WordPress plugin Bulk Auto Image Title Attribute 安全漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin.... A security...

Siemens SIMATIC Devices Out-of-bounds Read (CVE-2025-21647)

In the Linux kernel, the following vulnerability has been resolved: sched: schcake: add bounds checks to host bulk flow fairness counts This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc...

Over 100 Chrome extensions break WhatsApp’s anti-spam rules

Recent research by Socket’s Threat Research Team uncovered a massive, coordinated campaign flooding the Chrome Web Store with 131 spamware extensions. These add-ons hijack WhatsApp Web—the browser version of WhatsApp—to automate bulk messages and skirt anti-spam controls. Spamware is software tha...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-987696)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987696 advisory. In the Linux kernel, the following vulnerability has been resolved: net/usb: kalmia: Don't pass actlen in usbbulkmsg error path syzbot reported that actlen in...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987578)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987578 advisory. In the Linux kernel, the following vulnerability has been resolved: comedi: vmk80xx: fix bulk-buffer overflow The driver is using endpoint-sized buffers but must not...

CVE-2025-57564

CubeAPM nightly-2025-08-01-1 allow unauthenticated attackers to inject arbitrary log entries into production systems via the /api/logs/insert/elasticsearch/bulk endpoint. This endpoint accepts bulk log data without requiring authentication or input validation, allowing remote attackers to perform...

CVE-2025-57564

CubeAPM nightly-2025-08-01-1 allow unauthenticated attackers to inject arbitrary log entries into production systems via the /api/logs/insert/elasticsearch/bulk endpoint. This endpoint accepts bulk log data without requiring authentication or input validation, allowing remote attackers to perform...

EUVD-2017-2438

Malware in sbrugna...

EUVD-2021-19533

Malware in sbrugna...

EUVD-2021-11661

Malware in sbrugna...

EUVD-2019-5547

Malware in sbrugna...

EUVD-2019-6735

Malware in sbrugna...

EUVD-2002-0626

Malware in sbrugna...

EUVD-2011-3337

Malware in sbrugna...

EUVD-2018-9141

Malware in sbrugna...

EUVD-2020-6188

Malware in sbrugna...

EUVD-2009-0579

Malware in sbrugna...

EUVD-2018-14746

Malware in sbrugna...

EUVD-2021-14524

Malware in sbrugna...

CVE-2025-57564

CubeAPM nightly-2025-08-01-1 allow unauthenticated attackers to inject arbitrary log entries into production systems via the /api/logs/insert/elasticsearch/bulk endpoint. This endpoint accepts bulk log data without requiring authentication or input validation, allowing remote attackers to perform...