com.melloware:wildfly-myfaces-galleon-pack (9.27.0.final), org.keycloak:keycloak-saml-wildfly-jakarta-subsystem (22.0.0) +114 more potentially affected by CVE-2025-23367 via org.wildfly.core:wildfly-server (19.0.1.final)

org.wildfly.core:wildfly-server MAVEN version 19.0.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-server and may be impacted: - com.melloware:wildfly-myfaces-galleon-pack 9.27.0.final -...

org.wildfly.core:wildfly-core-feature-pack-common (20.0.0.beta3), org.wildfly.core:wildfly-core-galleon-pack (20.0.0.beta3) +18 more potentially affected by CVE-2025-23367 via org.wildfly.core:wildfly-server (20.0.0.beta3)

org.wildfly.core:wildfly-server MAVEN version 20.0.0.beta3 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-server and may be impacted: - org.wildfly.core:wildfly-core-feature-pack-common 20.0.0.beta3 -...

org.wildfly.core:wildfly-core-feature-pack-common (21.1.0.beta1), org.wildfly.core:wildfly-core-galleon-pack (21.1.0.beta1) +18 more potentially affected by CVE-2025-23367 via org.wildfly.core:wildfly-server (21.1.0.beta1)

org.wildfly.core:wildfly-server MAVEN version 21.1.0.beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-server and may be impacted: - org.wildfly.core:wildfly-core-feature-pack-common 21.1.0.beta1 -...

org.wildfly.core:wildfly-core-feature-pack-common (22.0.0.beta1), org.wildfly.core:wildfly-core-galleon-pack (22.0.0.beta1) +18 more potentially affected by CVE-2025-23367 via org.wildfly.core:wildfly-server (22.0.0.beta1)

org.wildfly.core:wildfly-server MAVEN version 22.0.0.beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-server and may be impacted: - org.wildfly.core:wildfly-core-feature-pack-common 22.0.0.beta1 -...

org.wildfly.core:wildfly-core-feature-pack-common (23.0.0.beta3), org.wildfly.core:wildfly-core-galleon-pack (23.0.0.beta3) +20 more potentially affected by CVE-2025-23367 via org.wildfly.core:wildfly-server (23.0.0.beta3)

org.wildfly.core:wildfly-server MAVEN version 23.0.0.beta3 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-server and may be impacted: - org.wildfly.core:wildfly-core-feature-pack-common 23.0.0.beta3 -...

org.wildfly.core:wildfly-core-feature-pack-common (23.0.0.beta4), org.wildfly.core:wildfly-core-galleon-pack (23.0.0.beta4) +89 more potentially affected by CVE-2025-23367 via org.wildfly.core:wildfly-server (23.0.0.beta4)

org.wildfly.core:wildfly-server MAVEN version 23.0.0.beta4 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-server and may be impacted: - org.wildfly.core:wildfly-core-feature-pack-common 23.0.0.beta4 -...

org.wildfly.core:wildfly-core-feature-pack-common (23.0.2.final), org.wildfly.core:wildfly-core-galleon-pack (23.0.2.final) +20 more potentially affected by CVE-2025-23367 via org.wildfly.core:wildfly-server (23.0.2.final)

org.wildfly.core:wildfly-server MAVEN version 23.0.2.final is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-server and may be impacted: - org.wildfly.core:wildfly-core-feature-pack-common 23.0.2.final -...

org.wildfly.core:wildfly-core-feature-pack-common (25.0.0.beta5), org.wildfly.core:wildfly-core-galleon-pack (25.0.0.beta5) +95 more potentially affected by CVE-2025-23367 via org.wildfly.core:wildfly-server (25.0.0.beta5)

org.wildfly.core:wildfly-server MAVEN version 25.0.0.beta5 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-server and may be impacted: - org.wildfly.core:wildfly-core-feature-pack-common 25.0.0.beta5 -...

org.wildfly.core:wildfly-core-feature-pack-common (28.0.0.beta1), org.wildfly.core:wildfly-core-galleon-pack (28.0.0.beta1) +23 more potentially affected by CVE-2025-23367 via org.wildfly.core:wildfly-server (28.0.0.beta1)

org.wildfly.core:wildfly-server MAVEN version 28.0.0.beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-server and may be impacted: - org.wildfly.core:wildfly-core-feature-pack-common 28.0.0.beta1 -...

