TOZED ZLT T10 安全漏洞

TOZED ZLT T10 is a wireless router from China Tongze Kangwei TOZED. A security vulnerability exists in the TOZED ZLT T10 T10PLUS3.04.15 version, which stems from improper handling of unknown functions in the file /reqproc/procpost, which could lead to a denial of service...

CVE-2025-9334

The Better Find and Replace – AI-Powered Suggestions plugin for WordPress is vulnerable to Limited Code Injection in all versions up to, and including, 1.7.7. This is due to insufficient input validation and restriction on the 'rtafarajax' function. This makes it possible for authenticated...

HYDRA: A Hybrid Heuristic-Guided Deep Representation Architecture for Predicting Latent Zero-Day Vulnerabilities in Patched Functions

Software security testing, particularly when enhanced with deep learning models, has become a powerful approach for improving software quality, enabling faster detection of known flaws in source code. However, many approaches miss post-fix latent vulnerabilities that remain even after patches...

PT-2025-55359

Уязвимость платформы дистанционного мониторинга физиологических показателей пациента «Health check-up» связана с использованием опасных методов или функций. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, раскрыть защищаемую информацию...

CVE-2025-58243

Missing Authorization vulnerability in Jthemes imEvent imevent allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects imEvent: from n/a through = 3.4.0...

CLSA-2025-1762338135 apr: Fix of CVE-2022-24963

CVE-2022-24963: Fix integer overflow in aprencode functions that could lead to out-of-bounds write...

Prototype Pollution

Overview expr-eval-fork is a Mathematical expression evaluator fork with prototype pollution fix Affected versions of this package are vulnerable to Prototype Pollution via unrestricted member access IMEMBER and user-defined functions IFUNDEF in the expression evaluator. An attacker can execute...

PT-2025-55356

Уязвимость платформы дистанционного мониторинга физиологических показателей пациента «Health check-up» связана с использованием опасных методов или функций. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, получить доступ к конфиденциальной информации...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988732)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988732 advisory. In the Linux kernel, the following vulnerability has been resolved: IB/hfi1: Fix leak of rcvhdrtaildummykvaddr This buffer is currently allocated in hfi1init: if...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990341)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990341 advisory. In the Linux kernel, the following vulnerability has been resolved: iio: chemical: bme680: Fix overflows in compensate functions There are cases in the compensate...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989324)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989324 advisory. In the Linux kernel, the following vulnerability has been resolved: ixgbe: Add locking to prevent panic when setting sriovnumvfs to zero It is possible to disable VF...

PT-2025-45118

Name of the Vulnerable Software and Affected Versions Django versions prior to 4.2.26 Django versions prior to 5.1.14 Django versions prior to 5.2.8 Django versions 5.0.x and earlier Django versions 4.1.x and earlier Django versions 3.2.x and earlier Description The issue relates to algorithmic...

The vulnerabilities of the functions g_tls_bio_new_from_iostream() and g_tls_bio_new_from_datagram_based() in the OpenSSL library allow a hacker to gain unauthorized access to protected information.

The vulnerability of the gtlsbionewfromiostream and gtlsbionewfromdatagrambased functions in the OpenSSL library is related to the use of uninitialized pointers. Exploiting this vulnerability could allow a remote attacker to gain unauthorized access to protected information...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989950)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989950 advisory. In the Linux kernel, the following vulnerability has been resolved: sfc: fix kernel panic when creating VF When creating VFs a kernel panic can happen when calling ...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988863)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988863 advisory. In the Linux kernel, the following vulnerability has been resolved: thermal: Fix NULL pointer dereferences in ofthermal functions ofparsethermalzones parses the...

CVE-2025-62720 LinkAce: Data Exfiltration via Export Functions Allow Access to All Users' Private Links

LinkAce is a self-hosted archive to collect website links. Versions 2.3.1 and below allow any authenticated user to export the entire database of links from all users in the system, including private links that should only be accessible to their owners. The HTML and CSV export functions in the...

CVE-2025-62720 LinkAce: Data Exfiltration via Export Functions Allow Access to All Users' Private Links

LinkAce is a self-hosted archive to collect website links. Versions 2.3.1 and below allow any authenticated user to export the entire database of links from all users in the system, including private links that should only be accessible to their owners. The HTML and CSV export functions in the...

CVE-2025-62369: Improper Control of Generation of Code

Xibo is an open source digital signage platform with a web content management system CMS. Versions 4.3.0 and below contain a Remote Code Execution vulnerability in the CMS Developer menu's Module Templating functionality, allowing authenticated users with "System - Add/Edit custom modules and...

net: enetc: VFs do not support HWTSTAMP_TX_ONESTEP_SYNC

...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: drm/xe/pf: Allocating LMTT pages should clear them all upon allocation. Our LMEM buffer objects are not cleared by default upon allocation. During VF provisioning, we only set up LMTT PTEs for the actually provisioned LMEM range...