1952 matches found
CVE-2025-38524
In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix recv-recv race of completed call If a call receives an event such as incoming data, the call gets placed on the socket's queue and a thread in recvmsg can be awakened to go and process it. Once the thread has picked up...
CVE-2025-8464
The Drag and Drop Multiple File Upload for Contact Form 7 plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.3.9.0 via the wpcf7guestuserid cookie. This makes it possible for unauthenticated attackers to upload and delete files outside of the...
CVE-2025-8464 Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.9.0 - Directory Traversal via `wpcf7_guest_user_id` Cookie
The Drag and Drop Multiple File Upload for Contact Form 7 plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.3.9.0 via the wpcf7guestuserid cookie. This makes it possible for unauthenticated attackers to upload and delete files outside of the...
EulerOS 2.0 SP11 : screen (EulerOS-SA-2025-1968)
According to the versions of the screen package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : For a short time they PTY is set to mode 666, allowing any user on the system to connect to the screen session.CVE-2025-46802 A minor information...
CVE-2025-2498
creationtimestamp| type| source ---|---|--- 2025-08-13 17:59:39+00:00| seen| Telegram/9FigBaxM7sVgyLMWodmPrJf2Se-GYHFKOHM8uM5PpQnb3TI...
Linux Distros Unpatched Vulnerability : CVE-2019-11190
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Linux kernel before 4.8 allows local users to bypass ASLR on setuid programs such as /bin/su because installexeccreds is called too late in loadelfbinary in...
Security update for systemd
This update for systemd fixes the following issues: CVE-2025-4598: Fixed race condition that allows a local attacker to crash a SUID program and gain read access to the resulting core dump bsc1243935. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods li...
SUSE-SU-2025:02675-1 Security update for systemd
This update for systemd fixes the following issues: - CVE-2025-4598: Fixed race condition that allows a local attacker to crash a SUID program and gain read access to the resulting core dump bsc1243935...
OESA-2025-1946 systemd security update
systemd is a system and service manager that runs as PID 1 and starts the rest of the system. Security Fixes: A vulnerability was found in systemd-coredump. This flaw allows an attacker to force a SUID process to crash and replace it with a non-SUID binary to access the original's privileged...
CVE-2023-7306
creationtimestamp| type| source ---|---|--- 2025-07-25 08:38:07+00:00| seen| Telegram/WqyPE2iBwCHilcfRddyTIDT38RG6bXRiuDHmBxTIBdorHng...
CVE-2025-31511
An issue was discovered in AlertEnterprise Guardian 4.1.14.2.2.1. One can bypass manager approval by changing the user ID in a Request%20Building%20Access requestSubmit API call. The vendor has stated that the system is protected by updating to a version equal to or greater than one of the...
Alert Enterprise Guardian 安全漏洞
Alert Enterprise Guardian is a physical identity and access management system open-sourced by Alert Enterprise in the United States. A security vulnerability exists in Alert Enterprise Guardian version 4.1.14.2.2.1 that originates from bypassing manager approval by modifying the user ID in the...
CVE-2025-31511
An issue was discovered in AlertEnterprise Guardian 4.1.14.2.2.1. One can bypass manager approval by changing the user ID in a Request%20Building%20Access requestSubmit API call. The vendor has stated that the system is protected by updating to a version equal to or greater than one of the...
CVE-2025-31511
CVE-2025-31511 affects AlertEnterprise Guardian 4.1.14.2.2.1, where an attacker can bypass manager approval by altering the user ID in the Request Building Access requestSubmit API call. The vulnerability is mitigated by upgrading to one of the vendor-recommended builds: 4.1.12.2.1.19, 4.1.12.5.2...
CLSA-2025-1753131177 libblockdev: Fix of CVE-2025-6019
CVE-2025-6019: don't allow suid and dev set on fs resize...
PMTicket Project-Management-Software 注入漏洞
PMTicket Project-Management-Software is an agile project management and issue tracking system from PMTicket open source. An injection vulnerability exists in pmTicket Project-Management-Software, which stems from SQL injection due to incorrect manipulation of the parameter userid of the function...
PT-2025-30188 · Unknown · Pmticket Project-Management-Software
Name of the Vulnerable Software and Affected Versions: pmTicket Project-Management-Software versions prior to 2ef379da2075f4761a2c9029cf91d073474e7486 Description: A critical issue exists in pmTicket Project-Management-Software. The getUserLanguage function within the classes/class.database.php...
CVE-2025-30748
creationtimestamp| type| source ---|---|--- 2025-07-16 15:24:42+00:00| seen| Telegram/uC3DGdEciON1GkKoFTxuouEFJbjwq-akPB9Z-jSTdMYziw...