10075 matches found
CVE-2025-10406: Improper Limitation of a Pathname to a Restricted Directory
The BlindMatrix e-Commerce WordPress plugin before 3.1 does not validate some shortcode attributes before using them to generate paths passed to include function/s, allowing any authenticated users, such as contributors, to perform LFI attacks...
PT-2025-42286
Name of the Vulnerable Software and Affected Versions Quick Social Login plugin for WordPress versions prior to 1.4.7 Description The Quick Social Login plugin for WordPress is susceptible to Stored Cross-Site Scripting through the 'quick-login' shortcode. This is due to inadequate input...
PT-2025-42301
Name of the Vulnerable Software and Affected Versions YourMembership Single Sign On – YM SSO Login plugin for WordPress versions up to and including 1.1.7 Description The YourMembership Single Sign On – YM SSO Login plugin for WordPress has a flaw that allows unauthorized access to data. A missin...
HCL AION security vulnerabilities
HCL AION is an AI lifecycle management platform from HCL India. HCL AION has a security vulnerability which is caused due to missing security attributes in the encrypted session SSL cookie. No details of the vulnerability are provided at this time...
CVE-2025-11561 Sssd: sssd default kerberos configuration allows privilege escalation on ad-joined linux systems
A flaw was found in the integration of Active Directory and the System Security Services Daemon SSSD on Linux systems. In default configurations, the Kerberos local authentication plugin sssdkrb5localauthplugin is enabled, but a fallback to the an2ln plugin is possible. This fallback allows an...
EUVD-2025-33347
A flaw was found in the integration of Active Directory and the System Security Services Daemon SSSD on Linux systems. In default configurations, SSSD does not enable the Kerberos local authentication plugin sssdkrb5localauthplugin, allowing an attacker with permission to modify certain AD...
Linux Distros Unpatched Vulnerability : CVE-2023-53550
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: cpufreq: amd-pstate: fix global sysfs attribute type In commit 3666062b87ec cpufreq:...
CVE-2023-53652 vdpa: Add features attr to vdpa_nl_policy for nlattr length check
In the Linux kernel, the following vulnerability has been resolved: vdpa: Add features attr to vdpanlpolicy for nlattr length check The vdpanlpolicy structure is used to validate the nlattr when parsing the incoming nlmsg. It will ensure the attribute being described produces a valid nlattr point...
CVE-2023-53631 platform/x86: dell-sysman: Fix reference leak
In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-sysman: Fix reference leak If a duplicate attribute is found using ksetfindobj, a reference to that attribute is returned. This means that we need to dispose it accordingly. Use kobjectput to dispose the...
EUVD-2020-26483
Malware in sbrugna...
EUVD-2008-5683
Malware in sbrugna...
EUVD-2007-3215
Malware in sbrugna...
EUVD-2008-0250
Malware in sbrugna...
EUVD-2010-3037
Malware in sbrugna...
EUVD-2017-0230
Malware in sbrugna...
EUVD-2009-2638
Malware in sbrugna...
EUVD-2015-5184
Malware in sbrugna...
EUVD-2007-5776
Malware in sbrugna...