SUSE-SU-2025:20750-1 Security update for pam

This update for pam fixes the following issues: - CVE-2024-10041: Fixed hashed password leak bsc1232234...

CVE-2025-8999 Sydney <= 2.56 - Missing Authorization to Authenticated (Subscriber+) Limited Theme Options Update

The Sydney theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'activatemodules' function in all versions up to, and including, 2.56. This makes it possible for authenticated attackers, with Subscriber-level access and above, to activate...

CVE-2025-8999 Sydney <= 2.56 - Missing Authorization to Authenticated (Subscriber+) Limited Theme Options Update

The Sydney theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'activatemodules' function in all versions up to, and including, 2.56. This makes it possible for authenticated attackers, with Subscriber-level access and above, to activate...

Linux kernel astra-modules Heap Buffer Overflow DoS

The vulnerability of the parsec inodesetattr function in the Linux-astra-modules kernel module is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

linux-astra-modules Kernel Module Heap Buffer Overflow DoS

The vulnerability of the pdplgetnewinitmr function in the linux-astra-modules kernel module is related to improper memory release after its use. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux-Astra-Modules Module Heap Buffer Overflow DoS

The vulnerability of the pdpmlgetfromuser function in the Linux-astra-modules kernel module is related to improper memory release after its use. Exploiting this vulnerability could allow an attacker to cause a service failure...

linux-astra-modules Kernel Module Use-After-Free DoS

The vulnerability of the pcomparemnt function in the Linux-astra-modules kernel module is related to reading data from beyond the allowed buffer size. Exploiting this vulnerability can allow an attacker to access confidential data and also cause service interruptions...

Linux-astra-modules Kernel Module Heap Buffer Overflow DoS

The vulnerability of the parsec inodepostxattr function in the linux-astra-modules kernel module is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

linux-astra-modules Kernel Module DoS

The vulnerability of the pdplPut function in the linux-astra-modules kernel module is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel-module astra-modules Buffer Overflow DoS

The vulnerability of the parsechooksetxattr function in the Linux kernel-module astra-modules is related to the lack of checking for the returned value. Exploiting this vulnerability could allow a attacker to cause a service failure...

Linux kernel-module Heap Buffer Overflow DoS

The vulnerability of the pdpmlcmp function in the Linux-Astra-Modules kernel module is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux-Astra-Modules Kernel Module Heap Buffer Overflow DoS

The vulnerability of the pdpmlgetnew function in the Linux-Astra-Modules kernel module is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux-astra-modules Kernel Module DoS

The vulnerability of the initparsecsecid function in the linux-astra-modules kernel module is related to improper memory release after its use. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux-astra-modules Kernel Buffer Overflow DoS

The vulnerability of the parsec inodegetsecid function in the linux-astra-modules kernel module is related to improper memory release after its use. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2025-38145

Name of the Vulnerable Software and Affected Versions: Sydney theme for WordPress versions prior to 2.57 Description: The Sydney theme for WordPress is susceptible to unauthorized data modification due to a missing capability check on the activate modules function. This allows authenticated...

CVE-2025-59143

Summary (CVE-2025-59143) : The issue affects the npm package color ([email protected]). An account takeover via phishing allowed an attacker to publish a malicious patch that inserts a payload in the browser context to redirect cryptocurrency transactions to attacker-owned addresses (e.g., wallets like...

CVE-2025-59140 [email protected] contains malware after npm account takeover

backlash parses collected strings with escapes. On 8 September 2025, the npm publishing account for backslash was taken over after a phishing attack. Version 0.2.1 was published, functionally identical to the previous patch version, but with a malware payload added attempting to redirect...

CVE-2025-6202

CVE-2025-6202 Phoenix Rowhammer is a hardware-level vulnerability in SK Hynix DDR5 modules (manufactured 2021–2024) that allows a local attacker to trigger memory row bit flips. The issue bypasses protection such as TRR, exploiting defined “blind zones” (e.g., after 128 and 2,608 tREFI updates) w...

PocCollect

This repository is an offensive tool for vulnerability scanning and exploitation, specifically targeting various web applications and services. The primary vulnerability class targeted is SQL injection, with specific examples of exploits for Struts2, 08CMS, and ASPCMS. The tool is written in Pyth...

Linux Distros Unpatched Vulnerability : CVE-2025-48039

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Allocation of Resources Without Limits or Throttling vulnerability in Erlang OTP ssh sshsftp modules allows Excessive Allocation, Resource Leak Exposure. This...