CVE-2025-22602 Stored DOM-based XSS (without CSP) via video placeholders in Discourse

Discourse is an open source platform for community discussion. In affected versions an attacker can execute arbitrary JavaScript on users' browsers by posting a malicious video placeholder html element. This issue only affects sites with CSP disabled. This problem has been patched in the latest...

CVE-2024-49839

Memory corruption during management frame processing due to mismatch in T2LM info element...

CVE-2024-45569

Memory corruption while parsing the ML IE due to invalid frame content...

CVE-2024-45569

Memory corruption while parsing the ML IE due to invalid frame content...

CVE-2024-49839

CVE-2024-49839 - Summary (mode C) Root cause: Memory corruption during management frame processing caused by a mismatch in the T2LM information element, affecting Qualcomm WLAN/capability elements. What is affected: Qualcomm chipsets with WLAN functionality that process management frames incorpor...

PT-2025-2712 · Qualcomm · Qualcomm Snapdragon Auto

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon Auto affected versions not specified Description: Memory corruption occurs while parsing the ML IE due to invalid frame content. This issue could potentially be exploited for remote code execution. Recommendations: At the...

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates from an information disclosure when parsing an OCI IE of invalid length...

CVE-2024-49839: Buffer Over-read

Memory corruption during management frame processing due to mismatch in T2LM info element...

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from a mismatch in the T2LM information element that manages memory corruption during frame processing...

PT-2025-2869

Name of the Vulnerable Software and Affected Versions Qualcomm affected versions not specified Description The issue is related to memory corruption during management frame processing due to a mismatch in the T2LM info element. This corruption occurs during the processing of administration...

PT-2025-7651 · Git +1 · Libxml2

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a stack-buffer-overflow crash. Technical details about the crash include the xmlValidateElementContent, xmlValidateOneElement, an...

Prototype Pollution

Overview org.webjars.npm:canvg is a JavaScript SVG parser and renderer on Canvas. Affected versions of this package are vulnerable to Prototype Pollution in the StyleElement constructor. PoC js async = // Assuming import is set up properly import StyleElement from 'canvg'; // Output expected: "No...

Prototype Pollution

Overview org.webjars.bower:canvg is a JavaScript SVG parser and renderer on Canvas. Affected versions of this package are vulnerable to Prototype Pollution in the StyleElement constructor. PoC js async = // Assuming import is set up properly import StyleElement from 'canvg'; // Output expected: "...

UBUNTU-CVE-2024-57936

In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxtre: Fix max SGEs for the Work Request Gen P7 supports up to 13 SGEs for now. WQE software structure can hold only 6 now. Since the max send sge is reported as 13, the stack can give requests up to 13 SGEs. This is causin...

FlexNet Publisher OpenSSL Privilege Escalation

The vulnerability of the openssl.conf configuration file of the FlexNet Publisher licensing management software is related to an uncontrolled element in the search process. Exploiting this vulnerability allows a perpetrator to enhance their privileges and execute arbitrary code...

@wcd/gqio.angular-element-starter-kit (0.1.0), @wcd/gqio.angular-element-todo (0.1.0) potentially affected by unknown CVE via platform-browser-dynamic (0.0.1-security)

platform-browser-dynamic NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on platform-browser-dynamic and may be impacted: - @wcd/gqio.angular-element-starter-kit 0.1.0 - @wcd/gqio.angular-element-todo 0.1.0 Source cves: unknown...

@wcd/gqio.angular-element-starter-kit (0.1.0), @wcd/gqio.angular-element-todo (0.1.0) potentially affected by unknown CVE via platform-browser-dynamic (0.0.1-security)

platform-browser-dynamic NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on platform-browser-dynamic and may be impacted: - @wcd/gqio.angular-element-starter-kit 0.1.0 - @wcd/gqio.angular-element-todo 0.1.0 Source cves: unknown...

CVE-2025-21127: Uncontrolled Search Path Element

Photoshop Desktop versions 25.12, 26.1 and earlier are affected by an Uncontrolled Search Path Element vulnerability that could lead to arbitrary code execution. An attacker could manipulate the search path environment variable to point to a malicious library, resulting in the execution of...

SUSE CVE-2024-56664

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix race between element replace and close Element replace with a socket different from the one stored may race with socket's close link popping & unlinking. sockmapdelete unconditionally unrefs the wrong element: /...

CVE-2024-12851

The Element Pack Elementor Addons Header Footer, Template Library, Dynamic Grid, Carousel and Remote Arrows plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the customattributes parameter of the Cookie Consent Widget in all versions up to, and including, 5.10.14 due to...