CVE-2025-49984 WordPress PowerPress Podcasting plugin <= 11.12.11 - Server Side Request Forgery (SSRF) Vulnerability

Server-Side Request Forgery SSRF vulnerability in Angelo Mandato PowerPress Podcasting allows Server Side Request Forgery. This issue affects PowerPress Podcasting: from n/a through 11.12.11...

CVE-2024-29041

creationtimestamp| type| source ---|---|--- 2025-06-20 13:44:02+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3ls26axz56c2q...

CVE-2025-6341

creationtimestamp| type| source ---|---|--- 2025-06-20 13:42:59+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18944 2025-06-20 13:53:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls26sbdxay23...

CVE-2025-38083 net_sched: prio: fix a race in prio_tune()

In the Linux kernel, the following vulnerability has been resolved: netsched: prio: fix a race in priotune Gerrard Tai reported a race condition in PRIO, whenever SFQ perturb timer fires at the wrong time. The race is as follows: CPU 0 CPU 1 1: lock root 2: qdisctreeflushbacklog 3: unlock root | ...

CVE-2025-6332

creationtimestamp| type| source ---|---|--- 2025-06-20 10:44:15+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18926...

SUSE-SU-2025:02043-1 Security update for libblockdev

This update for libblockdev fixes the following issues: - CVE-2025-6019: Suppress privilege escalation during xfs fs resize bsc1243285...

CVE-2025-6293

A vulnerability was found in code-projects Hostel Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /contactmanager.php. The manipulation of the argument studentrollno leads to sql injection. The attack may be initiated remotely. The exploit...

CVE-2025-32875

The CVE-2025-32875 entry concerns the COROS Android app (versions up to 3.8.12). The root issue is that Bluetooth pairing and bonding are neither initiated nor enforced by the app, and the watch also does not enforce them. Consequently, BLE data remains unencrypted, enabling attackers within Blue...

code-projects Hostel Management System 注入漏洞

Hostel Management System is a hostel management system. Hostel Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter studentrollno in the file /contactmanager.php. An attacker can use this...

CVE-2025-6272 wasm3 m3_compile.c MarkSlotAllocated out-of-bounds write

A vulnerability has been found in wasm3 0.5.0 and classified as problematic. This vulnerability affects the function MarkSlotAllocated of the file source/m3compile.c. The manipulation leads to out-of-bounds write. An attack has to be approached locally. The exploit has been disclosed to the publi...

CVE-2022-49962

In the Linux kernel, the following vulnerability has been resolved: xhci: Fix null pointer dereference in remove if xHC has only one roothub The remove path in xhci platform driver tries to remove and put both main and shared hcds even if only a main hcd exists one roothub This causes a null...

SUSE CVE-2022-49945

In the Linux kernel, the following vulnerability has been resolved: hwmon: gpio-fan Fix array out of bounds access The driver does not check if the cooling state passed to gpiofansetcurstate exceeds the maximum cooling state as stored in fandata-numspeeds. Since the cooling state is later used as...

CVE-2025-52474

WeGIA SQL Injection vulnerability (CVE-2025-52474) affects WeGIA prior to version 3.4.2, in the id parameter of /WeGIA/controle/control.php. The issue allows an attacker to manipulate SQL queries and access sensitive data (table names, data). According to the CVE, the vulnerability is exploitable...

SUSE CVE-2022-50211

In the Linux kernel, the following vulnerability has been resolved: md-raid10: fix KASAN warning There's a KASAN warning in raid10removedisk when running the lvm test lvconvert-raid-reshape.sh. We fix this warning by verifying that the value "number" is valid. BUG: KASAN: slab-out-of-bounds in...

CVE-2025-52467 pgai secrets exfiltration via `pull_request_target`

pgai is a Python library that transforms PostgreSQL into a retrieval engine for RAG and Agentic applications. Prior to commit 8eb3567, the pgai repository was vulnerable to an attack allowing the exfiltration of all secrets used in one workflow. In particular, the GITHUBTOKEN with write permissio...

Zhilink ADP Application Developer Platform SQL注入漏洞

Zhilink ADP Application Developer Platform is an application development platform from Zhilink, which provides one-stop development tools and environment to support rapid building and deployment of enterprise-level applications. A SQL injection vulnerability exists in Zhilink ADP Application...

CVE-2022-50221

creationtimestamp| type| source ---|---|--- 2025-06-18 11:38:33+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18729 2025-06-18 15:56:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrveqe36dz2m...

DEBIAN-CVE-2022-50159

In the Linux kernel, the following vulnerability has been resolved: of: check previous kernel's ima-kexec-buffer against memory bounds Presently imagetkexecbuffer doesn't check if the previous kernel's ima-kexec-buffer lies outside the addressable memory range. This can result in a kernel panic i...

DEBIAN-CVE-2022-50045

In the Linux kernel, the following vulnerability has been resolved: powerpc/pci: Fix getphbnumber locking The recent change to getphbnumber causes a DEBUGATOMICSLEEP warning on some systems: BUG: sleeping function called from invalid context at kernel/locking/mutex.c:580 inatomic: 1, irqsdisabled...

DEBIAN-CVE-2022-49992

In the Linux kernel, the following vulnerability has been resolved: mm/mprotect: only reference swap pfn page if type match Yu Zhao reported a bug after the commit "mm/swap: Add swpoffsetpfn to fetch PFN from swap entry" added a check in swpoffsetpfn for swap type 1: kernel BUG at...