CVE-2025-44109

A URL redirection in Pinokio v3.6.23 allows attackers to redirect victim users to attacker-controlled pages...

CVE-2025-50477

A URL redirection in lbry-desktop v0.53.9 allows attackers to redirect victim users to attacker-controlled pages...

Soco404: Multiplatform Cryptomining Campaign Uses Fake Error Pages to Hide Payload

Wiz Research has identified a new iteration of a broader malicious cryptomining campaign, which we’ve dubbed Soco404...

CVE-2025-50477

A URL redirection in lbry-desktop v0.53.9 allows attackers to redirect victim users to attacker-controlled pages...

CVE-2025-44109

A URL redirection vulnerability exists in Pinokio version 3.6.23 , a native AI application automation tool. This flaw allows attackers to redirect victim users to attacker-controlled pages . Remediation involves updating Pinokio to a newer version that addresses this issue. Exploitation details a...

CVE-2025-50477

The wallet application lbry-desktop version v0.53.9 contains a URL redirection vulnerability (CWE-601). This flaw allows an attacker to redirect victim users to attacker-controlled pages . While a proof of concept (PoC) exists, specific details regarding the exploit vector or exploitation in the ...

CVE-2025-44109

A URL redirection in Pinokio v3.6.23 allows attackers to redirect victim users to attacker-controlled pages...

SQL Injection Vulnerability in Sales and Inventory System (CNVD-2026-38244)

Sales and Inventory System is a sales and inventory management system. The Sales and Inventory System has a SQL injection vulnerability, which stems from the lack of security filtering on the ID parameter in the /pages/settingsupdate.php file of the Setting Handler component. Attackers can exploi...

CVE-2025-50477

A URL redirection in lbry-desktop v0.53.9 allows attackers to redirect victim users to attacker-controlled pages...

CVE-2025-44109: URL Redirection to Untrusted Site

A URL redirection in Pinokio v3.6.23 allows attackers to redirect victim users to attacker-controlled pages...

CVE-2025-50477: URL Redirection to Untrusted Site

A URL redirection in lbry-desktop v0.53.9 allows attackers to redirect victim users to attacker-controlled pages...

Google Chrome security vulnerabilities

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a type confusion vulnerability that stems from a flaw in the V8 engine's handling of malicious HTML pages. An attacker can exploit the vulnerability to trigger heap corruption via specially crafted HTML...

SUSE SLES15 Security Update : kernel RT (Live Patch 0 for SLE 15 SP6) (SUSE-SU-2025:02390-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02390-1 advisory. This update for the Linux Kernel 6.4.0-1506008 fixes several issues. The following security issues were fixed: - CVE-2024-53146: NFSD: Prevent...

kernel: mm/huge_memory: fix dereferencing invalid pmd migration entry

In the Linux kernel, the following vulnerability has been resolved: mm/hugememory: fix dereferencing invalid pmd migration entry When migrating a THP, concurrent access to the PMD migration entry during a deferred split scan can lead to an invalid address access, as illustrated below. To prevent...

SUSE-SU-2025:02428-1 Security update for the Linux Kernel (Live Patch 48 for SLE 15 SP3)

This update for the Linux Kernel 5.3.18-15030059174 fixes several issues. The following security issues were fixed: - CVE-2024-53146: NFSD: Prevent a potential integer overflow bsc1234854. - CVE-2022-49465: blk-throttle: Set BIOTHROTTLED when bio has been throttled bsc1238920. - CVE-2024-53214:...

SUSE-SU-2025:02411-1 Security update for the Linux Kernel RT (Live Patch 4 for SLE 15 SP6)

This update for the Linux Kernel 6.4.0-1506001014 fixes several issues. The following security issues were fixed: - CVE-2024-53146: NFSD: Prevent a potential integer overflow bsc1234854. - CVE-2024-53214: vfio/pci: Properly hide first-in-list PCIe extended capability bsc1235005. - CVE-2024-53173:...

CVE-2025-7933: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in Campcodes Sales and Inventory System 1.0. This vulnerability affects unknown code of the file /pages/settingsupdate.php of the component Setting Handler. The manipulation of the argument ID leads to sql injection. The attack can be initiated...

Important: Red Hat Security Advisory: tomcat security update

An update for tomcat is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Amazon warns 200 million Prime customers that scammers are after their login info

Amazon has sent out an alert to its 200 million customers, warning them that scammers are impersonating Amazon in a Prime membership scam. In the email, sent earlier this month, Amazon said it had noticed an increase in reports about fake Amazon emails: What 's happening: Scammers are sending fak...

WordPress plugin JetSearch has a cross-site scripting vulnerability

WordPress JetSearch is an AJAX-based search plugin for WordPress , designed for Elementor editor , providing a fast , flexible and beautiful search experience . WordPress JetSearch suffers from a cross-site scripting vulnerability that stems from improper input neutralization, which can be...