PT-2025-36376

Name of the Vulnerable Software and Affected Versions: ASP affected versions not specified Description: Improper handling of insufficient privileges in the ASP could allow a privileged attacker to modify Translation Map Registers TMRs, potentially resulting in loss of confidentiality or integrity...

CVE-2025-9566

There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the targ...

Malicious code in driving-map-appearance (npm)

The package driving-map-appearance was found to contain malicious code...

MAL-2025-44073 Malicious code in driving-map-appearance (npm)

The package driving-map-appearance was found to contain malicious code...

Malicious code in map-frequently-forward (npm)

The package map-frequently-forward was found to contain malicious code...

MAL-2025-45125 Malicious code in map-frequently-forward (npm)

The package map-frequently-forward was found to contain malicious code...

Nexar dashcam video database hacked

A hacker cracked into a database of video recordings taken from Nexar-branded cameras, which are built to be placed drivers’ cars, according to a new report from 404 Media. Nexar is a dashcam company that promotes its products as “virtual CCTV cameras” and offers automatic cloud uploads of critic...

The vulnerability of the mmap() function in the Linux operating system’s kernel, which allows a hacker to cause a service failure

The vulnerability of the mmap function in Linux kernel is related to errors during link counter updates. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2025-36213

Name of the Vulnerable Software and Affected Versions: josepsitjar StoryMap versions n/a through 2.1 Description: The software contains a DOM-Based Cross-site Scripting XSS issue due to improper neutralization of input during web page generation. Recommendations: Update josepsitjar StoryMap to a...

tracing: Ensure visibility when inserting an element into tracing_map

...

bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers

...

f2fs: fix to trigger foreground gc during f2fs_map_blocks() in lfs mode

...

x86/mm/ident_map: Use gbpages only where full GB page should be mapped.

...

netfilter: nf_tables: fix memleak in map from abort path

...

btrfs: don't drop extent_map for free space inode on write error

...

netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX

...

Linux Distros Unpatched Vulnerability : CVE-2024-31456

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GLPI is a Free Asset and IT Management Software package. Prior to 10.0.15, an authenticated user can exploit a SQL injection vulnerability from map search. This...

CVE-2025-8619

The OSM Map Widget for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Map Block URL in all versions up to, and including, 1.3.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

SUSE SLES15: cluster-md-kmp-rt / dlm-kmp-rt / gfs2-kmp-rt / kernel-devel-rt / etc (SUSE-SU-2025:03023-1)

The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03023-1 advisory. The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes. The following security bugs were...

PT-2025-39126

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory allocation issue was identified within the EDMA driver in the Linux kernel. The queue priority map was allocated with an insufficient memory size during the edma setup from hw...