UBUNTU-CVE-2023-53709

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Handle race between rbmovetail and rbcheckpages It seems a data race between ringbuffer writing and integrity check. That is, RBFLAG of headpage is been updating, while at same time RBFLAG was cleared when doing...

CVE-2025-11151

Exposure of Sensitive Information to an Unauthorized Actor, Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Beyaz Bilgisayar Software Design Industry and Trade Ltd. Co. CityPLus allows Detect Unpublicized Web Pages.This issue affects CityPLus: before...

SUSE-SU-2025:3716-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-49980: USB: gadget: fix use-after-free read in usbudcuevent bsc1245110. - CVE-2022-50233: Bluetooth: eir: Fix using strlen with hdev-devname,shortname...

PT-2025-43216

Name of the Vulnerable Software and Affected Versions Rajan Vijayan WP Smart Flexslider versions through 2.5 Description The software contains a flaw related to improper handling of user-supplied data when creating web pages, which can lead to Cross-site Scripting XSS. This allows an attacker to...

WordPress plugin Advanced Custom Fields : CPT Options Pages Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

PT-2025-43225

Name of the Vulnerable Software and Affected Versions ThimPress LearnPress Export Import versions through 4.0.9 Description The LearnPress Export Import component contains a flaw related to improper input handling during web page generation, which allows for Reflected Cross-Site Scripting XSS. Th...

PT-2025-43226

Name of the Vulnerable Software and Affected Versions CropRefine versions through 1.2.1 Description The software contains a flaw due to improper handling of user-supplied data when creating web pages, leading to a potential Reflected Cross-Site Scripting XSS condition. This could allow an attacke...

Nautobot Single Source of Truth 访问控制错误漏洞

Nautobot Single Source of Truth is an open source data integration and synchronization plugin for Nautobot. An access control error vulnerability exists in Nautobot Single Source of Truth versions prior to 3.10.0, which originates from an unauthenticated attacker having access to configuration...

SUSE CVE-2025-40006

In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix folio is still mapped when deleted Migration may be raced with fallocating hole. removeinodesinglefolio will unmap the folio if the folio is still mapped. However, it's called without folio lock. If the folio is...

EUVD-2025-35173

Exposure of Sensitive Information to an Unauthorized Actor, Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Beyaz Bilgisayar Software Design Industry and Trade Ltd. Co. CityPLus allows Detect Unpublicized Web Pages.This issue affects CityPLus: before...

Meta Rolls Out New Tools to Protect WhatsApp and Messenger Users from Scams

Meta on Tuesday said it's launching new tools to protect Messenger and WhatsApp users from potential scams. To that end, the company said it's introducing new warnings on WhatsApp when users attempt to share their screen with an unknown contact during a video call so as to prevent them from givin...

CVE-2025-11151

Exposure of Sensitive Information to an Unauthorized Actor, Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Beyaz Bilgisayar Software Design Industry and Trade Ltd. Co. CityPLus allows Detect Unpublicized Web Pages. This issue affects CityPLus: before...

CVE-2025-11151 Information Disclosure in Beyaz Computer's CityPLus

Exposure of Sensitive Information to an Unauthorized Actor, Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Beyaz Bilgisayar Software Design Industry and Trade Ltd. Co. CityPLus allows Detect Unpublicized Web Pages. This issue affects CityPLus: before...

CVE-2025-11151 Information Disclosure in Beyaz Computer's CityPLus

Exposure of Sensitive Information to an Unauthorized Actor, Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Beyaz Bilgisayar Software Design Industry and Trade Ltd. Co. CityPLus allows Detect Unpublicized Web Pages. This issue affects CityPLus: before...

CVE-2025-11151

CVE-2025-11151 affects Beyaz CityPLus (CityPLus) prior to version 24.29500.1.0. Issue: Exposure of sensitive information to an unauthorized actor, including sensitive system information and unpublicized web pages, with a CVSS 3.1 base score of 8.2 (HIGH). Impact: information disclosure that could...

CVE-2025-11151

Exposure of Sensitive Information to an Unauthorized Actor, Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Beyaz Bilgisayar Software Design Industry and Trade Ltd. Co. CityPLus allows Detect Unpublicized Web Pages. This issue affects CityPLus: before...

PT-2025-42884

Name of the Vulnerable Software and Affected Versions CityPLus versions prior to 24.29500.1.0 Description An issue exists in Beyaz Bilgisayar Software Design Industry and Trade Ltd. Co. CityPLus that allows for the detection of unpublicized web pages, potentially leading to exposure of sensitive...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987600)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987600 advisory. In the Linux kernel, the following vulnerability has been resolved: watchqueue: Fix NULL dereference in error cleanup In watchqueuesetsize, the error cleanup code...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-987708)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987708 advisory. In the Linux kernel, the following vulnerability has been resolved: Fix page corruption caused by racy check in freepages When we upgraded our kernel, we started...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987553)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987553 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: don't BUG if someone dirty pages without asking ext4 first unpinuserpagesremote is dirtying...