WordPress Image Gallery block – Create and display photo gallery/photo album. plugin <= 1.0.7 - Broken Authentication vulnerability

Broken Authentication vulnerability discovered by Denver Jackson in WordPress Plugin Image Gallery block – Create and display photo gallery/photo album. versions = 1.0.7...

WordPress Parallax Section block plugin <= 1.0.9 - Broken Authentication vulnerability

Broken Authentication vulnerability discovered by Denver Jackson in WordPress Plugin Parallax Section block versions = 1.0.9...

CVE-2024-45753

In Mahara 23.04.8 and 24.04.4, the external RSS feed block can cause XSS if the external feed XML has a malicious value for the link attribute...

CVE-2024-45753

In Mahara 23.04.8 and 24.04.4, the external RSS feed block can cause XSS if the external feed XML has a malicious value for the link attribute...

The vulnerability of the ext4_get_first_dir_block() function in the fs/ext4/namei.c module of the Ext4 file system support module for Linux’s kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ext4getfirstdirblock function in the fs/ext4/namei.c module of the Ext4 file system support in Linux’s operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

Linux Distros Unpatched Vulnerability : CVE-2022-26495

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In nbd-server in nbd before 3.24, there is an integer overflow with a resultant heap-based buffer overflow. A value of 0xffffffff in the name length field will...

Linux Distros Unpatched Vulnerability : CVE-2025-30355

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Synapse is an open source Matrix homeserver implementation. A malicious server can craft events which, when received, prevent Synapse version up to 1.127.0 from...

CVE-2024-45753

In Mahara 23.04.8 and 24.04.4, the external RSS feed block can cause XSS if the external feed XML has a malicious value for the link attribute...

August 26, 2025—KB5063842 (OS Build 19045.6282) Preview

None None...

CVE-2024-45753: Improper Neutralization of Input During Web Page Generation

In Mahara 23.04.8 and 24.04.4, the external RSS feed block can cause XSS if the external feed XML has a malicious value for the link attribute...

PT-2025-46600

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to the handling of hardware queue contexts within the block I/O management framework blk-mq. Specifically, the code does not verify the success ...

The vulnerability of the bfq_bio_merge() function in the block/bfq-iosched.c module exposes the block-level kernel support of the Linux operating system, allowing attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the bfqbiomerge function in the block/bfq-iosched.c module relates to the reutilization of previously released memory in Linux’s kernel-level block storage mechanism. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

CVE-2024-45753

In Mahara 23.04.8 and 24.04.4, the external RSS feed block can cause XSS if the external feed XML has a malicious value for the link attribute...

CVE-2024-45753

The Mahara ePortfolio management system versions 23.04.8 and 24.04.4 are vulnerable to Cross-Site Scripting (XSS) . The root cause is the improper neutralization of input during web page generation within the external RSS feed block , which can be triggered if an external feed XML contains a mali...

MAL-2025-41857 Malicious code in @espace-client-axafr/file-upload-block (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in @espace-client-axafr/file-upload-block (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-41840 Malicious code in @espace-client-axafr/block-advisor (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in @espace-client-axafr/block-advisor (npm)

The package communicates with a domain associated with malicious activity...

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes. The following security bugs were fixed: CVE-2019-11135: TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may CVE-2024-36028: mm/hugetlb: fix DEBUGLOCKSWARNON1 when...

CLSA-2025-1756110212 krb5: Fix of 2 CVEs

CVE-2025-3576: prevent spoofing vulnerability in GSSAPI-protected messages using RC4-HMAC-MD5 due to weaknesses in MD5 checksum design - CVE-2025-24528: prevent overflow when calculating ulog block size...