WordPress Sticky Side Buttons plugin < 2.0.0 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Sayandeep Dutta in WordPress Plugin Sticky Side Buttons versions 2.0.0...

CVE-2025-52547

The CVE-2025-52547 issue affects the E3 Site Supervisor Control MGW, specifically firmware versions prior to 2.31F01. The root cause is an API call that lacks input validation, which can be abused by an attacker to cause continuous DoS and crash application services. Multiple sources corroborate ...

Drupal Protected Pages module < 1.8.0 - Unauthenticated Broken Access Control vulnerability

Unauthenticated Broken Access Control vulnerability discovered by Pierre Rudloff prudloff in WordPress Module Protected Pages versions 1.8.0...

CVE-2025-53857

Mattermost Confluence Plugin version 1.5.0 fails to check the access of the user to the channel which allows attackers to get channel subscription details without proper access to the channel via API call to the GET autocomplete/GetChannelSubscriptions endpoint...

Mattermost Confluence Plugin has Improper Check for Unusual or Exceptional Conditions

Mattermost Confluence Plugin versions 1.5.0 fails to handle unexpected request bodies, allowing attackers to crash the plugin via constant hits to the update channel subscription endpoint with an invalid request body...

GHSA-W92J-C6GR-HJ8R Mattermost Confluence Plugin has Improper Check for Unusual or Exceptional Conditions

Mattermost Confluence Plugin versions 1.5.0 fail to handle unexpected request bodies, allow\ing attackers to crash the plugin via constant hits to the server webhook endpoint with an invalid request body...

CVE-2025-49221

The CVE-2025-49221 issue affects Mattermost Confluence Plugin versions

Linux Distros Unpatched Vulnerability : CVE-2023-29539

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When handling the filename directive in the Content-Disposition header, the filename would be truncated if the filename contained a NULL character. This could...

CVE-2025-38436 affecting package kernel for versions less than 6.6.96.1-1

CVE-2025-38436 affecting package kernel for versions less than 6.6.96.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-38345 affecting package kernel for versions less than 6.6.96.1-1

CVE-2025-38345 affecting package kernel for versions less than 6.6.96.1-1. A patched version of the package is available...

CVE-2025-38260 affecting package kernel for versions less than 6.6.96.1-1

CVE-2025-38260 affecting package kernel for versions less than 6.6.96.1-1. A patched version of the package is available...

CVE-2025-38191 affecting package kernel for versions less than 6.6.96.1-1

CVE-2025-38191 affecting package kernel for versions less than 6.6.96.1-1. A patched version of the package is available...

CVE-2025-38163 affecting package kernel for versions less than 6.6.96.1-1

CVE-2025-38163 affecting package kernel for versions less than 6.6.96.1-1. A patched version of the package is available...

CVE-2025-38061 affecting package kernel for versions less than 6.6.96.1-1

CVE-2025-38061 affecting package kernel for versions less than 6.6.96.1-1. A patched version of the package is available...

CVE-2025-54446

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Samsung Electronics MagicINFO 9 Server allows Upload a Web Shell to a Web Server.This issue affects MagicINFO 9 Server: less than 21.1080.0...

CVE-2025-54447

Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects MagicINFO 9 Server: less than 21.1080.0...

DEBIAN-CVE-2025-8010

Type Confusion in V8 in Google Chrome prior to 138.0.7204.168 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

Exploit for Incorrect Permission Assignment for Critical Resource in Facebook Below

Below - Local Privilege Escalation CVE-2025-27591 B...

WordPress Traveler theme < 3.2.2 - SQL Injection Vulnerability

SQL Injection Vulnerability discovered by Ann Patchstack Alliance in WordPress Theme Traveler versions 3.2.2...

AZL-65565 CVE-2025-53605 affecting package rust for versions less than 1.75.0-17

The protobuf crate before 3.7.2 for Rust allows uncontrolled recursion in the protobuf::codedinputstream::CodedInputStream::skipgroup parsing of unknown fields in untrusted input...