PT-2025-32081 · WordPress · Request A Quote Form

Name of the Vulnerable Software and Affected Versions: Request a Quote Form plugin for WordPress versions prior to 2.5.3 Description: The Request a Quote Form plugin for WordPress is susceptible to Remote Code Execution due to improper validation of user input before it is used as a function name...

WordPress plugin Request a Quote Form 安全漏洞

WordPress Request a Quote Form plugin is a plugin for collecting and managing quote requests with support for custom forms and centralized processing for quote requests for products, services or custom orders. A code execution vulnerability exists in the WordPress Request a Quote Form plugin that...

SUSE-SU-2025:02677-1 Security update for cairo

This update for cairo fixes the following issues: - CVE-2019-6461: avoid assert when drawing arcs with NaN angles bsc1122338...

MAL-2025-191691 Malicious code in bh-usa-automate-req-ase (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 b0340aadb507418f2d21cfa7d568f133db23a6392a2ec64411540ec4ce5456d7 If run, the package exfiltrates AWS credentials. Though it's described as test, the exfiltration really happens --- Category: MALICIOUS - The campaign has...

Chaos RaaS Emerges After BlackSuit Takedown, Demanding $300K from U.S. Victims

A newly emerged ransomware-as-a-service RaaS gang called Chaos is likely made up of former members of the BlackSuit crew, as the latter's dark web infrastructure has been the subject of a law enforcement seizure. Chaos, which sprang forth in February 2025, is the latest entrant in the ransomware...

SUSE CVE-2025-38374

In the Linux kernel, the following vulnerability has been resolved: optee: ffa: fix sleep in atomic context The OP-TEE driver registers the function notifcallback for FF-A notifications. However, this function is called in an atomic context leading to errors like this when processing asynchronous...

CVE-2025-38374

CVE-2025-38374 – Linux kernel (OP-TEE FF-A): The issue arises because OP-TEE’s notif_callback() for FF-A notifications was executed in an atomic context, leading to a sleep and a kernel warning. The fix is to move notification processing to a non-atomic context by using a work queue. Affected des...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel, which stems from the fact that FF-A notification callbacks called in an atomic context may cause sleep...

On-Premise vs SaaS Data Annotation Platforms Compared

Choosing a data annotation platform? Learn when to use SaaS or on premise based on speed, cost, data privacy, and project scope...

CISA Releases Six Industrial Control Systems Advisories

CISA released six Industrial Control Systems ICS advisories on July 24, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-205-01 Mitsubishi Electric CNC Series ICSA-25-205-02 Network Thermostat X-Series WiFi...

PublicCMS 输入验证错误漏洞

PublicCMS is an open source content management system CMS written in Java language by PublicCMS China. A security vulnerability exists in PublicCMS 5.202506.a and earlier versions, which stems from an open redirect due to incorrect manipulation of the parameter url in the file preview.html...

PublicCMS 输入验证错误漏洞

PublicCMS is an open source content management system CMS written in Java by PublicCMS China. An input validation error vulnerability exists in PublicCMS 5.202506.a and earlier versions, which stems from an open redirect due to incorrect manipulation of the parameter File in the file viewer.html...

Canonical MAAS 安全漏洞

Canonical MAAS is a Canonical open source software for large-scale physical server management and automated deployment. A security vulnerability exists in Canonical MAAS that stems from insufficient authentication and could allow an attacker to bypass authentication checks and run RPC commands...

CVE-2025-50582

StudentManage v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the Add A New Course module...

CVE-2025-50582

StudentManage v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the Add A New Course module...

CVE-2025-50584

StudentManage v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the Add A New Teacher module...

PT-2025-30096 · Unknown · Student-Manage

Name of the Vulnerable Software and Affected Versions: StudentManage version 1.0 Description: The software contains a cross-site scripting XSS vulnerability within the Add A New Course module. Recommendations: Address the issue in the Add A New Course module for StudentManage version 1.0...

CVE-2025-50584

StudentManage v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the Add A New Teacher module...

PT-2025-30097 · Unknown · Student-Manage

Name of the Vulnerable Software and Affected Versions: StudentManage version 1.0 Description: The software contains a cross-site scripting XSS issue within the Add A New Student module. Recommendations: Address the issue in the Add A New Student module...

PT-2025-30091 · Unknown · Student-Manage

Name of the Vulnerable Software and Affected Versions: StudentManage version 1.0 Description: The software contains a cross-site scripting XSS issue via the Add A New Teacher module. Recommendations: Address the issue in the Add A New Teacher module in StudentManage version 1.0...