9783 matches found
CVE-2025-32486
CVE-2025-32486 exists in the WordPress plugin “Material Dashboard” (Hossein Material Dashboard) up to version 1.4.6. The connected documents identify an unauthenticated privilege-escalation vulnerability linked to a weak password-recovery mechanism, enabling elevation of privileges within affecte...
CVE-2025-40802
The CVE-2025-40802 issue affects Siemens RUGGEDCOM RST2428P (6GK6242-6PA00) across all versions. Affected component/behavior: resource exhaustion caused by high volumes of query requests, resulting in a temporary denial of service with recovery after activity stops. Public technical details in pr...
WordPress plugin Material Dashboard 授权问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An authorization issue...
PT-2025-36756
Name of the Vulnerable Software and Affected Versions: Hossein Material Dashboard versions n/a through 1.4.6 Description: A weakness exists in the password recovery mechanism for forgotten passwords in Hossein Material Dashboard. This issue could allow unauthorized access to accounts...
AZL-66932 CVE-2025-39726 affecting package kernel for versions less than 6.6.104.2-1
In the Linux kernel, the following vulnerability has been resolved: s390/ism: fix concurrency management in ismcmd The s390x ISM device data sheet clearly states that only one request-response sequence is allowable per ISM function at any point in time. Unfortunately as of today the s390/ism driv...
CVE-2025-1740
Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft MyRezzta allows Authentication Bypass, Password Recovery Exploitation, Brute Force.This issue affects MyRezzta: from s2.03.01 before v2.05.01...
What Is Cybersecurity in Space?
Satellites, drones, and 5G space links now support critical services such as air traffic, finance, and weather. Yet most were not built to resist modern cyber threats. Ground stations can be breached, GPS jammed, and supply chains compromised, while no shared list of vulnerabilities or safe testi...
Akinsoft MyRezzta Authentication Bypass Vulnerability
Aiseesoft is a technology company specializing in software development. An authentication bypass vulnerability exists in Akinsoft MyRezzta, which stems from improperly limiting authentication attempts and could lead to authentication bypass, password recovery exploitation, and brute-force breakin...
PCI: pnv_php: Fix surprise plug detection and recovery
...
gfs2: No more self recovery
...
An issue was discovered in Arm Mbed TLS before 2.23.0. A side channel allows recovery of an ECC private key, related to mbedtls_ecp_check_pub_priv, mbedtls_pk_parse_key, mbedtls_pk_parse_keyfile, mbedtls_ecp_mul, and mbedtls_ecp_mul_restartable.
...
RDMA/mlx5: Fix the recovery flow of the UMR QP
...
drm/amdgpu: Skip do PCI error slot reset during RAS recovery
...
ublk: fix handling recovery & reissue in ublk_abort_queue()
...
md: Don't ignore suspended array in md_check_recovery()
...
md: Don't ignore read-only array in md_check_recovery()
...
wifi: mt76: mt7921s: fix potential hung tasks during chip recovery
...
f2fs: fix to avoid potential panic during recovery
...
An issue was discovered in Arm Mbed TLS before 2.24.0. An attacker can recover a private key (for RSA or static Diffie-Hellman) via a side-channel attack against generation of base blinding/unblinding values.
...