Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a miscalculation in the defragmentation of multi-linked elements, which could lead to out-of-bounds access...

Nextcloud Desktop Client 访问控制错误漏洞

Nextcloud Desktop Client is an open source file synchronization and sharing tool from Nextcloud GmbH. An access control error vulnerability exists in versions prior to Nextcloud Desktop Client 3.15, which stems from a third-party application that can create linked shares via the socket API,...

China-Linked APTs Exploit SAP CVE-2025-31324 to Breach 581 Critical Systems Worldwide

A recently disclosed critical security flaw impacting SAP NetWeaver is being exploited by multiple China-nexus nation-state actors to target critical infrastructure networks. "Actors leveraged CVE-2025-31324, an unauthenticated file upload vulnerability that enables remote code execution RCE,"...

CVE-2025-4545

creationtimestamp| type| source ---|---|--- 2025-05-11 20:41:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lowcx4mgd22h 2025-05-12 00:13:32+00:00| seen| https://t.me/cvedetector/25054 2025-05-12 19:29:13+00:00| published-proof-of-concept|...

CVE-2025-4486

creationtimestamp| type| source ---|---|--- 2025-05-09 22:01:56+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lor7jed4m4a2 2025-05-09 22:30:58+00:00| published-proof-of-concept| Telegram/-FSytdz-B3MQuFO8RZfSO4jPAWx-8JuShz-w-b65AWDPvJk...

Malicious code in design-system-cmp (npm)

The package communicates with a domain associated with malicious activity...

CVE-2023-53140

creationtimestamp| type| source ---|---|--- 2025-05-02 16:16:06+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14510 2025-05-02 17:34:22+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lo7c2ou46u72 2025-05-02...

CVE-2025-46489

Missing Authorization vulnerability in vinodvaswani9 Bulk Assign Linked Products For WooCommerce wc-bulk-assign-linked-products allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Bulk Assign Linked Products For WooCommerce: from n/a through = 2.1...

CVE-2025-46244

Missing Authorization vulnerability in Dotstore Advanced Linked Variations for Woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Advanced Linked Variations for Woocommerce: from n/a through 1.0.3...

CVE-2025-46244

Missing Authorization vulnerability in Dotstore Advanced Linked Variations for Woocommerce linked-variation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced Linked Variations for Woocommerce: from n/a through = 1.0.3...

CVE-2025-46244

CVE-2025-46244: Missing Authorization in WordPress plugin Advanced Linked Variations for Woocommerce (versions

WordPress plugin Advanced Linked Variations for Woocommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

CVE-2025-2197

creationtimestamp| type| source ---|---|--- 2025-04-17 09:59:08+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12204 2025-04-17 10:48:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmywmxy5t42l 2025-04-17 14:39:04+00:00| seen| https://t.me/cvedetector/23226...

CVE-2025-1656

A maliciously crafted PDF file, when linked or imported into Autodesk applications, can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

CVE-2025-0125

creationtimestamp| type| source ---|---|--- 2025-04-09 14:00:00+00:00| seen| https://security.paloaltonetworks.com/CVE-2025-0125 2025-04-11 05:34:38+00:00| seen| https://t.me/cvedetector/22698 2025-04-11 13:55:17+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114319669075311241...

CVE-2025-31492

creationtimestamp| type| source ---|---|--- 2025-04-06 20:44:00+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10642 2025-04-06 23:12:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lm6l22uqci2w 2025-04-06 23:30:47+00:00| published-proof-of-concept|...

CVE-2025-30825 WordPress WPC Smart Linked Products plugin <= 1.3.5 - Privilege Escalation vulnerability

Missing Authorization vulnerability in WPClever WPC Smart Linked Products - Upsells & Cross-sells for WooCommerce wpc-smart-linked-products allows Privilege Escalation.This issue affects WPC Smart Linked Products - Upsells & Cross-sells for WooCommerce: from n/a through = 1.3.5...

CVE-2025-30825

CVE-2025-30825 affects WPC Smart Linked Products – Upsells & Cross-sells for WooCommerce. It is a Missing Authorization vulnerability enabling Privilege Escalation, impacting versions up to 1.3.5. CVSS v3.1 base score 8.8 (HIGH). Connected docs indicate a patched fix in a later release (Patch Sta...

UBUNTU-CVE-2025-21967

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in ksmbdfreeworkstruct -interimentry of ksmbdwork could be deleted after oplock is freed. We don't need to manage it with linked list. The interim request could be immediately sent whenever a oplock brea...

UBUNTU-CVE-2025-21945

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in smb2lock If smblock-zerolen has value, -llist of smblock is not delete and flock is old one. It will cause use-after-free on error handling routine...