29345 matches found
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986384)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986384 advisory. In the Linux kernel, the following vulnerability has been resolved: efi: fix NULL-deref in init error path In cases where runtime services are not supported or have...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986767)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986767 advisory. In the Linux kernel, the following vulnerability has been resolved: x86/ioremap: Map EFI-reserved memory as encrypted for SEV Some drivers require memory that is...
Clash Verge Rev 安全漏洞
Clash Verge Rev is an open source proxy tool from Clash Verge Rev. A security vulnerability exists in Clash Verge Rev 2.2.3 and earlier versions, which stems from installing system services by default and exposing critical functionality via an unauthorized HTTP API, which could lead to local...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986392)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986392 advisory. In the Linux kernel, the following vulnerability has been resolved: efi: fix NULL-deref in init error path In cases where runtime services are not supported or have...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987282)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987282 advisory. In the Linux kernel, the following vulnerability has been resolved: efi: fix NULL-deref in init error path In cases where runtime services are not supported or have...
EUVD-2025-32545
In AMD Zynq UltraScale+ devices, the lack of address validation when executing CSU runtime services through the PMU Firmware can allow access to isolated or protected memory spaces resulting in the loss of integrity and confidentiality...
CVE-2025-0038
The CVE-2025-0038 entry corresponds to AMD Zynq UltraScale+ devices where the PMU Firmware’s CSU runtime services do not validate memory addresses. Connected sources (AMD-SB-8008 and related records) confirm that memory pointers issued to CSU runtime commands can bypass access controls, allowing ...
Chinese Cybercrime Group Runs Global SEO Fraud Ring Using Compromised IIS Servers
Cybersecurity researchers have shed light on a Chinese-speaking cybercrime group codenamed UAT-8099 that has been attributed to search engine optimization SEO fraud and theft of high-value credentials, configuration files, and certificate data. The attacks are designed to target Microsoft Interne...
Logo Cloud 安全漏洞
Logo Cloud is a series of cloud-based services and products from Logo Turkey. A security vulnerability exists in Logo Cloud versions prior to 2.57 that stems from improper output encoding or escaping, which could lead to a phishing attack...
AMD Zynq UltraScale+ 安全漏洞
AMD Zynq UltraScale+ is a multiprocessor system-on-chip from UltraMicroelectronics AMD. A security vulnerability exists in AMD Zynq UltraScale+ that stems from a lack of address validation when executing CSU runtime services, which could result in a loss of integrity and confidentiality...
CVE-2025-9029
The WDesignKit – Elementor & Gutenberg Starter Templates, Patterns, Cloud Workspace & Widget Builder plugin for WordPress is vulnerable to missing authorization via the wdkithandlereviewsubmission function in versions less than, or equal to, 1.2.16. This is due to the plugin not properly verifyin...
UBUNTU-CVE-2022-50504
In the Linux kernel, the following vulnerability has been resolved: powerpc/rtas: avoid scheduling in rtasosterm It's unsafe to use rtasbusydelay to handle a busy status from the ibm,os-term RTAS function in rtasosterm: Kernel panic - not syncing: Attempted to kill init! exitcode=0x0000000b BUG:...
EUVD-2025-32417
The WDesignKit – Elementor & Gutenberg Starter Templates, Patterns, Cloud Workspace & Widget Builder plugin for WordPress is vulnerable to missing authorization via the wdkithandlereviewsubmission function in versions less than, or equal to, 1.2.16. This is due to the plugin not properly verifyin...
CVE-2025-9029
CVE-2025-9029 concerns the WordPress plugin WDesignKit (Elementor & Gutenberg Starter Templates, Patterns, Cloud Workspace & Widget Builder). The vulnerability is a missing authorization flaw in the function wdkit_handle_review_submission for versions
Malicious code in validate-here-services (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-48396 Malicious code in validate-here-services (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
PT-2025-40618
Name of the Vulnerable Software and Affected Versions WDesignKit – Elementor & Gutenberg Starter Templates, Patterns, Cloud Workspace & Widget Builder plugin for WordPress versions through 1.2.16 Description The WDesignKit plugin for WordPress does not properly verify user authorization, allowing...
SUSE CVE-2023-53521
In the Linux kernel, the following vulnerability has been resolved: scsi: ses: Fix slab-out-of-bounds in sesintfremove A fix for: BUG: KASAN: slab-out-of-bounds in sesintfremove+0x23f/0x270 ses Read of size 8 at addr ffff88a10d32e5d8 by task rmmod/12013 When edev-components is zero, accessing...
SUSE CVE-2025-27231
The LDAP 'Bind password' value cannot be read after saving, but a Super Admin account can leak it by changing LDAP 'Host' to a rogue LDAP server. To mitigate this, the 'Bind password' value is now reset on 'Host' change...