14180 matches found
[SECURITY] Fedora 42 Update: rust-adblock-0.9.6-1.fc42
Native Rust module for Adblock Plus syntax e.g. EasyList, EasyPrivacy filter parsing and matching...
DEBIAN-CVE-2025-38152
In the Linux kernel, the following vulnerability has been resolved: remoteproc: core: Clear tablesz when rprocshutdown There is case as below could trigger kernel dump: Use U-Boot to start remote processorrproc with resource table published to a fixed address by rproc. After Kernel boots up, stop...
Post Quantum Cryptography (PQC) Signatures without Trapdoors
Some of our current public key methods use a trap door to implement digital signature methods. This includes the RSA method, which uses Fermat's little theorem to support the creation and verification of a digital signature. The problem with a back-door is that the actual trap-door method could, ...
CVE-2025-32572
Deserialization of Untrusted Data vulnerability in Climax Themes Kata Plus kata-plus allows Object Injection.This issue affects Kata Plus: from n/a through = 1.5.3...
CVE-2025-32572
CVE-2025-32572 is a PHP object injection flaw caused by deserialization of untrusted data in the Kata Plus WordPress plugin family (Kata Plus – Addons for Elementor – Widgets, Extensions and Templates). Affected versions range up to 1.5.2 (with CVE entries tracking up to 1.5.3 per Patchstack/Word...
CVE-2025-32572 WordPress Kata Plus Plugin <= 1.5.2 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in Climax Themes Kata Plus allows Object Injection. This issue affects Kata Plus: from n/a through 1.5.2...
WordPress Booster Plus for WooCommerce plugin <= 7.2.4 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin Booster Plus for WooCommerce versions = 7.2.4...
WordPress plugin Kata Plus has a code vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue...
PT-2025-17121
Name of the Vulnerable Software and Affected Versions Climax Themes Kata Plus versions 1.5.2 and earlier Description The issue is related to Deserialization of Untrusted Data, which allows Object Injection. Recommendations For Climax Themes Kata Plus versions 1.5.2 and earlier, update to a versio...
CVE-2025-32572: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in Climax Themes Kata Plus kata-plus allows Object Injection.This issue affects Kata Plus: from n/a through = 1.5.3...
CVE-2025-3676
A vulnerability classified as critical has been found in xxyopen Novel-Plus 3.5.0. This affects an unknown part of the file /api/front/search/books. The manipulation of the argument sort leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the...
CVE-2025-3676 xxyopen Novel-Plus books sql injection
A vulnerability classified as critical has been found in xxyopen Novel-Plus 3.5.0. This affects an unknown part of the file /api/front/search/books. The manipulation of the argument sort leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the...
CVE-2025-3676 xxyopen Novel-Plus books sql injection
A vulnerability classified as critical has been found in xxyopen Novel-Plus 3.5.0. This affects an unknown part of the file /api/front/search/books. The manipulation of the argument sort leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the...
CVE-2025-3676
CVE-2025-3676 affects xxyopen Novel-Plus 3.5.0. The issue is an SQL injection in the /api/front/search/books endpoint caused by improper handling of the sort parameter, enabling remote exploitation. Public exploit/disclosure is noted and vendor response was absent. Mitigation guidance from PT Sec...
CVE-2025-3676 xxyopen Novel-Plus books sql injection
A vulnerability classified as critical has been found in xxyopen Novel-Plus 3.5.0. This affects an unknown part of the file /api/front/search/books. The manipulation of the argument sort leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the...
Novel-Plus injection vulnerability
Novel-Plus is an online social reading and writing platform from Novel-Plus, Inc. An injection vulnerability exists in Novel-Plus version 3.5.0, which stems from improper manipulation of the sort parameter in the /api/front/search/books file, which could lead to an SQL injection attack...
CVE-2025-3676: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical has been found in xxyopen Novel-Plus 3.5.0. This affects an unknown part of the file /api/front/search/books. The manipulation of the argument sort leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the...
PT-2025-16569 · Unknown · Xxyopen Novel-Plus
Name of the Vulnerable Software and Affected Versions: xxyopen Novel-Plus version 3.5.0 Description: A critical vulnerability has been found in xxyopen Novel-Plus. This affects an unknown part of the file "/api/front/search/books". The manipulation of the sort argument leads to SQL injection. It ...
A Scalable Framework for Post-Quantum Authentication in Public Key Infrastructures
This work explores the performance and scalability of a hierarchical certificate authority framework with automated certificate issuance employing post-quantum cryptographic PQC signature algorithms. The system is designed for compatibility with both classical and PQC algorithms, promoting...