3304 matches found
CVE-2025-29602
flatpress 1.3.1 is vulnerable to Cross Site Scripting XSS in Administration area via Manage categories...
CVE-2025-29602
flatpress 1.3.1 is vulnerable to Cross Site Scripting XSS in Administration area via Manage categories...
FlatPress 安全漏洞
FlatPress is a lightweight, easy-to-setup flat file blogging engine from the FlatPress open source. A security vulnerability exists in FlatPress version 1.3.1, which stems from the presence of cross-site scripting in the administration area, which could lead to cross-site scripting attacks...
CVE-2025-29602
flatpress 1.3.1 is vulnerable to Cross Site Scripting XSS in Administration area via Manage categories...
CVE-2025-29602
Summary: CVE-2025-29602 affects FlatPress 1.3.1 with a stored XSS in the Administration area (Manage categories). The root cause is untrusted input handling in category management, enabling a payload stored by an admin that could affect other users. The vulnerability has a confirmed exploit refer...
vlan: enforce underlying device type
...
TikTok Slammed With €530 Million GDPR Fine for Sending E.U. Data to China
Ireland's Data Protection Commission DPC on Friday fined popular video-sharing platform TikTok €530 million $601 million for infringing data protection regulations in the region by transferring European users' data to China. "TikTok infringed the GDPR regarding its transfers of EEA European...
Wangshen SecGate 路径遍历漏洞
Wangshen SecGate is a series of gigabit firewalls from China's Wangshen. A path traversal vulnerability exists in the Wangshen SecGate 3600, which stems from path traversal due to incorrect operation of the parameter filename in the file ?g=objareaexportsave...
UBUNTU-CVE-2022-49845
In the Linux kernel, the following vulnerability has been resolved: can: j1939: j1939sendone: fix missing CAN header initialization The read access to struct canxlframe::len inside of a j1939 created skbuff revealed a missing initialization of reserved and later filled elements in struct canframe...
DEBIAN-CVE-2025-37760
In the Linux kernel, the following vulnerability has been resolved: mm/vma: add giveuponoom option on modify/merge, use in uffd release Currently, if a VMA merge fails due to an OOM condition arising on commit merge or a failure to duplicate anonvma's, we report this so the caller can handle it...
CVE-2025-37760
In the Linux kernel, the following vulnerability has been resolved: mm/vma: add giveuponoom option on modify/merge, use in uffd release Currently, if a VMA merge fails due to an OOM condition arising on commit merge or a failure to duplicate anonvma's, we report this so the caller can handle it...
CVE-2022-49845 can: j1939: j1939_send_one(): fix missing CAN header initialization
In the Linux kernel, the following vulnerability has been resolved: can: j1939: j1939sendone: fix missing CAN header initialization The read access to struct canxlframe::len inside of a j1939 created skbuff revealed a missing initialization of reserved and later filled elements in struct canframe...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a failure to properly check for skb discard conditions in candev, which could lead to an out-of-bounds read...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an uninitialized CAN header in j1939sendone, which could lead to undefined behavior...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel suffers from a null pointer dereference vulnerability that stems from an unverified region HPA order that could lead to a null pointer dereference. An attacker cou...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from improper OOM handling in mm/vma, which could lead to a resource leak...
SUSE-SU-2025:1399-1 Security update for java-11-openjdk
This update for java-11-openjdk fixes the following issues: Upgrade to upstream tag jdk-11.0.27+6 April 2025 CPU CVEs: + CVE-2025-21587: Fixed JSSE unauthorized access, deletion or modification of critical data bsc1241274 + CVE-2025-30691: Fixed Oracle Java SE Compiler Unauthorized Data Access...
Smart Water Security with AI and Blockchain-Enhanced Digital Twins
Water distribution systems in rural areas face serious challenges such as a lack of real-time monitoring, vulnerability to cyberattacks, and unreliable data handling. This paper presents an integrated framework that combines LoRaWAN-based data acquisition, a machine learning-driven Intrusion...
A Gradient-Optimized TSK Fuzzy Framework for Explainable Phishing Detection
Phishing attacks represent an increasingly sophisticated and pervasive threat to individuals and organizations, causing significant financial losses, identity theft, and severe damage to institutional reputations. Existing phishing detection methods often struggle to simultaneously achieve high...
