CVE-2025-26507: Stack-based Buffer Overflow

Certain HP LaserJet Pro, HP LaserJet Enterprise, and HP LaserJet Managed Printers may potentially be vulnerable to Remote Code Execution and Elevation of Privilege when processing a PostScript print job...

HP LaserJet Pro Printer, HP LaserJet Enterprise, and HP LaserJet Managed have security vulnerabilities

HP LaserJet Enterprise and others are products of Hewlett-Packard HP, U.S.A. HP LaserJet Enterprise is a multifunction printer.HP LaserJet Managed is a multifunction printer.Hp LaserJet Pro Printer is a laser printer. A security vulnerability exists in Hp LaserJet Pro Printer, HP LaserJet...

CVE-2024-12213

The WP Job Board Pro plugin for WordPress is vulnerable to privilege escalation in all versions up to 2.3.16. This is due to the plugin allowing a user to supply the 'role' field when registering. This makes it possible for unauthenticated attackers to register as an administrator on vulnerable...

CVE-2024-12213

CVE-2024-12213 affects the WordPress plugin WP Job Board Pro, where an attacker can specify the role during user registration, enabling unauthenticated privilege escalation to administrator on vulnerable sites. Technical details in connected docs indicate the issue arises from processing the regi...

CVE-2024-12213 WP Job Board Pro < 1.2.85 - Unauthenticated Privilege Escalation via process_register

The WP Job Board Pro plugin for WordPress is vulnerable to privilege escalation in all versions up to 2.3.16. This is due to the plugin allowing a user to supply the 'role' field when registering. This makes it possible for unauthenticated attackers to register as an administrator on vulnerable...

CVE-2024-12213 WP Job Board Pro < 1.2.85 - Unauthenticated Privilege Escalation via process_register

The WP Job Board Pro plugin for WordPress is vulnerable to privilege escalation in all versions up to 2.3.16. This is due to the plugin allowing a user to supply the 'role' field when registering. This makes it possible for unauthenticated attackers to register as an administrator on vulnerable...

CVE-2024-12213: Incorrect Privilege Assignment

The WP Job Board Pro plugin for WordPress is vulnerable to privilege escalation in all versions up to 2.3.16. This is due to the plugin allowing a user to supply the 'role' field when registering. This makes it possible for unauthenticated attackers to register as an administrator on vulnerable...

WordPress plugin WP Job Board Pro has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

WordPress WP Job Board Pro plugin <= 1.2.76 - Unauthenticated Privilege Escalation via process_register vulnerability

Unauthenticated Privilege Escalation via processregister vulnerability discovered by Foxyyy in WordPress Plugin WP Job Board Pro versions = 1.2.76...

SUSE CVE-2025-21685

In the Linux kernel, the following vulnerability has been resolved: platform/x86: lenovo-yoga-tab2-pro-1380-fastcharger: fix serdev race The yt21380fcserdevprobe function calls devmserdevdeviceopen before setting the client ops via serdevdevicesetclientops. This ordering can trigger a NULL pointe...

Microsoft Surface input validation error vulnerability

Microsoft Surface is a tablet computer from Microsoft Corporation USA. An input validation error vulnerability exists in Microsoft Surface. An attacker exploiting this vulnerability could bypass certain features. The following products and versions are affected:Surface Laptop 4 with Intel...

Apple Security Update: visionOS 2.3.1

Apple recommends to install security update visionOS 2.3.1 on devices Apple Vision Pro...

PT-2025-20235 · Ао'Сбк' · Communigate Pro

Уязвимость почтового сервера CommuniGate Pro связана с недостаточной проверкой поступающих запросов. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, осуществить SSRF-атаку...

About the security content of visionOS 2.3.1

About the security content of visionOS 2.3.1 This document describes the security content of visionOS 2.3.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...

CommuniGate Pro Buffer Overflow

The vulnerability of the CommuniGate Pro mail server is related to buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2024-7419

The WP ALL Export Pro plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.9.1 via the custom export fields. This is due to the missing input validation and sanitization of user-supplied data. This makes it possible for unauthenticated attackers to...

CVE-2024-9664

The WP All Import Pro plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 4.9.7 via deserialization of untrusted input from an import file. This makes it possible for authenticated attackers, with Administrator-level access and above, to inject a PHP...

CVE-2025-21685

CVE-2025-21685 : In Linux kernel, a race in platform/x86 lenovo-yoga-tab2-pro-1380-fastcharger was fixed. The yt2_1380_fc_serdev_probe() path called devm_serdev_device_open() before initializing serdev client ops, risking a NULL pointer dereference in the serdev controller’s receive_buf handler w...

CVE-2025-21685 platform/x86: lenovo-yoga-tab2-pro-1380-fastcharger: fix serdev race

In the Linux kernel, the following vulnerability has been resolved: platform/x86: lenovo-yoga-tab2-pro-1380-fastcharger: fix serdev race The yt21380fcserdevprobe function calls devmserdevdeviceopen before setting the client ops via serdevdevicesetclientops. This ordering can trigger a NULL pointe...

CVE-2025-21685

In the Linux kernel, the following vulnerability has been resolved: platform/x86: lenovo-yoga-tab2-pro-1380-fastcharger: fix serdev race The yt21380fcserdevprobe function calls devmserdevdeviceopen before setting the client ops via serdevdevicesetclientops. This ordering can trigger a NULL pointe...