undefined

CVE-2022-45125 - Apache HTTP Server Authentication Bypass CVE ID : CVE-2022-45125 Published : May 28, 2025, 7:15 p.m. | 2 hours, 15 minutes ago Description : Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused Severity: 0.0 | NA Visit th...