Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from raid1 and raid10 ignoring IO flags, which could lead to performance issues or priority reversal...

PT-2025-16904

Name of the Vulnerable Software and Affected Versions Zulip versions prior to 10.2 Description A bug in the Zulip server allows account creation without authenticating with the configured Single Sign-On SSO authentication backend in organizations where account creation is limited solely by SSO...

April 16, 2025—KB5059091 (OS Build 17763.7249) Out-of-band

None None...

CVE-2025-31499

Jellyfin is an open source self hosted media server. Versions before 10.10.7 are vulnerable to argument injection in FFmpeg. This can be leveraged to possibly achieve remote code execution by anyone with credentials to a low-privileged user. This vulnerability was previously reported in...

SUSE CVE-2023-42970

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14, watchOS 10, tvOS 17, Safari 17. Processing web content may lead to arbitrary code execution...

Jellyfin 参数注入漏洞

Jellyfin is a free software media system from Jellyfin Open Source. It allows you to control the management and streaming of media. It is an alternative to the proprietary Emby and Plex and can serve media from a dedicated server to end-user devices through multiple applications. A parameter...

PT-2025-16281 · Veritas +1 · Vault Enterprise +1

Name of the Vulnerable Software and Affected Versions: Arctera eDiscovery Platform versions prior to 10.3.2 Description: The issue concerns the Arctera eDiscovery Platform, where a cleartext password is placed on a command line in EVSearcher when the Enterprise Vault Collection Module is used...

PT-2025-16380 · Tenda · Tenda Ac10

Name of the Vulnerable Software and Affected Versions: Tenda AC10 version V4.0si V16.03.10.20 Description: The issue concerns a Buffer Overflow in the AdvSetMacMtuWan function via the mac2 variable. Recommendations: For Tenda AC10 version V4.0si V16.03.10.20, as a temporary workaround, consider...

NATS-Server 安全漏洞

Nats-Server is a high-performance server open-sourced by Nats for Nats.io, cloud and edge native messaging systems. A security vulnerability exists in NATS-Server versions prior to 2.2.0 through 2.10.27 and prior to 2.11.1, which stems from a lack of access control for JS API requests and could...

WordPress TS Poll – Survey, Versus Poll, Image Poll, Video Poll plugin <= 2.4.6 - Authenticated (Administrator+) SQL Injection via 's' Parameter vulnerability

Authenticated Administrator+ SQL Injection via 's' Parameter vulnerability discovered by broccoli in WordPress Plugin TS Poll versions = 2.4.6...

UBUNTU-CVE-2023-42875

Processing web content may lead to arbitrary code execution. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14, watchOS 10, tvOS 17, Safari 17. The issue was addressed with improved memory handling...

April 11, 2025—KB5058921 (OS Build 14393.7973) Out-of-band

None None...

CVE-2025-32700

creationtimestamp| type| source ---|---|--- 2025-04-10 21:43:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmihwdatcx2b 2025-04-10 23:43:15+00:00| seen| https://t.me/cvedetector/22679 2025-04-13 15:06:08+00:00| seen|...

CVE-2025-31411

creationtimestamp| type| source ---|---|--- 2025-04-10 10:49:19+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11220 2025-04-10 11:32:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmhfsn62bd2h 2025-04-10 15:21:47+00:00| seen|...

GitLab Enterprise Edition（EE） 安全漏洞

GitLab Enterprise Edition EE is a content management system from GitLab, Inc. in the United States. A security vulnerability exists in GitLab Enterprise Edition EE that originates from an attacker being able to perform sensitive keyword searches. The following products and versions are affected:...

CVE-2025-32387

creationtimestamp| type| source ---|---|--- 2025-04-09 22:48:53+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11180 2025-04-10 03:33:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmgkzhohpp2a 2025-04-10 03:39:13+00:00| seen|...

2025-04 Cumulative Update for Windows 10 Version 1507 for x64-based Systems (KB5055547)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

WordPress Scheduled plugin <= 1.0 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by Nguyen Thi Huyen Trang - Skalucy in WordPress Plugin Scheduled versions = 1.0...

WordPress Waymark plugin <= 1.5.3 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by theviper17 in WordPress Plugin Waymark versions = 1.5.3...

CVE-2025-31035

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Benjamin Chris WP Editor.md – The Perfect WordPress Markdown Editor wp-editormd allows Stored XSS.This issue affects WP Editor.md – The Perfect WordPress Markdown Editor: from n/a through = 10.2.1...