4 matches found
CVE-2025-10745
The Banhammer – Monitor Site Traffic, Block Bad Users and Bots plugin for WordPress is vulnerable to Blocking Bypass in all versions up to, and including, 3.4.8. This is due to a site-wide “secret key” being deterministically generated from a constant character set using md5 and base64encode and...
CVE-2025-37978
CVE-2025-37978 : In the Linux kernel, a patch resolves an issue in block integrity handling where placing multiple protection information buffers in the same page could cause kernel oopses because set_page_dirty_lock() cannot be called from interrupt context. The fix drops the set_page_dirty_lock...
Design/Logic Flaw
When protecting CSS blocks with the nonce feature of Content Security Policy, the @import statement in the CSS block could allow an attacker to inject arbitrary styles, bypassing the intent of the Content Security Policy. This vulnerability affects Firefox 74...
