CVE-2025-38379 affecting package kernel for versions less than 6.6.104.2-1

CVE-2025-38379 affecting package kernel for versions less than 6.6.104.2-1. An upgraded version of the package is available that resolves this issue...

Security Bulletin:IBM Event Streams is vulnerable to HTTP Parameter Pollution (HPP) attack (CVE-2025-7783).

Summary IBM Event Streams is vulnerable to an HTTP Parameter Pollution HPP attack due to the use of random values in the form-data module. This vulnerability affects how data from HTML forms is processed, particularly during form submission or when interacting with event listeners tied to form...

CVE-2025-10946

A vulnerability was detected in nuz007 smsboom up to 01b2f35bbbc23f3e0f60f38ca0e3d1b286f8d674. The affected element is an unknown function of the file dy.php. Performing manipulation of the argument hm results in cross site scripting. Remote exploitation of the attack is possible. This product...

SUSE CVE-2023-53165

In the Linux kernel, the following vulnerability has been resolved: udf: Fix uninitialized array access for some pathnames For filenames that begin with . and are between 2 and 5 characters long, UDF charset conversion code would read uninitialized memory in the output buffer. The only practical...

CVE-2025-10945 nuz007 smsboom d.php cross site scripting

A security vulnerability has been detected in nuz007 smsboom up to 01b2f35bbbc23f3e0f60f38ca0e3d1b286f8d674. Impacted is an unknown function of the file d.php. Such manipulation of the argument hm leads to cross site scripting. The attack may be launched remotely. This product operates on a rolli...

PT-2025-39388

Name of the Vulnerable Software and Affected Versions Telerik UI library versions prior to 2025.3.1 Node.js affected versions not specified Description A critical issue exists in Telerik UI library and Node.js event emitters. The Telerik UI library is currently under active exploitation, with mas...

Exploit for Link Following in Git

💥 CVE-2024-32002 – Git Submodule Path Injection PoC 🧠 Visã...

CVE-2025-10823

A vulnerability was found in axboe fio up to 3.41. This affects the function strbufferpatterncb of the file options.c. Performing manipulation results in null pointer dereference. The attack must be initiated from a local position. The exploit has been made public and could be used...

WordPress E-namad & Shamed Logo Manager Plugin <= 2.2 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Bao BlueRock in WordPress Plugin E-namad & Shamed Logo Manager versions = 2.2...

CVE-2025-57978

CVE-2025-57978 details are not provided in the connected documents. The Initial Description notes a CSRF vulnerability in Advanced Appointment Booking & Scheduling (up to version 1.9), but there are no concrete technical specifics or remediation steps in the supplied materials.

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: lvm-driver, secrets-store-csi-driver-provider-aws, git-lfs, octo-sts, vault-k8s, docker-credential-ecr-login, blobfuse2, vexctl, pvc-autoresizer, sftpgo-plugin-pubsub, gitsign, checksec, cloud-provider-aws, kserve-rest-proxy, rancher-machine, bank-vaults,...

BIT-GOLANG-2025-47906 Unexpected paths returned from LookPath in os/exec

If the PATH environment variable contains paths which are executables rather than just directories, passing certain strings to LookPath "", ".", and "..", can result in the binaries listed in the PATH being unexpectedly returned...

CVE-2025-10642

A vulnerability has been found in wangchenyi1996 chatforum up to 80bdb92f5b460d36cab36e530a2c618acef5afd2. This impacts an unknown function of the file /q.php. Such manipulation of the argument path leads to cross site scripting. The attack may be launched remotely. This product operates on a...

DEBIAN-CVE-2025-47906

If the PATH environment variable contains paths which are executables rather than just directories, passing certain strings to LookPath "", ".", and "..", can result in the binaries listed in the PATH being unexpectedly returned...

CVE-2025-47906

The os/exec package in the Go programming language is vulnerable to a flaw where the LookPath function may return unexpected binaries. If the PATH environment variable contains paths to executables instead of directories, providing specific strings like "", ".", or ".." can result in the return o...

Use of Incorrectly-Resolved Name or Reference

Overview std/os/exec is a Go standard library package std/os/exec Affected versions of this package are vulnerable to Use of Incorrectly-Resolved Name or Reference. Go Vulnerability Report: If the PATH environment variable contains paths which are executables rather than just directories, passing...

CVE-2025-10642

The CVE-2025-10642 entry concerns wangchenyi1996 chat_forum. The vulnerability is due to manipulation of the path argument in the /q.php file, which can lead to cross-site scripting (XSS). The affected software is described as a chat_forum implementation (owner specifies wangchenyi1996 chat_forum...

mysql: InnoDB unspecified vulnerability (CPU Jul 2025)

Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...

Linux Distros Unpatched Vulnerability : CVE-2023-53165

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - udf: Fix uninitialized array access for some pathnames For filenames that begin with . and are between 2 and 5 characters long, UDF charset conversion code woul...

CVE-2022-50320

In the Linux kernel, the following vulnerability has been resolved: ACPI: tables: FPDT: Don't call acpiosmapmemory on invalid phys address On a Packard Bell Dot SC Intel Atom N2600 model there is a FPDT table which contains invalid physical addresses, with high bits set which fall outside the ran...