2137 matches found
CVE-2025-40213 Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: fix crash in setmeshsync and setmeshcomplete There is a BUG: KASAN: stack-out-of-bounds in setmeshsync due to memcpy from badly declared on-stack flexible array. Another crash is in setmeshcomplete due to double...
SharePoint or OneDrive Backup fails with 'Cannot complete this action'
This article has been updated to document the July 20, 2026, occurrence of this issue. Information regarding the February 2026 occurrence can be found in the More Information section at the very bottom of this article. Challenge A backup attempt for SharePoint Online and OneDrive objects may fail...
CVE-2025-13484
A vulnerability was identified in Campcodes Complete Online Beauty Parlor Management System 1.0. This vulnerability affects unknown code of the file /admin/customer-list.php. The manipulation of the argument Name leads to cross site scripting. The attack may be initiated remotely. The exploit is...
CVE-2025-13484: Improper Neutralization of Input During Web Page Generation
A vulnerability was identified in Campcodes Complete Online Beauty Parlor Management System 1.0. This vulnerability affects unknown code of the file /admin/customer-list.php. The manipulation of the argument Name leads to cross site scripting. The attack may be initiated remotely. The exploit is...
PT-2025-47640
Name of the Vulnerable Software and Affected Versions Campcodes Complete Online Beauty Parlor Management System version 1.0 Description A cross site scripting issue exists in Campcodes Complete Online Beauty Parlor Management System 1.0. The issue is located in the file /admin/customer-list.php...
CVE-2025-63207: Improper Authentication
The R.V.R Elettronica TEX product firmware TEXL-000400, Web GUI TLAN-000400 is vulnerable to broken access control due to improper authentication checks on the /Passwd.html endpoint. An attacker can send an unauthenticated POST request to change the Admin, Operator, and User passwords, resulting ...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990882)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990882 advisory. In the Linux kernel, the following vulnerability has been resolved: genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline The absence of IRQDMOVEPCNT...
Gladinet Triofox Improper Access Control Vulnerability
Gladinet Triofox contains an improper access control vulnerability that allows access to initial setup pages even after setup is complete...
Malicious code in complete_beetle_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45b793377f05bc4aff1944b1c97b6f761ecabda187916c2b0f112234cec0a9c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-92688
Malicious code in completespoonbillz3n npm...
Malicious code in complete_lemur_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8e58133dd7e41c49f311a0162e52898d29daf70de4fc515a37a15655d23026e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-92689
Malicious code in completelemurz3n npm...
MAL-2025-100766 Malicious code in complete_earwig_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dd1f55f2a9f5271cbde624716d64514c54ac6420bbec5041bddff53d226728e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-79579
Malicious code in completezebraz3n npm...
EUVD-2025-60935
The Preload Current Images plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'complete' parameter in the 'preloadprogressbar' shortcode in all versions up to, and including, 1.3. This is due to insufficient input sanitization and output escaping on user supplied attributes...
CVE-2025-12658
The Preload Current Images plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'complete' parameter in the 'preloadprogressbar' shortcode in all versions up to, and including, 1.3. This is due to insufficient input sanitization and output escaping on user supplied attributes...
CVE-2025-12658 Preload Current Images <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
The Preload Current Images plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'complete' parameter in the 'preloadprogressbar' shortcode in all versions up to, and including, 1.3. This is due to insufficient input sanitization and output escaping on user supplied attributes...
CVE-2025-12658
CVE-2025-12658 affects the WordPress plugin Preload Current Images (versions up to 1.3). The vulnerability is a Stored Cross‑Site Scripting (XSS) via the complete parameter in the preload_progress_bar shortcode, caused by insufficient input sanitization and output escaping of user-supplied attrib...