CVE-2025-12674

The KiotViet Sync plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the createmedia function in all versions up to, and including, 1.8.5. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server...

A Bootiful Podcast: The Vaadin team, live from Vaadin Create 2025

Hi, Spring fans! In this installment, I had the privilege to sit down with Vaadin legends Joonas Lehtinen, Marcus Hellberg, and Leif Åstrand at the amazing Vaadin Create 2025 event in Frankfurt, Germany...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990406)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990406 advisory. In the Linux kernel, the following vulnerability has been resolved: tracing: Fix potential double free in createvarref In createvarref, initvarref is called to...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990488)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990488 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: Fix overflow before widen in the bitmapipcreate function. When firstip is 0,...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990386)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990386 advisory. In the Linux kernel, the following vulnerability has been resolved: traceeventshist: add check for return value of 'createhistfield' Function 'createhistfield' is...

GO-2025-4021 Omni is Vulnerable to DoS via Empty Create/Update Resource Requests in github.com/siderolabs/omni

Omni is Vulnerable to DoS via Empty Create/Update Resource Requests in github.com/siderolabs/omni...

CVE-2025-12676

CVE-2025-12676 concerns KiotViet Sync for WordPress (versions up to 1.8.5). According to multiple sources, the root cause is a hard-coded password used for authentication inside QueryControllerAdmin::authenticated, enabling unauthenticated attackers to create and sync products. Public details con...

CVE-2025-12674 KiotViet Sync <= 1.8.5 - Unauthenticated Arbitrary File Upload

The KiotViet Sync plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the createmedia function in all versions up to, and including, 1.8.5. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server...

Unity Linux 20.1050e Security Update: kernel (UTSA-2025-989922)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989922 advisory. In the Linux kernel, the following vulnerability has been resolved: net: tipc: fix possible refcount leak in tipcskcreate Free sk in case tipcskinsert fails. Tenable...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988877)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988877 advisory. In the Linux kernel, the following vulnerability has been resolved: ceph: properly put cephstring reference after async create attempt The reference acquired by...

The vulnerability of the page_pool_create() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the pagepoolcreate function in the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

WordPress plugin Document Embedder – Embed PDFs Word Excel and Other Files 安全漏洞

WordPress and the WordPress plugin are products of the WordPress Foundation, a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. WordPress plugin Document Embedder -...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988724)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988724 advisory. In the Linux kernel, the following vulnerability has been resolved: ubi: ubicreatevolume: Fix use-after-free when volume creation failed There is an use-after-free...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989436)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989436 advisory. In the Linux kernel, the following vulnerability has been resolved: net: tipc: fix possible refcount leak in tipcskcreate Free sk in case tipcskinsert fails. Tenable...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990348)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990348 advisory. In the Linux kernel, the following vulnerability has been resolved: net: inet: do not leave a dangling sk pointer in inetcreate sockinitdata attaches the allocated s...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-989695)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989695 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: Fix overflow before widen in the bitmapipcreate function. When firstip is 0,...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990128)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990128 advisory. In the Linux kernel, the following vulnerability has been resolved: afpacket: avoid erroring out after sockinitdata in packetcreate After sockinitdata the allocated ...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989136)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989136 advisory. In the Linux kernel, the following vulnerability has been resolved: xprtrdma: fix pointer derefs in error cases of rpcrdmaepcreate If there are failures then we must...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989807)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989807 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: libfc: Fix potential NULL pointer dereference in fclportptpsetup fclportptpsetup did not...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989852)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989852 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Suppress a kernel complaint in qlacreateqpair 12.323788 BUG: using smpprocessorid ...