Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a failure to release resources when port event registration fails, which could lead to a resource leak...

PT-2025-53229

In the Linux kernel, the following vulnerability has been resolved: can: j1939: prevent deadlock by moving j1939 sk errqueue This commit addresses a deadlock situation that can occur in certain scenarios, such as when running data TP/ETP transfer and subscribing to the error queue while receiving...

Linux Distros Unpatched Vulnerability : CVE-2025-68375

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - perf/x86: Fix NULL event access and potential PEBS record loss When intelpmudrainpebsicl is called to drain PEBS records, the perfeventoverflow could be called ...

CVE-2025-51511

creationtimestamp| type| source ---|---|--- 2025-12-23 19:40:02+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3maoiuubli42u 2025-12-23 21:02:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3maonhonenz2y...

CVE-2025-68338

creationtimestamp| type| source ---|---|--- 2025-12-23 14:15:50+00:00| seen| https://bsky.app/profile/potato.software/post/3manwr62tip22 2026-04-02 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0397/ 2026-04-07 18:00:00+00:00| seen|...

CVE-2025-13183

creationtimestamp| type| source ---|---|--- 2025-12-23 13:15:34+00:00| seen| https://bsky.app/profile/potato.software/post/3mantffeij725 2025-12-23 15:44:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mao3piqwun2y...

EUVD-2025-204784

The Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'eventdesc' parameter in all versions up to, and including, 1.3.16 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access a...

Assessing SIEM effectiveness

A SIEM is a complex system offering broad and flexible threat detection capabilities. Due to its complexity, its effectiveness heavily depends on how it is configured and what data sources are connected to it. A one-time SIEM setup during implementation is not enough: both the organization's...

PT-2025-52734

Name of the Vulnerable Software and Affected Versions WordPress Calendar plugin versions prior to 1.3.17 Description The Calendar plugin for WordPress is susceptible to Stored Cross-Site Scripting. This is due to insufficient input sanitization and output escaping in the event desc parameter...

PuneethReddyHC Event Management 安全漏洞

PuneethReddyHC Event Management is an application by Puneeth Reddy H C Individual Developer. Helps users to register for events organized in university festivals with simple logic and security. A security vulnerability exists in PuneethReddyHC Event Management version 1.0, which stems from...

PT-2025-52847

Name of the Vulnerable Software and Affected Versions PuneethReddyHC event-management version 1.0 Description Improper input handling in the /Grocery/search products itname.php file allows for SQL injection via the sitem name POST parameter. Crafted payloads can alter query logic and disclose...

CVE-2025-65354

CVE-2025-65354 affects PuneethReddyHC event-management version 1.0. The Red Hat and NVD entries, along with other feeds, describe improper input handling in /Grocery/search_products_itname.php that allows SQL injection via the sitem_name POST parameter. Crafted payloads can alter query logic and ...

WordPress plugin Calendar 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

WordPress Calendar plugin <= 1.3.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'event_desc' vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via 'eventdesc' vulnerability discovered by Hieus in WordPress Plugin Calendar versions = 1.3.16...

CVE-2025-68476 KEDA has Arbitrary File Read via Insufficient Path Validation in HashiCorp Vault Service Account Credential

KEDA is a Kubernetes-based Event Driven Autoscaling component. Prior to versions 2.17.3 and 2.18.3, an Arbitrary File Read vulnerability has been identified in KEDA, potentially affecting any KEDA resource that uses TriggerAuthentication to configure HashiCorp Vault authentication. The...

CVE-2025-34469

creationtimestamp| type| source ---|---|--- 2025-12-20 17:42:07+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-83jg-m2pm-4jxj 2026-01-01 00:34:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbd52qua3q2u 2026-01-01 21:02:58+00:00| seen|...

CVE-2023-53958

creationtimestamp| type| source ---|---|--- 2025-12-20 00:23:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3maewud6guu2q...

CVE-2025-11901

creationtimestamp| type| source ---|---|--- 2025-12-19 16:05:39+00:00| seen| https://bsky.app/profile/blackhatnews.tokyo/post/3mae2zt7n632l 2025-12-21 13:02:26+00:00| seen| https://t.me/sysodmins/27923 2025-12-22 08:39:26+00:00| published-proof-of-concept| https://t.me/xakepru/18676...

CVE-2025-14861

creationtimestamp| type| source ---|---|--- 2025-12-19 15:45:22+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3madzvkszcf24 2026-04-13 18:00:31+00:00| seen| Telegram/lcTTDbyY4PLCe4Ts-gMkb76cUYnmPfJtZnOpjvQrzbn1wRw...

CVE-2025-68461

creationtimestamp| type| source ---|---|--- 2025-12-19 15:05:16+00:00| published-proof-of-concept| Telegram/-BSo0zA61vWCA4Jhqv9IkIbnyI3oU0cuabSJHE6-K1C6zFk 2025-12-19 16:33:00+00:00| seen| https://www.acn.gov.it/portale/w/vulnerabilita-in-roundcube-webmail-1 2025-12-20 10:34:29+00:00| seen|...