UBUNTU-CVE-2025-37964

In the Linux kernel, the following vulnerability has been resolved: x86/mm: Eliminate window where TLB flushes may be inadvertently skipped tl;dr: There is a window in the mm switching code where the new CR3 is set and the CPU should be getting TLB flushes for the new mm. But shouldflushtlb has a...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a TLB refresh window that is too narrow, which could result in skipping a necessary refresh...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a UMP SysEx message translation buffer overflow that could lead to memory corruption...

SafeTrans: LLM-Assisted Transpilation from C to Rust

Rust is a strong contender for a memory-safe alternative to C as a "systems" programming language, but porting the vast amount of existing C code to Rust is a daunting task. In this paper, we evaluate the potential of large language models LLMs to automate the transpilation of C code to idiomatic...

PT-2025-24437 · Unknown · Laravel Translation Manager

Name of the Vulnerable Software and Affected Versions: Laravel Translation Manager versions prior to 0.6.8 Description: The application is vulnerable to Cross-Site Scripting XSS attacks due to incorrect input validation and sanitization of user-input data. An attacker can inject arbitrary HTML...

kernel: arm64: mm: fix VA-range sanity check

A logic flaw was found in the Linux kernel's arm64 memory management subsystem. The virtual address range sanity check in createmappingnoalloc and updatemappingprot uses an incorrect condition that only excludes the KASAN shadow region and module region, rather than properly validating addresses...

kernel: Linux kernel (s390): Denial of service and data corruption due to improper page table updates

A flaw was found in the Linux kernel on the s390 architecture. A local user with low privileges could trigger a vulnerability by enabling ARCHWANTOPTIMIZEHUGETLBVMEMMAP. This issue arises because kernel page table entries are modified without properly flushing the Translation Lookaside Buffer TLB...

PT-2025-23245 · Unknown +1 · Laravel Translation Manager +1

Name of the Vulnerable Software and Affected Versions: FreeScout versions prior to 1.8.180 Description: The issue concerns the laravel-translation-manager package in FreeScout, which does not correctly validate user input. This enables the deletion of any directory, given sufficient access rights...

CVE-2025-47639

Cross-Site Request Forgery CSRF vulnerability in Supertext Supertext Translation and Proofreading polylang-supertext allows Stored XSS.This issue affects Supertext Translation and Proofreading: from n/a through = 4.26...

CVE-2025-47639

Cross-Site Request Forgery CSRF vulnerability in Supertext Supertext Translation and Proofreading polylang-supertext allows Stored XSS.This issue affects Supertext Translation and Proofreading: from n/a through = 4.26...

WordPress Supertext Translation and Proofreading plugin <= 4.26 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by johska in WordPress Plugin Supertext Translation and Proofreading versions = 4.26...

CVE-2025-47639 WordPress Supertext Translation and Proofreading plugin <= 4.26 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Supertext Supertext Translation and Proofreading polylang-supertext allows Stored XSS.This issue affects Supertext Translation and Proofreading: from n/a through = 4.26...

CVE-2025-47639

CVE-2025-47639 (Supertext Translation and Proofreading, WordPress) is a CSRF-to-Stored XSS vulnerability in the Supertext Translation and Proofreading plugin (versions up to 4.25). Exploitation path involves CSRF enabling stored XSS, with a CVSS v3.1 base score of 7.1 (HIGH) and user interaction ...

CVE-2025-20977

Use of implicit intent for sensitive communication in translation in Samsung Notes prior to version 4.4.29.23 allows local attackers to get sensitive information. User interaction is required for triggering this vulnerability...

PT-2025-20201 · Unknown · Supertext Translation/Proofreading

Name of the Vulnerable Software and Affected Versions: Supertext Translation and Proofreading versions n/a through 4.25 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. Recommendations: For versions n/a through 4.25, update to a version that contai...

CVE-2025-47639: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Supertext Supertext Translation and Proofreading polylang-supertext allows Stored XSS.This issue affects Supertext Translation and Proofreading: from n/a through = 4.26...

WordPress plugin Supertext Translation and Proofreading 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...

CVE-2025-20977: Undefined Security Weakness

Use of implicit intent for sensitive communication in translation in Samsung Notes prior to version 4.4.29.23 allows local attackers to get sensitive information. User interaction is required for triggering this vulnerability...

PT-2025-20062 · Samsung · Samsung Notes

Name of the Vulnerable Software and Affected Versions: Samsung Notes versions prior to 4.4.29.23 Description: The issue concerns the use of implicit intent for sensitive communication in translation, allowing local attackers to obtain sensitive information. User interaction is required to trigger...

SUSE CVE-2025-37761

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix an out-of-bounds shift when invalidating TLB When the size of the range invalidated is larger than rounddownpowoftwoULONGMAX, The function macro rounduppowoftwolength will hit an out-of-bounds shift 1. Use a full TLB...