CVE-2025-21884 net: better track kernel sockets lifetime

In the Linux kernel, the following vulnerability has been resolved: net: better track kernel sockets lifetime While kernel sockets are dismantled during pernetoperations-exit, their freeing can be delayed by any tx packets still held in qdisc or device queues, due to skbsetownerw prior calls. Thi...

CVE-2025-21884

In the Linux kernel, the following vulnerability has been resolved: net: better track kernel sockets lifetime While kernel sockets are dismantled during pernetoperations-exit, their freeing can be delayed by any tx packets still held in qdisc or device queues, due to skbsetownerw prior calls. Thi...

CVE-2025-21884

CVE-2025-21884 concerns the Linux kernel topic “net: better track kernel sockets lifetime.” The description in Astra Linux and related Nessus references show the issue arises because kernel sockets freed during pernet_operations->exit() can be delayed by remaining tx packets in qdisc/device qu...

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: CVE-2023-52778: mptcp: deal with large GSO size bsc1224948. CVE-2023-52920: bpf: support non-r10 register spill/fill to/from stack in precision tracking...

CVE-2025-30791 WordPress Cart tracking for WooCommerce plugin <= 1.0.16 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in wpdever Cart tracking for WooCommerce cart-tracking-for-woocommerce allows SQL Injection.This issue affects Cart tracking for WooCommerce: from n/a through = 1.0.16...

CVE-2025-30791

CVE-2025-30791 is a SQL Injection vulnerability in the Cart tracking for WooCommerce plugin. The weakness affects Cart tracking for WooCommerce versions up to 1.0.16 (no asterisked newer versions indicated in the provided docs). The CVE entry notes Improper Neutralization of Special Elements used...

WordPress Cart tracking for WooCommerce plugin <= 1.0.16 - SQL Injection Vulnerability

SQL Injection Vulnerability discovered by kuteminh11 - VNPT Cyber Immunity in WordPress Plugin Cart tracking for WooCommerce versions = 1.0.16...

Arbitrary File Deletion

Aim is vulnerable to Arbitrary File Deletion. The vulnerability is due to path traversal due to improper normalization of the runhash parameter in the LockManager.releaselocks function, allowing attackers to delete arbitrary files via the tracking server API...

The vulnerability of the readline.sh component in the socat redirecting utility allows a hacker to overwrite any files in the system.

The vulnerability of the readline.sh utility for socket redirection involves tracking symbolic links in UNIX systems. Exploiting this vulnerability allows a remote attacker to re-write any files in the system...

PT-2025-13074 · WordPress · Wpdever Cart Tracking For Woocommerce

Name of the Vulnerable Software and Affected Versions: wpdever Cart tracking for WooCommerce versions 1.0.0 through 1.0.16 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection...

WordPress plugin Cart tracking for WooCommerce SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...

kernel: netfilter: nf_conntrack_h323: Add protection for bmp length out of range

A vulnerability was found in the netfilter subsystem of the Linux kernel, specifically in the nfconntrackh323 module. This issue involves inadequate protection for BMP length values, potentially leading to out-of-range conditions...

WordPress plugin UTM tags tracking for Contact Form 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

CVE-2025-25373

creationtimestamp| type| source ---|---|--- 2025-03-25 20:24:21+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8756 2025-03-25 23:40:37+00:00| seen| https://t.me/cvedetector/21123 2025-03-26 01:04:14+00:00| seen|...

CVE-2024-13118

creationtimestamp| type| source ---|---|--- 2025-03-25 06:22:30+00:00| seen| https://bsky.app/profile/potato.software/post/3ll6mzgj6dr2s 2025-03-25 07:00:37+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8607 2025-03-25 08:49:22+00:00| seen|...

CVE-2025-2748

creationtimestamp| type| source ---|---|--- 2025-03-24 22:35:05+00:00| seen| https://t.me/cvedetector/20993 2025-03-24 22:39:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ll5t66rlpk2e 2025-04-01 10:13:14+00:00| seen|...

CVE-2025-1098

creationtimestamp| type| source ---|---|--- 2025-03-24 17:55:00+00:00| seen| https://thehackernews.com/2025/03/critical-ingress-nginx-controller.html 2025-03-24 21:56:48+00:00| seen| https://bsky.app/profile/lookitup.baby/post/3ll5qr5t6uk2k 2025-03-24 22:01:06+00:00| seen|...

CVE-2024-55279

creationtimestamp| type| source ---|---|--- 2025-03-24 16:39:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ll56zvshem26 2025-03-24 18:24:37+00:00| seen| https://t.me/cvedetector/20983 2025-04-01 18:33:02+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9...

CVE-2024-7760

aimhubio/aim version 3.22.0 contains a Cross-Site Request Forgery CSRF vulnerability in the tracking server. The vulnerability is due to overly permissive CORS settings, allowing cross-origin requests from all origins. This enables CSRF attacks on all endpoints of the tracking server, which can b...

CVE-2024-8769

A vulnerability in the LockManager.releaselocks function in aimhubio/aim commit bb76afe allows for arbitrary file deletion through relative path traversal. The runhash parameter, which is user-controllable, is concatenated without normalization as part of a path used to specify file deletion. Thi...