CVE-2025-1656

A maliciously crafted PDF file, when linked or imported into Autodesk applications, can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

CVE-2025-0125

creationtimestamp| type| source ---|---|--- 2025-04-09 14:00:00+00:00| seen| https://security.paloaltonetworks.com/CVE-2025-0125 2025-04-11 05:34:38+00:00| seen| https://t.me/cvedetector/22698 2025-04-11 13:55:17+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114319669075311241...

CVE-2025-31492

creationtimestamp| type| source ---|---|--- 2025-04-06 20:44:00+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10642 2025-04-06 23:12:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lm6l22uqci2w 2025-04-06 23:30:47+00:00| published-proof-of-concept|...

CVE-2025-30825

CVE-2025-30825 affects WPC Smart Linked Products – Upsells & Cross-sells for WooCommerce. It is a Missing Authorization vulnerability enabling Privilege Escalation, impacting versions up to 1.3.5. CVSS v3.1 base score 8.8 (HIGH). Connected docs indicate a patched fix in a later release (Patch Sta...

CVE-2025-30825 WordPress WPC Smart Linked Products plugin <= 1.3.5 - Privilege Escalation vulnerability

Missing Authorization vulnerability in WPClever WPC Smart Linked Products - Upsells & Cross-sells for WooCommerce wpc-smart-linked-products allows Privilege Escalation.This issue affects WPC Smart Linked Products - Upsells & Cross-sells for WooCommerce: from n/a through = 1.3.5...

UBUNTU-CVE-2025-21945

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in smb2lock If smblock-zerolen has value, -llist of smblock is not delete and flock is old one. It will cause use-after-free on error handling routine...

UBUNTU-CVE-2025-21967

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in ksmbdfreeworkstruct -interimentry of ksmbdwork could be deleted after oplock is freed. We don't need to manage it with linked list. The interim request could be immediately sent whenever a oplock brea...

WordPress plugin WPC Smart Linked Products - Upsells & Cross-sells for WooCommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the WordPre...

CVE-2025-30825: Missing Authorization

Missing Authorization vulnerability in WPClever WPC Smart Linked Products - Upsells & Cross-sells for WooCommerce wpc-smart-linked-products allows Privilege Escalation.This issue affects WPC Smart Linked Products - Upsells & Cross-sells for WooCommerce: from n/a through = 1.3.5...

PT-2025-14393 · Woocommerce · Wpc Smart Linked Products - Upsells & Cross-Sells For Woocommerce

Name of the Vulnerable Software and Affected Versions: WPC Smart Linked Products - Upsells & Cross-sells for WooCommerce versions 1.3.5 and earlier Description: The issue is related to a Missing Authorization vulnerability that allows Privilege Escalation. This vulnerability affects the WPC Smart...

SUSE CVE-2023-52940

In the Linux kernel, the following vulnerability has been resolved: mm: multi-gen LRU: fix crash during cgroup migration lrugenmigratemm assumes lrugenaddmm runs prior to itself. This isn't true for the following scenario: CPU 1 CPU 2 clone cgroupcanfork cgroupprocswrite cgrouppostfork tasklock...

CVE-2023-52940

In the Linux kernel, the following vulnerability has been resolved: mm: multi-gen LRU: fix crash during cgroup migration lrugenmigratemm assumes lrugenaddmm runs prior to itself. This isn't true for the following scenario: CPU 1 CPU 2 clone cgroupcanfork cgroupprocswrite cgrouppostfork tasklock...

DEBIAN-CVE-2023-52940

In the Linux kernel, the following vulnerability has been resolved: mm: multi-gen LRU: fix crash during cgroup migration lrugenmigratemm assumes lrugenaddmm runs prior to itself. This isn't true for the following scenario: CPU 1 CPU 2 clone cgroupcanfork cgroupprocswrite cgrouppostfork tasklock...

CVE-2023-52940 mm: multi-gen LRU: fix crash during cgroup migration

In the Linux kernel, the following vulnerability has been resolved: mm: multi-gen LRU: fix crash during cgroup migration lrugenmigratemm assumes lrugenaddmm runs prior to itself. This isn't true for the following scenario: CPU 1 CPU 2 clone cgroupcanfork cgroupprocswrite cgrouppostfork tasklock...

CVE-2023-52940 mm: multi-gen LRU: fix crash during cgroup migration

In the Linux kernel, the following vulnerability has been resolved: mm: multi-gen LRU: fix crash during cgroup migration lrugenmigratemm assumes lrugenaddmm runs prior to itself. This isn't true for the following scenario: CPU 1 CPU 2 clone cgroupcanfork cgroupprocswrite cgrouppostfork tasklock...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an incorrectly sorted operation of the mm multi-gen LRU component during cgroup migration, resulting in a...

CVE-2023-52940: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: mm: multi-gen LRU: fix crash during cgroup migration lrugenmigratemm assumes lrugenaddmm runs prior to itself. This isn't true for the following scenario: CPU 1 CPU 2 clone cgroupcanfork cgroupprocswrite cgrouppostfork tasklock...

CVE-2020-10810

creationtimestamp| type| source ---|---|--- 2025-03-13 15:57:14+00:00| seen| https://gist.github.com/everdaniel/13c32a13a9201fee22ba5df96b099497...

China-Linked Silk Typhoon Expands Cyber Attacks to IT Supply Chains for Initial Access

The China-linked threat actor behind the zero-day exploitation of security flaws in Microsoft Exchange servers in January 2021 has shifted its tactics to target the information technology IT supply chain as a means to obtain initial access to corporate networks. That's according to new findings...

CVE-2025-27277

Cross-Site Request Forgery CSRF vulnerability in tiefpunkt Add Linked Images To Gallery add-linked-images-to-gallery-v01 allows Cross Site Request Forgery.This issue affects Add Linked Images To Gallery: from n/a through = 1.4...