Siemens SIMATIC Devices Linux Kernel Loop with Unreachable Exit Condition ('Infinite Loop') (CVE-2022-42721)

A list management bug in BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19.x before 5.19.16 could be used by local attackers able to inject WLAN frames to corrupt a linked list and, in turn, potentially execute code. This plugin only works with Tenable.ot. Please visit...

CVE-2025-27277

Cross-Site Request Forgery CSRF vulnerability in tiefpunkt Add Linked Images To Gallery add-linked-images-to-gallery-v01 allows Cross Site Request Forgery.This issue affects Add Linked Images To Gallery: from n/a through = 1.4...

WordPress Add Linked Images To Gallery plugin <= 1.4 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by Abdi Pranata in WordPress Plugin Add Linked Images To Gallery versions = 1.4...

CVE-2025-27277 WordPress Add Linked Images To Gallery plugin <= 1.4 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in tiefpunkt Add Linked Images To Gallery add-linked-images-to-gallery-v01 allows Cross Site Request Forgery.This issue affects Add Linked Images To Gallery: from n/a through = 1.4...

CVE-2025-27277

CVE-2025-27277 is a CSRF-to-stored-XSS vulnerability in the WordPress plugin “Add Linked Images To Gallery” affecting version up to 1.4. The CVE details from NVD/Wordfence indicate: vulnerable component/file: the Add Linked Images To Gallery plugin; root cause: Cross-Site Request Forgery enabling...

WordPress plugin Add Linked Images To Gallery 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site request forgery...

CVE-2025-27277: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in tiefpunkt Add Linked Images To Gallery add-linked-images-to-gallery-v01 allows Cross Site Request Forgery.This issue affects Add Linked Images To Gallery: from n/a through = 1.4...

PT-2025-7724

Name of the Vulnerable Software and Affected Versions Add Linked Images To Gallery versions 1.4 and earlier Description A Cross-Site Request Forgery CSRF issue affects the Add Linked Images To Gallery, allowing unauthorized requests. Recommendations For versions 1.4 and earlier, update to a versi...

Hackers Exploit Signal's Linked Devices Feature to Hijack Accounts via Malicious QR Codes

Multiple Russia-aligned threat actors have been observed targeting individuals of interest via the privacy-focused messaging app Signal to gain unauthorized access to their accounts. "The most novel and widely used technique underpinning Russian-aligned attempts to compromise Signal accounts is t...

GHSA-79V4-65XG-PQ4G Vulnerable OpenSSL included in cryptography wheels

pyca/cryptography's wheels include a statically linked copy of OpenSSL. The versions of OpenSSL included in cryptography 42.0.0-44.0.0 are vulnerable to a security issue. More details about the vulnerability itself can be found in https://openssl-library.org/news/secadv/20250211.txt. If you are...

CVE-2022-36086

linkedlistallocator is an allocator usable for nostd systems. Prior to version 0.10.2, the heap initialization methods were missing a minimum size check for the given heap size argument. This could lead to out-of-bound writes when a heap was initialized with a size smaller than 3 sizeof:: because...

CVE-2024-21669

Hyperledger Aries Cloud Agent Python ACA-Py is a foundation for building decentralized identity applications and services running in non-mobile environments. When verifying W3C Format Verifiable Credentials using JSON-LD with Linked Data Proofs LDP-VCs, the result of verifying the presentation...

Malicious code in @justworkshr/alma (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in effect-layout-function (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in invalid-dependency (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in css-blocks-ember (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

Malicious code in example-app-node (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in talk-desktop (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

Malicious code in whaletail (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

CVE-2024-13448

creationtimestamp| type| source ---|---|--- 2025-01-28 06:44:19+00:00| seen| https://infosec.exchange/users/cve/statuses/113904625814112822 2025-01-28 07:15:19+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgrvuc5lru2f 2025-01-28 08:48:25+00:00| seen|...