Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992563)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992563 advisory. In the Linux kernel, the following vulnerability has been resolved: perf/core: Fix perfoutputbegin parameter is incorrectly invoked in perfeventbpfoutput syzkaller...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992592)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992592 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Fix duplicated reported IWCMEVENTCONNECTREPLY event If siwrecvmparr returns -EAGAIN, it...

WordPress plugin Event Organiser 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a reference counting error in the tracing tracebufferedeventdisable function...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992316)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992316 advisory. In the Linux kernel, the following vulnerability has been resolved: tracing: Have traceeventfile have ref counters The following can crash the kernel: cd...

CVE-2025-15197

creationtimestamp| type| source ---|---|--- 2025-12-29 19:27:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mb5kxzbnv52e...

CVE-2025-15168

creationtimestamp| type| source ---|---|--- 2025-12-29 04:52:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mb423jiuv72c 2026-01-09 22:06:42+00:00| seen| Telegram/2tmB9X6H3Ti-myCGo7FZg0hXdrnaBtrok6C0Sug0L5hEs24...

CVE-2025-33212

creationtimestamp| type| source ---|---|--- 2025-12-27 20:36:57+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3maynwcxnnc2s 2026-01-09 23:07:04+00:00| seen| Telegram/3VMHuZJJpWuQDQD7W2QL9nIMLLhgimFT4vXEohZS6QkxBh0...

CVE-2024-30167

creationtimestamp| type| source ---|---|--- 2025-12-27 15:00:07+00:00| published-proof-of-concept| Telegram/jzwMWime8fhSscH30BIVAvpGgHaIHZPVce6IatouQmqqRA 2026-04-29 05:31:07+00:00| seen| https://bsky.app/profile/exploitdb-bot.bsky.social/post/3mkmensmnki2g...

WordPress Event Organiser plugin <= 3.12.8 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Doan Dinh Van in WordPress Plugin Event Organiser versions = 3.12.8...

CVE-2024-44065

creationtimestamp| type| source ---|---|--- 2025-12-26 18:45:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mavxa4idil2c...

CVE-2025-68944

creationtimestamp| type| source ---|---|--- 2025-12-26 05:03:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3maujcw2oyg2o...

CVE-2025-68375

In the Linux kernel, the following vulnerability has been resolved: perf/x86: Fix NULL event access and potential PEBS record loss When intelpmudrainpebsicl is called to drain PEBS records, the perfeventoverflow could be called to process the last PEBS record. While perfeventoverflow could trigge...

CVE-2025-68578

creationtimestamp| type| source ---|---|--- 2025-12-25 10:53:19+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3masmetwapx2t...

SUSE CVE-2023-54152

In the Linux kernel, the following vulnerability has been resolved: can: j1939: prevent deadlock by moving j1939skerrqueue This commit addresses a deadlock situation that can occur in certain scenarios, such as when running data TP/ETP transfer and subscribing to the error queue while receiving a...

SUSE CVE-2025-67725

Tornado is a Python web framework and asynchronous networking library. In versions 6.5.2 and below, a single maliciously crafted HTTP request can block the server's event loop for an extended period, caused by the HTTPHeaders.add method. The function accumulates values using string concatenation...

SUSE CVE-2025-68370

In the Linux kernel, the following vulnerability has been resolved: coresight: tmc: add the handle of the event to the path The handle is essential for retrieving the AUXEVENT of each CPU and is required in perf mode. It has been added to the coresightpath so that dependent devices can access it...

SUSE CVE-2025-68375

In the Linux kernel, the following vulnerability has been resolved: perf/x86: Fix NULL event access and potential PEBS record loss When intelpmudrainpebsicl is called to drain PEBS records, the perfeventoverflow could be called to process the last PEBS record. While perfeventoverflow could trigge...

ChurchCRM Event Participant Editor SQL Injection Vulnerability

ChurchCRM is an open source church management system. ChurchCRM suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the event participant editor. An attacker can exploit the vulnerability to cause a full database disclosure and...

CVE-2025-68917

creationtimestamp| type| source ---|---|--- 2025-12-24 22:32:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3marcxu3zgp2r 2026-09-03 12:00:06+00:00| seen| https://t.me/bizonechannel/2808 2026-09-04 00:00:51+00:00| seen| https://t.me/bizonechannel/2808...