LemonLDAP::NG Security Vulnerability

LemonLDAP::NG is LemonLDAP::NG open source set of Web single sign-on and access management software. A security vulnerability exists in LemonLDAP::NG that stems from cross-site request forgery during the 2FA registration process, which could lead to a victim performing a malicious operation...

Fedora 41 : lemonldap-ng (2025-3aa9a75a72)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-3aa9a75a72 advisory. - SecurityCVE-2024-52948 CSRF on 2FA registration - Security Open redirect vulnerability in logout Tenable has extracted the preceding description block...

Fedora 40 : lemonldap-ng (2025-07901b1995)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-07901b1995 advisory. - SecurityCVE-2024-52948 CSRF on 2FA registration - Security Open redirect vulnerability in logout Tenable has extracted the preceding description block...

MAL-2025-599 Malicious code in waltz-ng (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0733a6b2b4540bd79978ea53387244384311fc91be38bff9344132f8aeec77ee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in waltz-ng (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0733a6b2b4540bd79978ea53387244384311fc91be38bff9344132f8aeec77ee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Advisory ROSA-SA-2025-2596

software: procps-ng 3.3.17 OS: ROSA-CHROME packageevrstring: procps-ng-3.3.17-4 CVE-ID: CVE-2023-4016 BDU-ID: 2023-07117 CVE-Crit: LOW CVE-DESC.: A vulnerability in the running processes information collection utility ps of the procps-ng command line utility set is related to an operation exceedi...

CVE-2025-23569

Cross-Site Request Forgery CSRF vulnerability in Kelvin Ng Shortcode in Comment shortcode-in-comment allows Stored XSS.This issue affects Shortcode in Comment: from n/a through = 1.1.1...

CVE-2025-23569 WordPress Shortcode in Comment plugin <= 1.1.1 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Kelvin Ng Shortcode in Comment shortcode-in-comment allows Stored XSS.This issue affects Shortcode in Comment: from n/a through = 1.1.1...

CVE-2025-23569

CVE-2025-23569 describes a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin “Shortcode in Comment” by Kelvin Ng, which allows Stored XSS. The vulnerability affects the Shortcode in Comment plugin version range up to 1.1.1 (inclusive). The hosted CVE details also cite a CVSS...

CVE-2024-52949 affecting package iptraf-ng for versions less than 1.2.2-1

CVE-2024-52949 affecting package iptraf-ng for versions less than 1.2.2-1. An upgraded version of the package is available that resolves this issue...

Arista NG Firewall 安全漏洞

Arista NG Firewall is a WEB firewall from Arista USA. A security vulnerability exists in Arista NG Firewall that stems from a query built specifically for ETM that can discover active remote access sessions...

Arista NG Firewall 安全漏洞

Arista NG Firewall is a WEB firewall from Arista Corporation. A security vulnerability exists in Arista NG Firewall, which stems from a specially constructed query that causes a cross-platform script to disclose the administrator token...

Arista NG Firewall 安全漏洞

Arista NG Firewall is a WEB firewall from Arista Corporation. A security vulnerability exists in Arista NG Firewall that originates from a user with administrator privileges being able to retrieve an authentication token...

Arista NG Firewall 安全漏洞

Arista NG Firewall is a WEB firewall from Arista Corporation. A security vulnerability exists in Arista NG Firewall, which stems from the vulnerability of backups uploaded to ETM to be intercepted by a man-in-the-middle...

Arista NG Firewall 安全漏洞

Arista NG Firewall is a WEB firewall from Arista USA. A security vulnerability exists in Arista NG Firewall that originates from an ETM access timeout unit that may find an expired and unusable administrator authentication token...

Arista NG Firewall 安全漏洞

Arista NG Firewall is a WEB firewall from Arista Corporation. A security vulnerability exists in Arista NG Firewall that originates from a command injection that can be executed by a user with administrator privileges...

CVE-2022-45811

Missing Authorization vulnerability in WeyHan Ng Post Teaser.This issue affects Post Teaser: from n/a through 4.1.5...

CVE-2022-45811 WordPress Post Teaser plugin <= 4.1.5 - Auth. Broken Access Control vulnerability

Missing Authorization vulnerability in WeyHan Ng Post Teaser.This issue affects Post Teaser: from n/a through 4.1.5...

PT-2025-15633

Name of the Vulnerable Software and Affected Versions: LemonLDAP::NG versions prior to 2.21.0 Description: The issue is related to an XSS problem. The LemonLDAP::NG community has released a new version, 2.21.0, which includes a fix for this issue. Recommendations: For versions prior to 2.21.0,...

CVE-2024-56583 sched/deadline: Fix warning in migrate_enable for boosted tasks

In the Linux kernel, the following vulnerability has been resolved: sched/deadline: Fix warning in migrateenable for boosted tasks When running the following command: while true; do stress-ng --cyclic 30 --timeout 30s --minimize --quiet done a warning is eventually triggered: WARNING: CPU: 43 PID...