appRain CMF 跨站脚本漏洞

appRain CMF is a content management framework. A cross-site scripting vulnerability exists in appRain CMF due to improper validation of user input in the /apprain/page/manage-static-pages/create endpoint. An attacker could use this vulnerability to steal the victim's cookie-based authentication...

PT-2025-35905

Name of the Vulnerable Software and Affected Versions: appRain CMF version 4.0.5 Description: An SQL injection flaw exists in appRain CMF version 4.0.5. This flaw allows an attacker to retrieve, create, update, and delete the database through the data%5BPage%5D%5Bname%5D parameter in the...

virtiofs: use pages instead of pointer for kernel direct IO

...

Drivers: hv: vmbus: Leak pages if set_memory_encrypted() fails

...

f2fs: avoid infinite loop to flush node pages

...

Tax refund scam targets Californians

The State of California Franchise Tax Board FTB recently issued a warning to taxpayers to protect themselves from tax scams. In their warning the FTB states: “Recently, the FTB received reports of a scam targeting taxpayers through text messages that appear to be from FTB. These text messages...

Malicious code in monolith-twirp-pages-pagesdfsapi (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 20af1e02b57f2beaf476855c1dcf3f3738437c7b97096ddfe5e04344005db421 The OpenSSF Package Analysis project identified 'monolith-twirp-pages-pagesdfsapi' @ 1.1.8 rubygems as malicious. It is considered malicious...

MAL-2025-46956 Malicious code in monolith-twirp-pages-pagesdfsapi (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 20af1e02b57f2beaf476855c1dcf3f3738437c7b97096ddfe5e04344005db421 The OpenSSF Package Analysis project identified 'monolith-twirp-pages-pagesdfsapi' @ 1.1.8 rubygems as malicious. It is considered malicious...

Malicious code in monolith-twirp-pages-pagesdeployerapi (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 73a08935b8c380f8b7bb77b1d747d25a9af720bd5d30e375a9acc79ca14b82bd The OpenSSF Package Analysis project identified 'monolith-twirp-pages-pagesdeployerapi' @ 1.9.8 rubygems as malicious. It is considered maliciou...

MAL-2025-46955 Malicious code in monolith-twirp-pages-pagesdeployerapi (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 73a08935b8c380f8b7bb77b1d747d25a9af720bd5d30e375a9acc79ca14b82bd The OpenSSF Package Analysis project identified 'monolith-twirp-pages-pagesdeployerapi' @ 1.9.8 rubygems as malicious. It is considered maliciou...

Linux Distros Unpatched Vulnerability : CVE-2025-4390

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The WP Private Content Plus plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.6.2 via the...

CVE-2025-9416

A security flaw has been discovered in oitcode samarium up to 0.9.6. This vulnerability affects unknown code of the file /cms/webpage/ of the component Pages Image Handler. The manipulation results in cross site scripting. The attack may be performed from a remote location. The exploit has been...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that originates from out-of-bounds access to dnode pages in the f2fs file system...

Linux Distros Unpatched Vulnerability : CVE-2021-22180

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab affecting all versions starting from 13.4. Improper access control allows unauthorized users to access details on analyti...

Linux Distros Unpatched Vulnerability : CVE-2022-40468

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Potential leak of left-over heap data if custom error page templates containing special non-standard variables are used. Tinyproxy commit 84f203f and earlier us...

Linux Distros Unpatched Vulnerability : CVE-2023-3044

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An excessively large PDF page size found in fuzz testing, unlikely in normal PDF files can result in a divide-by-zero in Xpdf's text extraction code. This is...

SUSE SLES15: cluster-md-kmp-rt / dlm-kmp-rt / gfs2-kmp-rt / kernel-devel-rt / etc (SUSE-SU-2025:03023-1)

The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03023-1 advisory. The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes. The following security bugs were...

CVE-2024-13987

Improper neutralization of input during web page generation 'Cross-site Scripting' vulnerability in Synology RADIUS Server allows remote authenticated users with administrator privileges to read or write limited files in SRM and conduct limited denial-of-service via unspecified vectors...

TP-LINK多款产品 安全漏洞

TP-LINK TL-WR841ND and so on are products of China P&L TP-LINK company.TP-LINK TL-WR841ND is a wireless router.TP-Link Archer C7 and so on are products of China P&L TP-Link company.TP-Link Archer C7 is a router.TP- Link TL-WR841N is a router. A security vulnerability exists in a number of TP-LINK...

CVE-2025-57759

Contao is an Open Source CMS. In versions starting from 5.3.0 and prior to 5.3.38 and 5.6.1, under certain conditions, back end users may be able to edit fields of pages and articles without having the necessary permissions. This issue has been patched in versions 5.3.38 and 5.6.1. There are no...