RHEL 9 : kernel (RHSA-2025:16880)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:16880 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: netfilter: nfconntrack: fix...

KitHack

This is a collection of tools and scripts for the KitHack framework, a penetration testing tool. The repository includes a Python script, clean.sh, which is used to clean up the tools directory. The script checks if the user has root permissions and, if so, removes any tools that are not empty. T...

SUSE-SU-2025:03411-1 Security update for the Linux Kernel (Live Patch 13 for SLE 15 SP6)

This update for the Linux Kernel 6.4.0-1506002360 fixes several issues. The following security issues were fixed: - CVE-2025-38498: dochangetype: refuse to operate on unmounted/not ours mounts bsc1247499. - CVE-2025-38555: usb: gadget : fix use-after-free in compositedevcleanup bsc1248298...

Cisco IOS XE Software Cross-Site Scripting Vulnerability

Cisco IOS XE Software is a network operating system from the American company Cisco Cisco. A cross-site scripting vulnerability exists in Cisco IOS XE Software that originates from improper user input cleanup and can be exploited by an attacker to cause a reflective cross-site scripting attack...

The vulnerability in the `net/sched/sch_hfsc.c` component of the Linux operating system allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the net/sched/schhfsc.c component in the Linux operating system is related to incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

SUSE-SU-2025:03392-1 Security update for the Linux Kernel (Live Patch 43 for SLE 15 SP4)

This update for the Linux Kernel 5.14.21-15040024173 fixes several issues. The following security issues were fixed: - CVE-2025-38498: dochangetype: refuse to operate on unmounted/not ours mounts bsc1247499. - CVE-2025-38555: usb: gadget : fix use-after-free in compositedevcleanup bsc1248298...

The vulnerability of the arm_ni_init() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the armniinit function in the Linux operating system is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

OESA-2025-2352 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Fix 1-byte out-of-bounds read in uvcparseformat The buffer length check before calling uvcparseformat only ensured that the buffer has at least ...

SUSE-SU-2025:03367-1 Security update for jasper

This update for jasper fixes the following issues: - CVE-2025-8835: missing range check in the JPEG-2000 JPC Encoder leads to assertion failure and crash when processing a malformed JPEG2000 image with an invalid cblkwidth parameter bsc1247904. - CVE-2025-8836: out-of-bounds array indexing in...

WordPress plugin CM Business Directory 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

WordPress plugin Popup Maker 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

CLSA-2025-1758825546 gimp: Fix of CVE-2025-48798

CVE-2025-48798: fix XCF loader use-after-free issues by properly managing layer/channel resources and ensuring safe cleanup during parsing...

MAL-2025-47551 Malicious code in data-transaction-generates (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 007c6f3c1b4528d72b7c0ea38288fa1c87cecad48705e88597388b3b7353ef14 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47571 Malicious code in x402_monorepo (npm)

The package x402monorepo was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 289e2c6110a91f2ee16f7a0beed85851e59612748773355b6bb90a5b7073ad16 Any computer that has this package installed or running should be considered fully...

PT-2025-49442

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.10.134-010.a1i5000.a18.x86 64 Description The Linux kernel contains a race condition within the amdgpu amdkfd device fini sw function and interrupt handling. This condition can occur if amdgpu amdkfd device fin...

Vulnerability-Lookup 跨站脚本漏洞

Vulnerability-Lookup is an open source Vulnerability-Lookup platform for managing disclosure of vulnerabilities. A cross-site scripting vulnerability exists in Vulnerability-Lookup version 2.16.0 that stems from insufficient cleanup of user input and could lead to a cross-site scripting attack...

Cisco IOS XE Software for Catalyst 9800 Series Wireless Controller for Cloud Unauthenticated Access to Certificate Enrollment Service Vulnerability

A vulnerability in the Day One setup process of Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers for Cloud 9800-CL could allow an unauthenticated, remote attacker to access the public-key infrastructure PKI server that is running on an affected device. This vulnerability is due...

Horilla 代码问题漏洞

Horilla is a free and open source human resources software from Horilla, Inc. A code issue vulnerability exists in Horilla versions prior to 1.4.0 that stems from improper cleanup in the application, which could lead to a cross-site scripting attack that could lead to an administrator account...

Cisco IOS XE Software 安全漏洞

Cisco IOS XE Software is a network operating system from the American company Cisco Cisco. A cross-site scripting vulnerability exists in Cisco IOS XE Software that originates from improper user input cleanup and can be exploited by an attacker to cause a reflective cross-site scripting attack...

WordPress plugin Themify Builder 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin... A cross-site scripti...