CBL Mariner 2.0 Security Update: kernel (CVE-2024-56770)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-56770 advisory. - In the Linux kernel, the following vulnerability has been resolved: net/sched: netem: account for backlog...

CVE-2025-1363

The URL Shortener | Conversion Tracking | AB Testing | WooCommerce WordPress plugin through 9.0.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is...

CVE-2025-1362

The URL Shortener | Conversion Tracking | AB Testing | WooCommerce WordPress plugin through 9.0.2 does not have CSRF checks in some bulk actions, which could allow attackers to make logged in admins perform unwanted actions, such as deleting customers via CSRF attacks...

CVE-2025-1363

CVE-2025-1363 affects the WordPress plugin “URL Shortener | Conversion Tracking | AB Testing | WooCommerce” (versions up to 9.0.2). The vulnerability is a Stored Cross-Site Scripting (XSS) that occurs due to insufficient sanitisation/escaping of certain plugin settings, enabling a high-privilege ...

CVE-2024-13868

The URL Shortener | Conversion Tracking | AB Testing | WooCommerce WordPress plugin through 9.0.2 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2025-2088

creationtimestamp| type| source ---|---|--- 2025-03-07 15:04:06+00:00| seen| https://bsky.app/profile/potato.software/post/3ljsbriaoub2k 2025-03-07 15:35:23+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6843 2025-03-07 16:00:43+00:00| published-proof-of-concept|...

CVE-2024-58083

creationtimestamp| type| source ---|---|--- 2025-03-06 17:23:06+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114116643141768200 2025-03-06 19:41:56+00:00| seen| https://t.me/cvedetector/19733 2025-03-06 19:54:48+00:00| seen|...

CVE-2024-13868

The URL Shortener | Conversion Tracking | AB Testing | WooCommerce WordPress plugin through 9.0.2 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2025-27655

creationtimestamp| type| source ---|---|--- 2025-03-06 00:00:21+00:00| seen| https://bsky.app/profile/vulnalerts.bsky.social/post/3ljo6sbajj52b 2025-03-06 02:16:26+00:00| seen| Telegram/1Np4XDUTqbMrImIcHm8RIgunvF0kDg4Xu2I85ZHdh8fyW9e 2025-03-06 12:00:15+00:00| seen|...

PozitifIK Pik Online 安全漏洞

PozitifIK Pik Online is an online exam application from PozitifIK, Inc. A security vulnerability exists in PozitifIK Pik Online version 05.03.2025 and earlier, which stems from an authorization bypass that could lead to account footprint tracking and session hijacking...

Linux Distros Unpatched Vulnerability : CVE-2023-38599

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A logic issue was addressed with improved state management. This issue is fixed in Safari 16.6, watchOS 9.6, iOS 15.7.8 and iPadOS 15.7.8, tvOS 16.6, iOS 16.6 a...

openSUSE Security Advisory (SUSE-SU-2025:0764-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Linux Distros Unpatched Vulnerability : CVE-2023-52920

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: support non-r10 register spill/fill to/from stack in precision tracking Use instruction jump history to record instructions that performed register...

Linux Distros Unpatched Vulnerability : CVE-2022-49394

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: blk-iolatency: Fix inflight count imbalances and IO hangs on offline iolatency needs to trac...

Linux Distros Unpatched Vulnerability : CVE-2023-52625

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amd/display: Refactor DMCUB enter/exit idle interface Why We can hang in place trying to send commands when the DMCUB isn't powered on. How We need to exit...

Linux Distros Unpatched Vulnerability : CVE-2019-18282

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The flowdissector feature in the Linux kernel 4.3 through 5.x before 5.3.10 has a device tracking vulnerability, aka CID-55667441c84f. This occurs because the...

CVE-2025-27418

creationtimestamp| type| source ---|---|--- 2025-03-03 16:30:34+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6230 2025-03-03 18:44:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljim7ik52h2b...

CERTFR-2025-ACT-009

creationtimestamp| type| source ---|---|--- 2025-03-03 14:10:14+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/114098897766456947 2025-03-03 14:10:14+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3lji4vkdfmb23 2025-03-03 14:44:31+00:00| seen|...

CVE-2025-1723

creationtimestamp| type| source ---|---|--- 2025-03-03 08:29:28+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6160 2025-03-03 08:49:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljhky6hfrb2b 2025-03-03 09:48:25+00:00| seen|...

Malicious code in cmp-dossier-tracking (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca47cddd0ff04336d55d7da2799d42183ab77e8b7270202739f7728e7904f712 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...