CVE-2025-31542

CVE-2025-31542 identifies an authenticated SQL Injection in the WordPress plugin My auctions allegro (free edition). Affected: My auctions allegro

USN-7376-2 mariadb vulnerability

USN-7376-1 fixed vulnerabilities in MariaDB. This update provides the corresponding updates for Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. Original advisory details: A security issue was discovered in MariaDB and this update includes a new upstream MariaDB version to fix the issue. In addition to...

CVE-2025-25686

creationtimestamp| type| source ---|---|--- 2025-03-29 00:07:08+00:00| seen| https://bsky.app/profile/redteamnews.bsky.social/post/3llhzvvzg6k2h...

CVE-2024-2439

creationtimestamp| type| source ---|---|--- 2025-03-28 23:29:14+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9496...

CVE-2025-28091

creationtimestamp| type| source ---|---|--- 2025-03-28 21:28:55+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9465 2025-03-29 00:26:42+00:00| seen| https://t.me/cvedetector/21468 2025-03-31 23:48:49+00:00| seen|...

CVE-2025-30772

creationtimestamp| type| source ---|---|--- 2025-03-28 16:00:09+00:00| published-proof-of-concept| Telegram/4n6mfMxv4uavydfdKkdBPOPI2gWNVwMBFRreY1FAnSrV4 2025-03-28 16:00:11+00:00| published-proof-of-concept| Telegram/bsHc6hYCGodfaBywPUDWD0bkK7FEhNfpE-jIqFjWAY4yA...

Security update for erlang26

This update for erlang26 fixes the following issues: CVE-2025-26618: Fixed incorrect verification of SSH SFTP packet size in Erlang OTP bsc1237467 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively...

CVE-2022-4496

creationtimestamp| type| source ---|---|--- 2025-03-28 14:27:43+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9358...

WordPress NertWorks All in One Social Share Tools plugin <=1.26 - Cross Site Request Forgery (CSRF) Vulnerability

Cross Site Request Forgery CSRF Vulnerability discovered by johska in WordPress Plugin NertWorks All in One Social Share Tools versions = 1.26...

CVE-2025-31432

creationtimestamp| type| source ---|---|--- 2025-03-28 12:27:31+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9320...

CVE-2025-31335

The OpenSAML C++ library before 3.3.1 allows forging of signed SAML messages via parameter manipulation when using SAML bindings that rely on non-XML signatures...

CVE-2025-2888 Improper timestamp caching during snapshot rollback in tough

During a snapshot rollback, the client incorrectly caches the timestamp metadata. If the client checks the cache when attempting to perform the next update, the update timestamp validation will fail, preventing the next update until the cache is cleared. Users should upgrade to tough version 0.20...

CVE-2025-30366

creationtimestamp| type| source ---|---|--- 2025-03-27 19:09:44+00:00| seen| https://t.me/cvedetector/21314...

CVE-2023-52936

In the Linux kernel, the following vulnerability has been resolved: kernel/irq/irqdomain.c: fix memory leak with using debugfslookup When calling debugfslookup the result must have dput called on it, otherwise the memory will leak over time. To make things simpler, just call debugfslookupandremov...

CVE-2022-49742

In the Linux kernel, the following vulnerability has been resolved: f2fs: initialize locks earlier in f2fsfillsuper syzbot is reporting lockdep warning at f2fshandleerror 1, for spinlock&sbi-errorlock is called before spinlockinit is called. For safe locking in error handling, move initialization...

CVE-2023-53013

In the Linux kernel, the following vulnerability has been resolved: ptdma: ptcoreexecutecmd should use spinlock The interrupt handler ptcoreirqhandler of the ptdma driver can be called from interrupt context. The code flow in this function can lead down to ptcoreexecutecmd which will attempt to...

CVE-2023-53020 l2tp: close all race conditions in l2tp_tunnel_register()

In the Linux kernel, the following vulnerability has been resolved: l2tp: close all race conditions in l2tptunnelregister The code in l2tptunnelregister is racy in several ways: 1. It modifies the tunnel socket after publishing it. 2. It calls setupudptunnelsock on an existing socket without...

CVE-2025-22637

creationtimestamp| type| source ---|---|--- 2025-03-27 16:26:49+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9127...

CVE-2025-29492

libming v0.4.8 was discovered to contain a segmentation fault via the decompileSETVARIABLE function...

CVE-2025-21879

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix use-after-free on inode when scanning root during em shrinking At btrfsscanroot we are accessing the inode's root and fsinfo in a call to btrfsfsclosing after we have scheduled the inode for a delayed iput, and that ca...