PT-2025-17277 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved, related to the nfsd module. The issue arises when a delegation is revoked and marked with the SC STATUS FREEABLE flag, which...

PT-2025-20521

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A deadlock warning occurred in the Linux kernel when invoking nfs4 put stid following a failed dl recall queue operation. This issue arises from the interaction between nfsd break one...

The vulnerability of the microprogrammed software of industrial routers SCALANCE M-800 and industrial switches SCALANCE SC-600, related to partial comparison, allows a intruder to influence the integrity of the protected information.

The vulnerability of the microprogrammed software of industrial routers SCALANCE M-800 and industrial switches SCALANCE SC-600 is related to a partial comparison. Exploiting this vulnerability could allow an attacker operating remotely to influence the integrity of the protected information...

Siemens SCALANCE M-800 and SC-600 Families Partial String Comparison (CVE-2025-23384)

A remote attacker needs to have access to a valid certificate in order to perform a successful attack. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description...

Siemens SCALANCE M-800 and SC-600 Families

SUMMARY SCALANCE M-800 and SC-600 families are affected by improper input validation in the OpenVPN authentication. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends specific...

Malicious code in twitter-sc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b0b3d9d25d03f278d57c1a000d070c3a5846334136498ba3ade4b4b94db1e14c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2056 Malicious code in twitter-sc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b0b3d9d25d03f278d57c1a000d070c3a5846334136498ba3ade4b4b94db1e14c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sc-twitter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f06be1b77e7ae85e1f2d220297011b6ba20065beec02746e6ffde49d5d56aa87 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2049 Malicious code in sc-twitter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f06be1b77e7ae85e1f2d220297011b6ba20065beec02746e6ffde49d5d56aa87 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE CVE-2022-49463

In the Linux kernel, the following vulnerability has been resolved: thermal/drivers/imxscthermal: Fix refcount leak in imxscthermalprobe offindnodebyname returns a node pointer with refcount incremented, we should use ofnodeput on it when done. Add missing ofnodeput to avoid refcount leak...

CVE-2022-49463 thermal/drivers/imx_sc_thermal: Fix refcount leak in imx_sc_thermal_probe

In the Linux kernel, the following vulnerability has been resolved: thermal/drivers/imxscthermal: Fix refcount leak in imxscthermalprobe offindnodebyname returns a node pointer with refcount incremented, we should use ofnodeput on it when done. Add missing ofnodeput to avoid refcount leak...

CVE-2025-23733

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in sayoko SC Simple Zazzle sc-simple-zazzle allows Reflected XSS.This issue affects SC Simple Zazzle: from n/a through = 1.1.6...

CVE-2024-35743

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Siteclean SC filechecker allows Path Traversal, File Manipulation.This issue affects SC filechecker: from n/a through 0.6...

PT-2025-4001 · WordPress · Themerex Addons

Name of the Vulnerable Software and Affected Versions: ThemeREX Addons plugin for WordPress versions up to and including 2.33.0 Description: The issue arises from the trx sc reviews shortcode type attribute, allowing authenticated attackers with contributor-level or higher permissions to include...

CVE-2025-23733

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in sayoko SC Simple Zazzle sc-simple-zazzle allows Reflected XSS.This issue affects SC Simple Zazzle: from n/a through = 1.1.6...

CVE-2025-23733 WordPress SC Simple Zazzle plugin <= 1.1.6 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in sayoko SC Simple Zazzle sc-simple-zazzle allows Reflected XSS.This issue affects SC Simple Zazzle: from n/a through = 1.1.6...

WordPress plugin SC Simple Zazzle 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

CVE-2025-0533

A vulnerability was found in 1000 Projects Campaign Management System Platform for Women 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /Code/sclogin.php. The manipulation of the argument uname leads to sql injection. The attack can b...

WordPress SC Simple Zazzle plugin <= 1.1.6 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by thiennv in WordPress Plugin SC Simple Zazzle versions = 1.1.6...

PT-2024-38941 · WordPress · S2Member

Name of the Vulnerable Software and Affected Versions: s2Member plugin for WordPress versions up to, and including, 241114 Description: The issue allows authenticated attackers with Contributor-level access and above to extract sensitive data, including user data and database configuration...