CVE-2025-66287

A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling...

CVE-2025-66287

WebKitGTK/WebKitGTK4 is affected by CVE-2025-66287: Processing malicious web content can cause an unexpected process crash due to improper memory handling. The issue is referenced across multiple advisories (ALMAS, Debian, Fedora, Mageia, Red Hat) and is addressed by updating to newer WebKitGTK/W...

CVE-2025-66287 Webkitgtk: processing maliciously crafted web content may lead to an unexpected process crash

A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling...

CVE-2025-66287 Webkitgtk: processing maliciously crafted web content may lead to an unexpected process crash

A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling...

CVE-2025-66287

A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling. Mitigation Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the...

EUVD-2025-201186

In the Linux kernel, the following vulnerability has been resolved: pidfs: validate extensible ioctls Validate extensible ioctls stricter than we do now...

[SECURITY] [DLA 4394-1] webkit2gtk security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4394-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort December 04, 2025 https://wiki.debian.org/LTS -...

CVE-2025-12826

The CVE-2025-12826 entry describes a vulnerability in the WordPress plugin Custom Post Type UI (versions

CVE-2025-10304

The Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the processstatusunlink function in all versions up to, and including, 2.3.8. This makes it possible for unauthenticated...

CVE-2025-65320

Abacre Restaurant Point of Sale POS up to 15.0.0.1656 are vulnerable to Cleartext Storage of Sensitive Information in Memory. The application leaves valid device-bound license keys in process memory during an activation attempt...

[SECURITY] [DSA 6070-1] webkit2gtk security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6070-1 [email protected] https://www.debian.org/security/ Alberto Garcia December 04, 2025 https://www.debian.org/security/faq -...

WebKitGTK 安全漏洞

WebKitGTK is a full-featured port of WebKitGTK's WebKit rendering engine for projects that require any type of Web integration, from hybrid HTML/CSS applications to full-fledged Web browsers. It provides the full functionality of WebKit for a wide range of systems from desktop computers to embedd...

PT-2025-49101

Name of the Vulnerable Software and Affected Versions WebKitGTK affected versions not specified Description A flaw exists in WebKitGTK where processing malicious web content can lead to an unexpected process crash due to improper memory handling. Recommendations At the moment, there is no...

Debian dsa-6070 : gir1.2-javascriptcoregtk-4.0 - security update

The remote Debian 12 / 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6070 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6070-1 [email protected]...

PT-2025-49066

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to the LAN8814 network PHY. Specifically, the shared-phydev pointer is not always initialized during the PTP probe, leading to a potential NULL...

WEBIGniter 跨站脚本漏洞

WEBIGniter is a content management system from WEBIGniter, Inc. A cross-site scripting vulnerability exists in WEBIGniter version 28.7.23, which stems from a cross-site scripting vulnerability in the user-created process that could lead to the execution of malicious JavaScript code...

CVE-2025-59694

The Chassis Management Board in Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allows a physically proximate attacker to persistently modify firmware and influence the insecurely configured appliance boot process. To exploit this, the attacker must modify the...

CVE-2025-13685

The Photo Gallery by Ays plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 6.4.8. This is due to missing nonce verification on the bulk action functionality in the 'processbulkaction' function. This makes it possible for unauthenticated attacke...

EUVD-2025-200726

The Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the processstatusunlink function in all versions up to, and including, 2.3.8. This makes it possible for unauthenticated...

CVE-2025-65320

CVE-2025-65320 affects Abacre Restaurant Point of Sale (POS) up to version 15.0.0.1656. The root cause is Cleartext Storage of Sensitive Information in Memory: valid device-bound license keys are left in process memory during an activation attempt. Several connected sources corroborate that all v...