WordPress Simple Documentation plugin <= 1.2.8 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by Abdi Pranata in WordPress Plugin Simple Documentation versions = 1.2.8...

[SECURITY] Fedora 41 Update: python3.14-3.14.0~a4-2.fc41

Python 3.14 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.14 package provides the "python3.14" executable:...

[SECURITY] Fedora 40 Update: python3.11-3.11.11-5.fc40

Python 3.11 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.11 package provides the "python3.11" executable:...

[SECURITY] Fedora 40 Update: python3.10-3.10.16-5.fc40

Python 3.10 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.10 package provides the "python3.10" executable:...

[SECURITY] Fedora 40 Update: python3.14-3.14.0~a4-2.fc40

Python 3.14 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.14 package provides the "python3.14" executable:...

CVE-2025-26578: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in mathieuhays Simple Documentation client-documentation allows Stored XSS.This issue affects Simple Documentation: from n/a through = 1.2.8...

PT-2025-7199

Name of the Vulnerable Software and Affected Versions: Simple Documentation versions 1.2.8 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web...

WordPress plugin Simple Documentation has a cross-site request forgeing vulnerability

WordPress and the WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: fpga: manager: Added a module owner pointer and used it to count the module’s references. The current implementation of the fpga manager assumes that the low-level module registers a driver for the parent device and uses its...

CVE-2025-0054

creationtimestamp| type| source ---|---|--- 2025-02-11 00:56:17+00:00| seen| https://infosec.exchange/users/cve/statuses/113982529605776530 2025-02-11 01:15:42+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhuic6c7se2i 2025-02-11 03:08:01+00:00| seen|...

ALSA-2025:1329 Moderate: doxygen security update

Doxygen can generate an online class browser in HTML and/or a reference manual in LaTeX from a set of documented source files. The documentation is extracted directly from the sources. Doxygen can also be configured to extract the code structure from undocumented source files. Security Fixes:...

[SECURITY] Fedora 41 Update: python3-docs-3.13.2-1.fc41

The python3-docs package contains documentation on the Python 3 programming language and interpreter...

Fedora 41 : python3-docs / python3.13 (2025-e911f71d99)

The remote Fedora 41 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2025-e911f71d99 advisory. Update to 3.13.2 ---- Statically build the datetime module into libpython. This fixes a segfault when importing it from Python 3.13.0 updated to 3.13.1+ whil...

OESA-2025-1097 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix potencial out-of-bounds when buffer offset is invalid I found potencial out-of-bounds when buffer offset fields of a few requests is invalid. This pat...

[SECURITY] Fedora 41 Update: python3.12-3.12.9-1.fc41

Python 3.12 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.12 package provides the "python3.12" executable:...

CVE-2025-25147

creationtimestamp| type| source ---|---|--- 2025-02-07 10:17:43+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhlepojmem2a 2025-02-07 12:08:45+00:00| seen| https://t.me/cvedetector/17483 2025-02-07 12:53:52+00:00| seen|...

CVE-2025-23419

creationtimestamp| type| source ---|---|--- 2025-02-05 17:55:07+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lhh5dqksd622 2025-02-05 18:16:59+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhh6ktldeu2i 2025-02-05 18:22:28+00:00| seen|...

CVE-2025-22846

creationtimestamp| type| source ---|---|--- 2025-02-05 17:52:27+00:00| seen| https://infosec.exchange/users/cve/statuses/113952551524178942 2025-02-05 18:16:43+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhh6keqjwo2t 2025-02-05 21:40:03+00:00| seen|...

CVE-2024-1624

An OS Command Injection vulnerability affecting documentation server on 3DEXPERIENCE from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x, SIMULIA Abaqus from Release 2022 through Release 2024, SIMULIA Isight from Release 2022 through Release 2024 and CATIA Composer from Release...

CVE-2023-39943

creationtimestamp| type| source ---|---|--- 2025-02-04 22:27:17+00:00| seen| https://infosec.exchange/users/cve/statuses/113947969898021530 2025-02-04 23:15:37+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhf6rw6zjj2e 2025-02-05 02:23:53+00:00| seen|...