CVE-2025-59432 Timing Attack Vulnerability in SCRAM Authentication

SCRAM Salted Challenge Response Authentication Mechanism is part of the family of Simple Authentication and Security Layer SASL, RFC 4422 authentication mechanisms. Prior to version 3.2, a timing attack vulnerability exists in the SCRAM Java implementation. The issue arises because Arrays.equals...

CVE-2025-58267

Cross-Site Request Forgery CSRF vulnerability in Aftabul Islam Stock Message stock-message allows Stored XSS.This issue affects Stock Message: from n/a through = 1.1.0...

WordPress Stock Message Plugin <= 1.1.0 - Cross Site Request Forgery (CSRF) Vulnerability

Cross Site Request Forgery CSRF Vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Stock Message versions = 1.1.0...

CVE-2025-58267 WordPress Stock Message Plugin <= 1.1.0 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Aftabul Islam Stock Message stock-message allows Stored XSS.This issue affects Stock Message: from n/a through = 1.1.0...

CVE-2025-58267 WordPress Stock Message Plugin <= 1.1.0 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Aftabul Islam Stock Message stock-message allows Stored XSS.This issue affects Stock Message: from n/a through = 1.1.0...

CVE-2025-58267

CVE-2025-58267 describes a CSRF vulnerability in the Stock Message WordPress plugin that enables Stored XSS. The advisory states affected versions are Stock Message: from n/a through 1.1.0. Reported CVSS 3.1 base score 7.1 (HIGH) with Network attack vector, Low confidentiality/integrity/availabil...

WordPress plugin Stock Message 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site request...

PT-2025-38929

Name of the Vulnerable Software and Affected Versions Aftabul Islam Stock Message versions through 1.1.0 Description A Cross-Site Request Forgery CSRF issue exists in Aftabul Islam Stock Message, which also allows Stored Cross-Site Scripting XSS. The issue allows for potential malicious actions t...

ROS-20250922-06

A vulnerability in the RabbitMQ messaging and streaming broker is related to insufficient cleansing of user-supplied data in an error message in the management interface. Exploitation of the vulnerability could allow an attacker acting remotely to perform cross-site scripting...

CVE-2025-10772

CVE-2025-10772 affects huggingface LeRobot up to 0.3.3. The vulnerability lies in the ZeroMQ Socket Handler’s lekiwi_remote.py, causing missing authentication and enabling local-network access within the affected component. Affected software is LeRobot (up to 0.3.3); the issue is triggered via th...

CVE-2025-10707

A weakness has been identified in JeecgBoot up to 3.8.2. Affected is an unknown function of the file /message/sysMessageTemplate/sendMsg. Executing manipulation can lead to improper authorization. The attack may be launched remotely. The exploit has been made available to the public and could be...

tipc: fix kernel warning when sending SYN message

...

CVE-2025-10668

A security vulnerability has been detected in itsourcecode Online Discussion Forum 1.0. This affects an unknown part of the file /members/composemsgadmin.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been disclosed...

CVE-2025-10667

A weakness has been identified in itsourcecode Online Discussion Forum 1.0. Affected by this issue is some unknown functionality of the file /members/composemsg.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been...

smb: client: fix race with concurrent opens in rename(2)

...

smb3: fix temporary data corruption in collapse range

...

smb3: fix temporary data corruption in insert range

...

Linux Distros Unpatched Vulnerability : CVE-2022-50373

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: fs: dlm: fix race in lowcomms This patch fixes a race between queuework in...

CVE-2025-10707

A weakness has been identified in JeecgBoot up to 3.8.2. Affected is an unknown function of the file /message/sysMessageTemplate/sendMsg. Executing manipulation can lead to improper authorization. The attack may be launched remotely. The exploit has been made available to the public and could be...

Incorrect User Management

Overview jeecgboot-vue3 is an Agent =============== 当前最新版本： 3.8.1（预计发布时间：2025-04-21） Affected versions of this package are vulnerable to Incorrect User Management via the sendMsg function in the /message/sysMessageTemplate/sendMsg path. An attacker can gain unauthorized access to sensitive...