CVE-2025-47588

CVE-2025-47588 affects the WordPress plugin Dynamic Pricing With Discount Rules for WooCommerce (aco-woo-dynamic-pricing) up to version 4.5.9. Description and connected sources indicate an Improper Control of Generation of Code leading to Code Injection and Arbitrary Code Execution. CVSSv3.1 base...

EUVD-2025-38025

Improper Control of Generation of Code 'Code Injection' vulnerability in acowebs Dynamic Pricing With Discount Rules for WooCommerce aco-woo-dynamic-pricing allows Code Injection.This issue affects Dynamic Pricing With Discount Rules for WooCommerce: from n/a through = 4.5.9...

CVE-2025-47588 WordPress Dynamic Pricing With Discount Rules for WooCommerce plugin <= 4.5.9 - Arbitrary Code Execution vulnerability

Improper Control of Generation of Code 'Code Injection' vulnerability in acowebs Dynamic Pricing With Discount Rules for WooCommerce aco-woo-dynamic-pricing allows Code Injection.This issue affects Dynamic Pricing With Discount Rules for WooCommerce: from n/a through = 4.5.9...

PT-2025-45196

Improper Control of Generation of Code 'Code Injection' vulnerability in acowebs Dynamic Pricing With Discount Rules for WooCommerce aco-woo-dynamic-pricing allows Code Injection.This issue affects Dynamic Pricing With Discount Rules for WooCommerce: from n/a through = 4.5.9...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990522)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990522 advisory. In the Linux kernel, the following vulnerability has been resolved: afs: Fix dynamic root getattr The recent patch to make afsgetattr consult the server didn't accou...

WordPress plugin Dynamic Pricing With Discount Rules for WooCommerce 代码注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A code injection...

WordPress Community Events plugin cross-site scripting vulnerability

WordPress Community Events plugin is an event management plugin for the WordPress platform that allows users to create and display event calendars with support for AJAX dynamic loading and event submission form functionality. WordPress Community Events plugin suffers from a cross-site scripting...

Hybrid Fuzzing with LLM-Guided Input Mutation and Semantic Feedback

Software fuzzing has become a cornerstone in automated vulnerability discovery, yet existing mutation strategies often lack semantic awareness, leading to redundant test cases and slow exploration of deep program states. In this work, I present a hybrid fuzzing framework that integrates static an...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989237)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989237 advisory. In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix use-after-free for dynamic ftraceops KASAN reported a use-after-free with ftrace ops ...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989382)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989382 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: Update intermediate power state for SI Update the current state as boot state during...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989962)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989962 advisory. In the Linux kernel, the following vulnerability has been resolved: tracing: Free buffers when a used dynamic event is removed After 65536 dynamic events have been...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988788)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988788 advisory. In the Linux kernel, the following vulnerability has been resolved: afs: Fix dynamic root getattr The recent patch to make afsgetattr consult the server didn't accou...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989787)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989787 advisory. In the Linux kernel, the following vulnerability has been resolved: firmware: armscpi: Fix string overflow in SCPI genpd driver Without the bound checks for...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990160)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990160 advisory. In the Linux kernel, the following vulnerability has been resolved: i3c: master: Fix miss free initdynaddr at i3cmasterputi3caddrs if dev-boardinfo &&...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989612)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989612 advisory. In the Linux kernel, the following vulnerability has been resolved: afs: Fix dynamic root getattr The recent patch to make afsgetattr consult the server didn't accou...

Use-After-Free

github.com/envoyproxy/envoy is vulnerable to a Use-After-Free. The vulnerability is due to improper handling of DNS cache operations in the Dynamic Forward Proxy implementation, where a completion callback can trigger new or remove existing DNS resolutions, which allows an attacker to cause...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: docker-credential-ecr-login, terraform-provider-random, aws-signer-notation-plugin, gops, cadvisor, cri-tools, gotestsum, newrelic-nri-statsd, yunikorn-k8shim, hello-world-golang, fq, flyte, petname, xcaddy, kubernetes-csi-driver-hostpath, ini-file, opentofu,...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: docker-credential-ecr-login, azure-ipam, kustomize, terraform-provider-random, kubernetes-csi-node-driver-registrar, kwok, jitsucom-bulker, sealed-secrets, pgpool2exporter, terraform-provider-azapi, aws-signer-notation-plugin, cert-manager-webhook-pdns, atlantis,...

CVE-2025-58185 vulnerabilities

Vulnerabilities for packages: docker-credential-ecr-login, azure-ipam, kustomize, terraform-provider-random, kubernetes-csi-node-driver-registrar, kwok, jitsucom-bulker, sealed-secrets, pgpool2exporter, terraform-provider-azapi, aws-signer-notation-plugin, cert-manager-webhook-pdns, atlantis,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: docker-credential-ecr-login, azure-ipam, kustomize, terraform-provider-random, kubernetes-csi-node-driver-registrar, kwok, jitsucom-bulker, sealed-secrets, pgpool2exporter, terraform-provider-azapi, aws-signer-notation-plugin, cert-manager-webhook-pdns, atlantis,...