PT-2025-8390 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.18.0-rc5-syzkaller-01392-g01f4685797a5 Description: A vulnerability in the Linux kernel has been resolved. The issue was related to the removal of the rcu read lock in the bond ethtool get ts info function,...

PT-2025-8722

Name of the Vulnerable Software and Affected Versions SeaCMS version 13.3 Description A remote code execution issue was discovered in the admin files.php component, allowing for potential code execution. Recommendations For SeaCMS version 13.3, update to a newer version that contains a fix for th...

PT-2025-8321 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A 32bit overflow issue has been identified in the Linux kernel, specifically in the watchdog component rzg2l wdt. The issue arises when the value of timer cycle us can be 0 due to the...

CVE-2025-26945

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bPlugins Info Cards info-cards allows Stored XSS.This issue affects Info Cards: from n/a through = 1.0.5...

CVE-2025-26945 WordPress Info Cards plugin <= 1.0.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bPlugins Info Cards info-cards allows Stored XSS.This issue affects Info Cards: from n/a through = 1.0.5...

CVE-2025-26945

CVE-2025-26945 is a Stored XSS in the WordPress plugin Info Cards – Gutenberg block for creating Beautiful Cards. Affected: Info Cards – Gutenberg block for creating Beautiful Cards (plugin), versions up to 1.0.5 (the Initial Description specifies this range; Connected docs confirm the vulnerabil...

PT-2025-7859

Name of the Vulnerable Software and Affected Versions Info Cards – Gutenberg block for creating Beautiful Cards versions 1.0.0 through 1.0.5 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored...

CVE-2025-26945: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bPlugins Info Cards info-cards allows Stored XSS.This issue affects Info Cards: from n/a through = 1.0.5...

Siemens SIMATIC Devices Linux Kernel Access of Uninitialized Pointer (CVE-2022-42895)

There is an infoleak vulnerability in the Linux kernel's net/bluetooth/l2capcore.c's l2capparseconfreq function which can be used to leak kernel pointers remotely. We recommend upgrading past commit https://github.com/torvalds/linux/commit/b1a2cd50c0357f243b7435 a732b4e62ba3157a2e This plugin onl...

February 25, 2025—KB5052094 (OS Builds 22621.4974 and 22631.4974) Preview

None None...

WordPress Plugin Info Cards: Cross-Site Script Vulnerabilities

WordPress and the WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...

CVE-2024-5174

creationtimestamp| type| source ---|---|--- 2025-02-24 16:17:15+00:00| seen| https://t.me/cvedetector/18794...

WordPress Info Cards plugin <= 1.0.5 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Logan Cote Patchstack Alliance in WordPress Plugin Info Cards versions = 1.0.5...

PT-2025-8699 · Git +1 · Ndpi

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A crash issue was identified, characterized as an UNKNOWN READ. The crash involves the ndpi strdup function, process ndpi collected info function, and node cleanup walker function...

PT-2025-7664 · Git +1 · Ndpi

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 1 crash has been reported. The crash involves the interceptor strncat function, process ndpi collected info, and node cleanup...

PT-2025-7665 · Git +1 · Ndpi

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of UNKNOWN WRITE. The crash state involves several functions: ndpi free flow data, ndpi flow free, and process ndpi...

CLSA-2025-1740075135 kernel: Fix of 4 CVEs

media: uvcvideo: Skip parsing frames of type UVCVSUNDEFINED in uvcparseformat CVE-2024-53104 - ALSA: 6fire: Release resources at card release CVE-2024-53239 - btrfs: fix information leak in btrfsioctllogicaltoino CVE-2024-35849 - btrfs: fix use-after-free when COWing tree bock and tracing is...

PT-2025-7564

Name of the Vulnerable Software and Affected Versions Tenda AC8V4 version V16.03.34.06 Description A stack overflow issue was discovered in the function get parentControl list Info via the urls parameter. This issue affects the Tenda AC8V4 router firmware. Recommendations For Tenda AC8V4 version...

CVE-2024-27227

creationtimestamp| type| source ---|---|--- 2025-02-18 21:11:31+00:00| seen| Telegram/kgQkjtHgJyeVIS88btYKpmhwrfE1ZPfqNK6P5-yTTYjKwU...

PT-2025-7784

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description A stored XSS risk was identified in the drag-and-drop onto image ddimageortext question type, which required additional sanitizing. Recommendations At the moment, there is no information about...