UBUNTU-CVE-2025-21682

In the Linux kernel, the following vulnerability has been resolved: eth: bnxt: always recalculate features after XDP clearing, fix null-deref Recalculate features when XDP is detached. Before: ip li set dev eth0 xdp obj xdpdummy.bpf.o sec xdp ip li set dev eth0 xdp off ethtool -k eth0 | grep gro...

CVE-2025-21682 eth: bnxt: always recalculate features after XDP clearing, fix null-deref

In the Linux kernel, the following vulnerability has been resolved: eth: bnxt: always recalculate features after XDP clearing, fix null-deref Recalculate features when XDP is detached. Before: ip li set dev eth0 xdp obj xdpdummy.bpf.o sec xdp ip li set dev eth0 xdp off ethtool -k eth0 | grep gro...

CVE-2025-21682

In the Linux kernel, the following vulnerability has been resolved: eth: bnxt: always recalculate features after XDP clearing, fix null-deref Recalculate features when XDP is detached. Before: ip li set dev eth0 xdp obj xdpdummy.bpf.o sec xdp ip li set dev eth0 xdp off ethtool -k eth0 | grep gro...

CVE-2025-21682

CVE-2025-21682 affects the bnxt driver in the Linux kernel. The issue occurs when XDP is detached: the driver may fail to recalculate features, causing HW-GRO to be unpredictably restored only during a later reconfiguration and potentially leaving the RSS map in an inconsistent state. This can le...

CVE-2025-21682 eth: bnxt: always recalculate features after XDP clearing, fix null-deref

In the Linux kernel, the following vulnerability has been resolved: eth: bnxt: always recalculate features after XDP clearing, fix null-deref Recalculate features when XDP is detached. Before: ip li set dev eth0 xdp obj xdpdummy.bpf.o sec xdp ip li set dev eth0 xdp off ethtool -k eth0 | grep gro...

Security Updates for Microsoft Excel Products C2R (January 2025)

The Microsoft Excel Products are missing a security update. It is, therefore, affected by the following vulnerabilities: - Microsoft Office is affected by a remote code execution vulnerability. CVE-2025-21354, CVE-2025-21362 - Microsoft Office is affected by a security feature bypass vulnerabilit...

mall-tiny security vulnerabilities

mall-tiny is a rapid development scaffolding for macro individual developers. A security vulnerability exists in mall-tiny version 1.0.1, which stems from the vulnerability to incorrect access control via the logout feature...

Security Updates for Microsoft Office Products C2R (January 2025)

The Microsoft Office Products are missing a security update. It is, therefore, affected by the following vulnerabilities: - Microsoft Office is affected by an arbitrary code execution vulnerability. CVE-2025-21365 - Microsoft Office is affected by a security feature bypass vulnerability...

BIT-GOLANG-2024-45340

Credentials provided via the new GOAUTH feature were not being properly segmented by domain, allowing a malicious server to request credentials they should not have access to. By default, unless otherwise set, this only affected credentials stored in the users .netrc file...

Windows Exploitation Tricks: Trapping Virtual Memory Access (2025 Update)

Posted by James Forshaw, Google Project Zero Back in 2021 I wrote a blog post about various ways you can build a virtual memory access trap primitive on Windows. The goal was to cause a reader or writer of a virtual memory address to halt for a significant e.g. 1 or more seconds amount of time,...

PT-2025-4032 · Embedai · Embedai

Name of the Vulnerable Software and Affected Versions: EmbedAI versions 2.1 and earlier Description: A control access issue has been identified, allowing an authenticated attacker to exploit the "/embedai/visits/show/" endpoint to obtain information about visits made by other users. The informati...