WordPress plugin Amazon affiliate lite Plugin security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

WordPress plugin FiboSearch has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: libpng (UTSA-2025-991303)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-991303 advisory. LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. From version 1.6.0 to befor...

PT-2026-38956

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the dm driver, the failure to implement its own timeout handler while relying on slave devices leads to an issue where requests are leaked and never completed if an io-timeout-fail...

WordPress Plugin Attachments Handler Cross-Site Script Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

EUVD-2025-204470

The BA Book Everything plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's babe-search-form shortcode in all versions up to, and including, 1.8.14 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

IBM Concert Software AI Automation Tool Data Access

The vulnerability of IBM Concert Software’s artificial intelligence-based automation tools lies in the improper processing of output data for registration logs. Exploiting this vulnerability can allow a remote attacker to gain access to and modify this data...

nbconvert has an uncontrolled search path that leads to unauthorized code execution on Windows

Summary On Windows, converting a notebook containing SVG output to a PDF results in unauthorized code execution. Specifically, a third party can create a inkscape.bat file that defines a Windows batch script, capable of arbitrary code execution. When a user runs jupyter nbconvert --to pdf on a...

EUVD-2025-203957

nbconvert has an uncontrolled search path that leads to unauthorized code execution on Windows...

CVE-2025-53000

A flaw was found in nbconvert, specifically in the jupyter nbconvert tool on Windows. A third party can exploit this vulnerability by creating a malicious inkscape.bat file in a directory. When a user then converts a Jupyter notebook containing SVG output to a PDF from this directory, the malicio...

BIT-GITLAB-2025-8405 Improper Encoding or Escaping of Output in GitLab

GitLab has remediated a security issue in GitLab CE/EE affecting all versions from 17.1 before 18.4.6, 18.5 before 18.5.4, and 18.6 before 18.6.2 that could have allowed an authenticated user to perform unauthorized actions on behalf of other users by injecting malicious HTML into vulnerability...

CVE-2025-47322

Memory corruption while handling IOCTL calls to set mode...

EUVD-2025-204023

Memory Corruption when processing IOCTLs for JPEG data without verification...

CVE-2025-47387

CVE-2025-47387 relates to memory corruption when processing unverified JPEG IOCTL data in Qualcomm embedded platform firmware. The issue affects the IOCTL path handling JPEG data, caused by unverified input leading to memory corruption with potential for impact on confidentiality, integrity, and ...

CVE-2025-47322

CVE-2025-47322 involves a memory corruption (use-after-free) flaw in IOCTL handling to set mode in Qualcomm embedded platform firmware/ MSM kernel components. Affected: Qualcomm embedded platform firmware; root cause: use-after-free leading to memory corruption. Impact: potential arbitrary code e...

EUVD-2025-204029

Memory corruption while handling IOCTL calls to set mode...

CVE-2025-47322 Use After Free in Automotive Linux OS

Memory corruption while handling IOCTL calls to set mode...

CVE-2025-67790

An issue was discovered in DriveLock 24.1 before 24.1.6, 24.2 before 24.2.7, and 25.1 before 25.1.5. An unprivileged user could cause occasionally a Blue Screen Of Death BSOD on Windows computers by using an IOCTL and an unterminated string...

CVE-2025-63757

Integer overflow vulnerability in the yuv2ya16Xctemplate function in libswscale/output.c in FFmpeg 8.0...

MSM and Qualcomm platform-kernel resource management vulnerability

MSM is a sample management tool from the individual developer Holger Graef in France. Enables researchers to track their samples from any PC in the lab.Qualcomm platform-kernel is a Linux kernel codebase from Qualcomm, USA. A resource management error vulnerability exists in MSM and Qualcomm...