2131 matches found
UBUNTU-CVE-2022-50581
In the Linux kernel, the following vulnerability has been resolved: hfs: fix OOB Read in hfsbrecfind Syzbot reported a OOB read bug: ================================================================== BUG: KASAN: slab-out-of-bounds in hfsstrcmp+0x117/0x190 fs/hfs/string.c:84 Read of size 1 at addr...
CVE-2023-53705
CVE-2023-53705 : In the Linux kernel, the IPv6 TLV parsing code in ipv6_find_tlv() could access beyond the end of the buffer because optlen is read without validating there is an extra byte to parse. This out-of-bounds read vulnerability affects the kernel’s IPv6 exthdrs handling and is categoriz...
CVE-2023-53692
CVE-2023-53692 relates to a use-after-free in ext4 when using bigalloc with inline data in the Linux kernel. The issue occurs in ext4_find_extent path (ext4_ext_binsearch_idx and subsequent code) during write-back when inline data has been converted to an extent before writepages, leaving inline ...
CVE-2022-50581 hfs: fix OOB Read in __hfs_brec_find
In the Linux kernel, the following vulnerability has been resolved: hfs: fix OOB Read in hfsbrecfind Syzbot reported a OOB read bug: ================================================================== BUG: KASAN: slab-out-of-bounds in hfsstrcmp+0x117/0x190 fs/hfs/string.c:84 Read of size 1 at addr...
CVE-2022-50581
CVE-2022-50581 affects the Linux kernel’s HFS filesystem code. It causes an out-of-bounds read in hfs_strcmp triggered via the call path hfs_write_inode() → hfs_brec_find() → __hfs_brec_find() → hfs_cat_keycmp() → hfs_strcmp(), when a filename length exceeds the maximum (len > HFS_NAMELEN). Th...
CVE-2022-50581 hfs: fix OOB Read in __hfs_brec_find
In the Linux kernel, the following vulnerability has been resolved: hfs: fix OOB Read in hfsbrecfind Syzbot reported a OOB read bug: ================================================================== BUG: KASAN: slab-out-of-bounds in hfsstrcmp+0x117/0x190 fs/hfs/string.c:84 Read of size 1 at addr...
WordPress Find And Replace content plugin cross-site scripting vulnerability
WordPress Find And Replace content plugin is a plugin used to batch find and replace the specified text in the website content, mainly used to solve the problem of batch modification in the website content update demand. A cross-site scripting vulnerability exists in the WordPress Find And Replac...
CVE-2025-10313 Find And Replace content for WordPress <= 1.1 - Missing Authorization to Unauthenticated Stored Cross-Site Scripting
The Find And Replace content for WordPress plugin for WordPress is vulnerable to unauthorized Stored Cross-Site Scripting and Arbitrary Content Replacement due to a missing capability check on the faradminajaxfun function in all versions up to, and including, 1.1. This makes it possible for...
WordPress Find And Replace content for WordPress plugin <= 1.1 - Missing Authorization to Unauthenticated Stored Cross-Site Scripting vulnerability
Missing Authorization to Unauthenticated Stored Cross-Site Scripting vulnerability discovered by ifoundbug in WordPress Plugin Find And Replace content for WordPress versions = 1.1...
CVE-2025-10313: Missing Authorization
The Find And Replace content for WordPress plugin for WordPress is vulnerable to unauthorized Stored Cross-Site Scripting and Arbitrary Content Replacement due to a missing capability check on the faradminajaxfun function in all versions up to, and including, 1.1. This makes it possible for...
WordPress Find Me On plugin SQL Injection Vulnerability
WordPress Find Me On plugin is a downgraded plugin that is mainly used to add social media link portals to your website. WordPress Find Me On plugin suffers from a SQL injection vulnerability that stems from the application's lack of validation of externally entered SQL statements. The...
CVE-2025-39960
Concrete details from connected sources show CVE-2025-39960 affecting the Linux kernel gpiolib/acpi path. The root cause is uninitialized acpi_gpio_info passed to __acpi_find_gpio(), leading to info->quirks usage in acpi_populate_gpio_lookup and breaking i2c_hid_cpi HID over I2C probes. The fi...
CVE-2025-39960 gpiolib: acpi: initialize acpi_gpio_info struct
In the Linux kernel, the following vulnerability has been resolved: gpiolib: acpi: initialize acpigpioinfo struct Since commit 7c010d463372 "gpiolib: acpi: Make sure we fill struct acpigpioinfo", uninitialized acpigpioinfo struct are passed to acpifindgpio and later in the call stack info-quirks ...
One stolen iPhone uncovered a network smuggling thousands of devices to China
If you think Apple's 'Find My' feature was just there to help you locate your phone when it slipped down the side of the couch, think again. It turns out this service also helps law enforcement capture criminals. The original "Find My iPhone" was introduced in 2010 as a feature on the iPhone. It...
WordPress Find Me On plugin <= 2.0.9.1 - Subscriber+ SQL Injection vulnerability
Subscriber+ SQL Injection vulnerability discovered by Khaled Alenazi Nxploited in WordPress Plugin Find Me On versions = 2.0.9.1...
CVE-2025-10635
The Find Me On WordPress plugin through 2.0.9.1 does not sanitize and escape a parameter before using it in a SQL statement, allowing subscribers and above to perform SQL injection attacks...
CVE-2025-10635 Find Me On <= 2.0.9.1 - Subscriber+ SQL Injection
The Find Me On WordPress plugin through 2.0.9.1 does not sanitize and escape a parameter before using it in a SQL statement, allowing subscribers and above to perform SQL injection attacks...
CVE-2025-10635 Find Me On <= 2.0.9.1 - Subscriber+ SQL Injection
The Find Me On WordPress plugin through 2.0.9.1 does not sanitize and escape a parameter before using it in a SQL statement, allowing subscribers and above to perform SQL injection attacks...
CVE-2025-10635
The Find Me On WordPress plugin (versions through 2.0.9.1 ) contains a SQL injection vulnerability due to a failure to properly sanitize and escape a parameter before its use in a SQL statement. This flaw allows users with subscriber privileges or higher to execute arbitrary SQL commands, which c...
CVE-2025-10635: Undefined Security Weakness
The Find Me On WordPress plugin through 2.0.9.1 does not sanitize and escape a parameter before using it in a SQL statement, allowing subscribers and above to perform SQL injection attacks...