WordPress Real Spaces Theme <= 3.5 is vulnerable to Privilege Escalation

Software Real Spaces Type Theme Vulnerable versions = 3.5 Fixed in 3.6 OWASP Top 10 A7: Identification and Authentication Failures Classification Privilege Escalation CVE CVE-2025-8218 Patch priority High CVSS severity High 8.8 Developer Claim ownership PSID dbcfbeba0421 Credits Alyudin Nafiie...

Linux Distros Unpatched Vulnerability : CVE-2024-6564

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer overflow in rcardevinit due to using due to using untrusted data rcarimagenumber as a loop counter before verifying it against RCARMAXBL3XIMAGE. This cou...

CVE-2025-8105

creationtimestamp| type| source ---|---|--- 2025-08-17 07:31:38+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lwleijdh332g...

CVE-2025-38517

In the Linux kernel, the following vulnerability has been resolved: lib/alloctag: do not acquire non-existent lock in alloctagtopusers alloctagtopusers attempts to lock alloctagcttype-modlock even when the alloctagcttype is not allocated because: 1 alloc tagging is disabled because mem profiling ...

WordPress plugin weichuncai 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

CVE-2025-52620

creationtimestamp| type| source ---|---|--- 2025-08-15 23:03:02+00:00| seen| Telegram/Ht6t7QijGJpNld0AQMmJJovrfIRXtENCAvNfrHnlWntmE...

CVE-2025-1929 SQLi in RiskTurk's Treasury Management Software

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Risk Yazılım Teknolojileri Ltd. Şti. Reel Sektör Hazine ve Risk Yönetimi Yazılımı allows SQL Injection, CAPEC - 7 - Blind SQL Injection. This issue affects Reel Sektör Hazine ve Risk Yönetimi...

CVE-2025-8342

The WooCommerce OTP Login With Phone Number, OTP Verification plugin for WordPress is vulnerable to authentication bypass due to insufficient empty value checking in the lwpajaxregister function in all versions up to, and including, 1.8.47. This makes it possible for unauthenticated attackers to...

PT-2025-33428 · WordPress · Woocommerce Otp Login With Phone Number

Name of the Vulnerable Software and Affected Versions: WooCommerce OTP Login With Phone Number, OTP Verification plugin for WordPress versions up to and including 1.8.47 Description: The WooCommerce OTP Login With Phone Number, OTP Verification plugin for WordPress is susceptible to authenticatio...

Linux Distros Unpatched Vulnerability : CVE-2022-50159

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - of: check previous kernel's ima-kexec-buffer against memory bounds Presently imagetkexecbuffer doesn't check if the previous kernel's ima-kexec-buffer lies...

Microsoft Word Code Execution Vulnerability (CNVD-2025-18826)

Microsoft Word is a word processing software in the Office suite of the U.S. company Microsoft Microsoft. Microsoft Word Code Execution Vulnerability, the vulnerability is caused due to incorrect conversion between number types. An attacker could exploit this vulnerability to execute arbitrary co...

CVE-2025-8985 SourceCodester COVID 19 Testing Management System profile.php sql injection

A vulnerability was found in SourceCodester COVID 19 Testing Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /profile.php. The manipulation of the argument mobilenumber leads to sql injection. The attack can be launched remotely. The exploit has been...

CVE-2025-54739

Missing Authorization vulnerability in POSIMYTH Nexter Blocks the-plus-addons-for-block-editor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Nexter Blocks: from n/a through = 4.5.4...

MAL-2025-7085 Malicious code in @antwiib001/modi-corporis-laudantium (npm)

The package @antwiib001/modi-corporis-laudantium was found to contain malicious code...

MAL-2025-36526 Malicious code in test-mlw2-twank-droop (npm)

The package test-mlw2-twank-droop was found to contain malicious code...

MAL-2025-22036 Malicious code in guess_the_number-732161 (npm)

The package guessthenumber-732161 was found to contain malicious code...

MAL-2025-38751 Malicious code in walnut-udon-6v91 (npm)

The package walnut-udon-6v91 was found to contain malicious code...

MAL-2025-40704 Malicious code in yyx.js (npm)

The package yyx.js was found to contain malicious code...

CVE-2025-20613

Predictable Seed in Pseudo-Random Number Generator PRNG in the firmware for some IntelR TDX may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2025-8452

By using the "uscan" protocol provided by the eSCL specification, an attacker can discover the serial number of multi-function printers that implement the Brother-provided firmware. This serial number can, in turn, can be leveraged by the flaw described by CVE-2024-51978 to calculate the default...