USN-7288-1 linux, linux-lowlatency vulnerabilities

Attila Szász discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted, could cause a denial of service system crash or possibly execute arbitrary code...

CVE-2025-27296

Missing Authorization vulnerability in revenueflex Auto Ad Inserter – Increase Google Adsense and Ad Manager Revenue revenueflex-easy-ads allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Auto Ad Inserter – Increase Google Adsense and Ad Manager Revenue:...

Advisory ROSA-SA-2025-2711

Software: libxslt 1.1.32 OS: ROSA Virtualization 3.0 packageevrstring: libxslt-1.1.32 CVE-ID: CVE-2019-11068 BDU-ID: 2019-04263 CVE-Crit: CRITICAL. CVE-DESC.: An XSLT C vulnerability in the libxslt library is related to access control flaws. Exploitation of the vulnerability could allow an attack...

WordPress plugin Bravo Search & Replace SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...

The vulnerabilities of the sched/smt components in Linux operating systems allow attackers to trigger service failures.

The vulnerability of the sched/smt components in Linux operating systems is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the CIE.AspNetCore.Authentication library in the ASP.NET Core software platform arises from authentication procedures that have flaws. This allows attackers to circumvent security restrictions and gain unauthorized access to protected information.

The vulnerability of the CIE.AspNetCore.Authentication library in the ASP.NET Core software platform is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to bypass security restrictions and gain unauthorized access to protected informatio...

CVE-2024-13677

The GetBookingsWP – Appointments Booking Calendar Plugin For WordPress plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.1.27. This is due to the plugin not properly validating a user's identity prior to updating their details...

USN-7276-1 linux, linux-lowlatency vulnerabilities

Attila Szász discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted, could cause a denial of service system crash or possibly execute arbitrary code...

Xerox Versalink Printers Vulnerabilities Could Let Hackers Steal Credentials

Xerox Versalink printers are vulnerable to pass-back attacks. Rapid7 discovers LDAP & SMB flaws CVE-2024-12510 & CVE-2024-12511. Update…...

The vulnerability of the business analytics application IBM Cognos Analytics Mobile client allows a attacker to perform a “Man-in-the-Middle” attack.

The vulnerability of the IBM Cognos Mobile Client application for business analytics involves errors in the authentication process. Exploiting this vulnerability can allow an attacker to carry out a “Man-in-the-Middle” attack remotely...

The vulnerability of Broadcom P225p NetXtreme-E Dual-port 10Gb/25Gb Ethernet PCIe Adapter and Broadcom NetXtreme-E family Ethernet controllers is related to access control bugs, allowing attackers to gain access to protected information.

The vulnerability of the Broadcom P225p NetXtreme-E dual-port 10Gb/25Gb Ethernet PCIe adapter and Broadcom NetXtreme-E family Ethernet controllers is related to access control bugs. Exploiting this vulnerability can allow attackers to gain access to protected information...

ROS-20250219-04

A vulnerability in Git's distributed version control system is related to a flaw in the mechanism for encoding or shielding of output data. Exploitation of the vulnerability allows a remote attacker, gain access to sensitive data Vulnerability in the ANSI Escape Sequence Handler component of the...

Ubuntu 24.10 : Linux kernel vulnerabilities (USN-7276-1)

"The remote Ubuntu 24.10 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7276-1 advisory. Attila Szsz discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a special...

Vulnerabilities fixed in Fortinet FortiSwitch, FortiManager, FortiAnalyzer, FortiOS and FortiProxy

Fortinet has fixed vulnerabilities in several products, including FortiOS, FortiProxy, FortiPAM, FortiSwitchManager, FortiSandbox, FortiManager and FortiAnalyzer. The vulnerabilities include the ability for privileged attackers to execute arbitrary code or commands by sending specially crafted...

PT-2025-6974 · Ubiquiti · Unifi Protect

Name of the Vulnerable Software and Affected Versions: UniFi Protect affected versions not specified Description: The issue is related to the Auto-Adopt Bridge Devices function in the UniFi Protect video surveillance system, which is based on artificial intelligence. It is connected to weaknesses...

The vulnerability of components related to DRM, AMD, and display kernels in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of components such as DRM, AMD, and display kernels in the Linux operating system is related to improper validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the gpio component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the gpio component in the Linux operating system’s kernel is related to exception handling deficiencies. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the command-line interface (CLI) of the FortiClient for MAC security tool allows a perpetrator to gain unauthorized access to the system.

The vulnerability of the command-line interface CLI of the FortiClient for MAC security tool is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to gain unauthorized access to the system...

Advisory ROSA-SA-2025-2682

Software: ghostscript 9.27 OS: ROSA Virtualization 3.0 packageevrstring: ghostscript-9.27-11.0.1 CVE-ID: CVE-2019-14813 BDU-ID: 2019-03227 CVE-Crit: CRITICAL. CVE-DESC.: A vulnerability in the setsystemparams procedure of the PostScript Ghostscript file format conversion program is related to...

The Official DOGE Website Launch Was a Security Mess

Plus: Researchers find RedNote lacks basic security measures, surveillance ramps up around the US-Mexico border, and the UK ordering Apple to create an encryption backdoor comes under fire...