CVE-2025-23756 WordPress LawPress plugin <= 1.4.5 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ivanchernyakov LawPress – Law Firm Website Management lawpress allows Reflected XSS.This issue affects LawPress – Law Firm Website Management: from n/a through = 1.4.5...

PT-2025-22205

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the wifi component, specifically the ath12k driver. In the function ath12k dp mon srng process, an incorrect function ath12k hal srng src get next entry is used t...

CVE-2024-35111

creationtimestamp| type| source ---|---|--- 2025-01-25 13:35:57+00:00| seen| https://infosec.exchange/users/cve/statuses/113889257478861428 2025-01-25 14:05:21+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3083 2025-01-25 17:06:22+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3104...

CVE-2025-24704

creationtimestamp| type| source ---|---|--- 2025-01-24 21:47:07+00:00| seen| https://infosec.exchange/users/cve/statuses/113885526576461511...

CVE-2025-24644

creationtimestamp| type| source ---|---|--- 2025-01-24 19:47:00+00:00| seen| https://infosec.exchange/users/cve/statuses/113885054196668289...

SUSE CVE-2024-57940

In the Linux kernel, the following vulnerability has been resolved: exfat: fix the infinite loop in exfatreaddir If the file system is corrupted so that a cluster is linked to itself in the cluster chain, and there is an unused directory entry in the cluster, 'dentry' will not be incremented,...

SUSE CVE-2025-0377

HashiCorp's go-slug library is vulnerable to a zip-slip style attack when a non-existing user-provided path is extracted from the tar entry...

SUSE CVE-2025-21662

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix variable not being completed when function returns When cmdallocindex, fails cmdworkhandler needs to complete ent-slotted before returning early. Otherwise the task which issued the command may hang: mlx5core...

CVE-2023-37019

Open5GS MME versions = 2.6.4 contains an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker may send an S1Setup Request message missing a required Supported TAs field to repeatedly crash the MME, resulting in denial of service...

HashiCorp go-slug Vulnerable to Zip Slip Attack

Summary HashiCorp’s go-slug library is vulnerable to a zip-slip style attack when a non-existing user-provided path is extracted from the tar entry. This vulnerability, identified as CVE-2025-0377, is fixed in go-slug 0.16.3. Background HashiCorp’s go-slug shared library offers functions for...

CVE-2025-0377

HashiCorp’s go-slug library is vulnerable to a zip-slip style attack when a non-existing user-provided path is extracted from the tar entry...

DEBIAN-CVE-2025-21662

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix variable not being completed when function returns When cmdallocindex, fails cmdworkhandler needs to complete ent-slotted before returning early. Otherwise the task which issued the command may hang: mlx5core...

AZL-55904 CVE-2024-57940 affecting package kernel for versions less than 6.6.76.1-1

In the Linux kernel, the following vulnerability has been resolved: exfat: fix the infinite loop in exfatreaddir If the file system is corrupted so that a cluster is linked to itself in the cluster chain, and there is an unused directory entry in the cluster, 'dentry' will not be incremented,...

AZL-55910 CVE-2024-57940 affecting package kernel for versions less than 5.15.179.1-1

In the Linux kernel, the following vulnerability has been resolved: exfat: fix the infinite loop in exfatreaddir If the file system is corrupted so that a cluster is linked to itself in the cluster chain, and there is an unused directory entry in the cluster, 'dentry' will not be incremented,...

CVE-2024-57940

In the Linux kernel, the following vulnerability has been resolved: exfat: fix the infinite loop in exfatreaddir If the file system is corrupted so that a cluster is linked to itself in the cluster chain, and there is an unused directory entry in the cluster, 'dentry' will not be incremented,...

UBUNTU-CVE-2024-57940

In the Linux kernel, the following vulnerability has been resolved: exfat: fix the infinite loop in exfatreaddir If the file system is corrupted so that a cluster is linked to itself in the cluster chain, and there is an unused directory entry in the cluster, 'dentry' will not be incremented,...

UBUNTU-CVE-2025-21662

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix variable not being completed when function returns When cmdallocindex, fails cmdworkhandler needs to complete ent-slotted before returning early. Otherwise the task which issued the command may hang: mlx5core...

CVE-2024-57940 exfat: fix the infinite loop in exfat_readdir()

In the Linux kernel, the following vulnerability has been resolved: exfat: fix the infinite loop in exfatreaddir If the file system is corrupted so that a cluster is linked to itself in the cluster chain, and there is an unused directory entry in the cluster, 'dentry' will not be incremented,...

CVE-2024-57940 exfat: fix the infinite loop in exfat_readdir()

In the Linux kernel, the following vulnerability has been resolved: exfat: fix the infinite loop in exfatreaddir If the file system is corrupted so that a cluster is linked to itself in the cluster chain, and there is an unused directory entry in the cluster, 'dentry' will not be incremented,...

PT-2025-5626

Name of the Vulnerable Software and Affected Versions: MonicaHQ version 4.1.1 Description: The issue allows attackers to exploit authenticated client-side injection in journal entry edits, with a medium severity level. A patch is pending, and users should monitor updates closely. Recommendations:...