Ubuntu: Security Advisory (USN-7286-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security Advisory 0111

Security Advisory 0111 . CSAF PDF Date: February 25, 2025 Revision | Date | Changes ---|---|--- 1.0 | February 25, 2025 | Initial release The CVE-ID tracking this issue: CVE-2025-1259 CVSSv3.1 Base Score: 7.7 CVSS:3.1 AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N Common Weakness Enumeration: CWE-284:...

CVE-2024-53543

creationtimestamp| type| source ---|---|--- 2025-02-24 23:27:57+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5233 2025-02-24 23:27:58+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5234 2025-02-25 02:19:31+00:00| seen| https://t.me/cvedetector/18843 2025-02-25...

CVE-2025-25513

Seacms =13.3 is vulnerable to SQL Injection in adminmembers.php...

CVE-2025-26531

Insufficient capability checks made it possible to disable badges a user does not have permission to access...

CVE-2025-26532

creationtimestamp| type| source ---|---|--- 2025-02-24 20:22:21+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5217 2025-02-24 22:08:30+00:00| seen| https://t.me/cvedetector/18821 2025-02-24 23:02:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lixhf4js4o2r...

CVE-2025-26525

creationtimestamp| type| source ---|---|--- 2025-02-24 20:22:16+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5214 2025-02-24 21:48:28+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114061063378286532 2025-02-24 22:08:31+00:00| seen| https://t.me/cvedetector/18822 2025-02-...

CVE-2025-26533 SQL injection risk in course search module list filter

An SQL injection risk was identified in the module list filter within course search...

CVE-2025-26528

CVE-2025-26528 relates to Moodle’s drag-and-drop onto image (ddimageortext) question type. Multiple connected sources confirm a stored XSS risk that required additional sanitizing in this question type. The CVE description notes the need for sanitization to prevent stored XSS, and OSV/GHSA entrie...

CVE-2025-27332

creationtimestamp| type| source ---|---|--- 2025-02-24 18:47:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3liwz4mshgt23...

CVE-2025-27336

creationtimestamp| type| source ---|---|--- 2025-02-24 17:57:51+00:00| seen| https://t.me/cvedetector/18808 2025-02-24 18:47:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3liwz4m45pr2s 2025-08-22 17:25:06+00:00| seen| MISP/8e1b6542-ae86-4729-a7a6-4e9f670b8bb7...

CVE-2025-27339

creationtimestamp| type| source ---|---|--- 2025-02-24 17:57:51+00:00| seen| https://t.me/cvedetector/18809 2025-02-24 18:47:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3liwz4mp2cm2g 2025-08-22 17:25:06+00:00| seen| MISP/8e1b6542-ae86-4729-a7a6-4e9f670b8bb7...

CVE-2025-22495

creationtimestamp| type| source ---|---|--- 2025-02-24 17:33:57+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114060062653263406 2025-02-24 19:32:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lix3n5wnzw2s 2025-02-24 19:48:27+00:00| seen|...

CVE-2025-1686

creationtimestamp| type| source ---|---|--- 2025-02-24 16:42:07+00:00| published-proof-of-concept| https://github.com/JLLeitschuh/security-research/security/advisories/GHSA-p75g-cxfj-7wrx 2025-02-27 05:25:17+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5648 2025-02-27...

CVE-2025-27317

CVE-2025-27317 concerns the WordPress plugin IT-RAYS RAYS Grid, reported as a CSRF vulnerability affecting RAYS Grid versions up to 1.3.1. The record indicates a CSRF flaw with CVSS v3.1 base score 4.3 (Medium) and a network attack vector with user interaction required; the underlying impact is l...

Advisory ROSA-SA-2025-2721

Software: zlib 1.2.11 OS: ROSA Virtualization 3.0 packageevrstring: zlib-1.2.11 CVE-ID: CVE-2022-37434 BDU-ID: 2022-05325 CVE-Crit: CRITICAL. CVE-DESC.: A vulnerability in the inflate.c component of the zlib library is related to an operation exceeding buffer boundaries in memory. Exploitation of...

CVE-2025-20051

Mattermost versions 10.4.x = 10.4.1, 9.11.x = 9.11.7, 10.3.x = 10.3.2, 10.2.x = 10.2.2 fail to properly validate input when patching and duplicating a board, which allows a user to read any arbitrary file on the system via duplicating a specially crafted block in Boards...

CVE-2025-1618

creationtimestamp| type| source ---|---|--- 2025-02-24 05:21:36+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5127 2025-02-24 08:09:18+00:00| seen| https://t.me/cvedetector/18784 2025-02-24 08:37:37+00:00| seen|...

[SECURITY] [DLA 4066-1] fort-validator security update

Debian LTS Advisory DLA-4066-1 [email protected] https://www.debian.org/lts/security/ Daniel Leidert February 24, 2025 https://wiki.debian.org/LTS Package : fort-validator Version : 1.5.3-1deb11u2 CVE ID : CVE-2024-45234 CVE-2024-45235 CVE-2024-45236 CVE-2024-45237 CVE-2024-45238...

CVE-2025-1589

creationtimestamp| type| source ---|---|--- 2025-02-23 18:21:26+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5098 2025-02-23 20:27:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3liuob4bd5b23 2025-02-23 21:53:34+00:00| seen| https://t.me/cvedetector/18754...