CVE-2025-11886

The CTL Arcade Lite plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing or incorrect nonce validation on the 'ctlarcadelitepagemanagegames' page. This makes it possible for unauthenticated attackers to deactivate and...

CVE-2025-11886 CTL Arcade Lite <= 1.0 - Cross-Site Request Forgery to Plugin Activation and Deactivation

The CTL Arcade Lite plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing or incorrect nonce validation on the 'ctlarcadelitepagemanagegames' page. This makes it possible for unauthenticated attackers to deactivate and...

CVE-2025-11886

The CTL Arcade Lite WordPress plugin is affected by CVE-2025-11886 due to a Cross-Site Request Forgery vulnerability. All versions up to 1.0 lack proper nonce validation on the ctl_arcade_lite_page_manage_games page, allowing unauthenticated attackers to deactivate or activate arbitrary plugins b...

PT-2025-46263

Name of the Vulnerable Software and Affected Versions CTL Arcade Lite plugin for WordPress versions prior to 1.1 Description The software is susceptible to Cross-Site Request Forgery CSRF due to missing or incorrect nonce validation on the 'ctl arcade lite page manage games' page. This allows...

EUVD-2025-34558

The WPBifröst – Instant Passwordless Temporary Login Links plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the ctlcreatelink AJAX action in all versions up to, and including, 1.0.7. This makes it possible for authenticated attackers, with...

CVE-2023-53603 scsi: qla2xxx: Avoid fcport pointer dereference

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Avoid fcport pointer dereference Klocwork reported warning of NULL pointer may be dereferenced. The routine exits when sactl is NULL and fcport is allocated after the exit call thus causing NULL fcport pointer to...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: rancher-machine, git-lfs, hivemind, grafana-operator, confluent-common-docker, checksec, secrets-store-csi-driver-provider-aws, kube-vip-cloud-provider, pvc-autoresizer, terraform-provider-time, blobfuse2, kubeflow-katib, vault-k8s, vexctl, kserve-rest-proxy,...

CVE-2025-27234

The CVE-2025-27234 entry describes a vulnerability in the Zabbix Agent 2 smartctl plugin where improper sanitization of smart.disk.get parameters allows an attacker to inject arguments into smartctl, leading to remote code execution in Zabbix 5.0. Connected sources (Debian DLA-4473-1, Debian/Ness...

kernel: s390/ptrace: handle setting of fpc register correctly

In the Linux kernel, the following vulnerability has been resolved: s390/ptrace: handle setting of fpc register correctly If the content of the floating point control fpc register of a traced process is modified with the ptrace interface the new value is tested for validity by temporarily loading...

SUSE CVE-2025-38629

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb: scarlett2: Fix missing NULL check scarlett2inputselectctlinfo sets up the string arrays allocated via kasprintf, but it misses NULL checks, which may lead to NULL dereference Oops. Let's add the proper NULL check...

CVE-2005-4841

The Outlook Progress Ctl control allows remote attackers to cause a denial of service Internet Explorer crash by creating a COM object of the class associated with the control's CLSID, which is not intended for use within Internet Explorer...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an improperly narrowed conversion in acpinfitctl, which could lead to invalid parameter passing...

SUSE CVE-2024-56662

In the Linux kernel, the following vulnerability has been resolved: acpi: nfit: vmalloc-out-of-bounds Read in acpinfitctl Fix an issue detected by syzbot with KASAN: BUG: KASAN: vmalloc-out-of-bounds in cmdtofunc drivers/acpi/nfit/ core.c:416 inline BUG: KASAN: vmalloc-out-of-bounds in...

AZL-54914 CVE-2024-56662 affecting package kernel for versions less than 6.6.76.1-1

In the Linux kernel, the following vulnerability has been resolved: acpi: nfit: vmalloc-out-of-bounds Read in acpinfitctl Fix an issue detected by syzbot with KASAN: BUG: KASAN: vmalloc-out-of-bounds in cmdtofunc drivers/acpi/nfit/ core.c:416 inline BUG: KASAN: vmalloc-out-of-bounds in...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates from an out-of-bounds read of vmalloc in the acpinfitctl function in the acpi:nfit module...

meltano (>=2.16.0 <=3.6.0b4), nmdc-schema (>=0.0.0 <=7.4.12) +2 more potentially affected by CVE-2024-53848 via check-jsonschema (>=0.21.0 <=0.29.4)

check-jsonschema PYPI version =0.21.0, =2.16.0, =0.0.0, =0.3.0, =0.3.0, =0.4.1 Source cves: CVE-2024-53848 Source advisory: OSV:GHSA-Q6MV-284R-MP36...

meltano (>=2.16.0 <=3.6.0b4), nmdc-schema (>=0.0.0 <=7.4.12) +2 more potentially affected by CVE-2024-53848 via check-jsonschema (>=0.19.2 <=0.29.4)

check-jsonschema PYPI version =0.19.2, =2.16.0, =0.0.0, =0.3.0, =0.3.0, =0.4.1 Source cves: CVE-2024-53848 Source advisory: SNYK:PYTHON-CHECKJSONSCHEMA-8445277...

The vulnerability of the ctl_write_buffer() function in the ctl subsystem of the FreeBSD operating system allows a hacker to execute arbitrary code.

The vulnerability of the ctlwritebuffer function in the ctl subsystem of the FreeBSD operating system is related to the use of memory after it is freed due to incorrect flag setting. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the ctl_request_sense() function in the ctl subsystem of FreeBSD allows a hacker to execute arbitrary code.

The vulnerability of the ctlrequestsense function in the ctl subsystem of FreeBSD lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code...

CVE-2024-45289

CVE-2024-45289 affects FreeBSD: the fetch(3) library uses environment variables to pass info, including the revocation file pathname, but the fetch(1) option name was incorrect and effectively ignored the option. As a result, FreeBSD could connect to a host presenting a certificate listed in the ...