CVE-2024-57541

Linksys E8450 v1.2.00.360516 was discovered to contain a buffer overflow vulnerability. The parsed field ipv6protectstatus is copied to the stack without length verification...

The vulnerability of Acronis Cyber Protect 16’s data protection software lies in the lack of measures taken to protect the structure of web pages. This allows attackers to carry out XSS attacks.

The vulnerability of Acronis Cyber Protect 16 data protection software is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

CVE-2025-23435

Cross-Site Request Forgery CSRF vulnerability in marcucci Password Protect Plugin for WordPress password-protect-plugin-for-wordpress allows Stored XSS.This issue affects Password Protect Plugin for WordPress: from n/a through = 0.8.1.0...

CVE-2025-23435 WordPress Password Protect Plugin for WordPress plugin <= 0.8.1.0 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in David Marcucci Password Protect Plugin for WordPress allows Stored XSS.This issue affects Password Protect Plugin for WordPress: from n/a through 0.8.1.0...

CVE-2025-23435

CVE-2025-23435 describes a CSRF-driven Stored XSS in the Password Protect Plugin for WordPress. Affected: Password Protect Plugin for WordPress versions

WordPress Password Protect Plugin for WordPress plugin <= 0.8.1.0 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by SOPROBRO in WordPress Plugin Password Protect Plugin for WordPress versions = 0.8.1.0...

WordPress plugin Password Protect Plugin for WordPress 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

PT-2025-4878 · WordPress · Password Protect Plugin

Name of the Vulnerable Software and Affected Versions: Password Protect Plugin for WordPress versions 0.8.1.0 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended...

SUSE CVE-2024-53687

In the Linux kernel, the following vulnerability has been resolved: riscv: Fix IPIs usage in kfenceprotectpage flushtlbkernelrange may use IPIs to flush the TLBs of all the cores, which triggers the following warning when the irqs are disabled: 3.455330 WARNING: CPU: 1 PID: 0 at kernel/smp.c:815...

DEBIAN-CVE-2024-53687

In the Linux kernel, the following vulnerability has been resolved: riscv: Fix IPIs usage in kfenceprotectpage flushtlbkernelrange may use IPIs to flush the TLBs of all the cores, which triggers the following warning when the irqs are disabled: 3.455330 WARNING: CPU: 1 PID: 0 at kernel/smp.c:815...

UBUNTU-CVE-2024-53687

In the Linux kernel, the following vulnerability has been resolved: riscv: Fix IPIs usage in kfenceprotectpage flushtlbkernelrange may use IPIs to flush the TLBs of all the cores, which triggers the following warning when the irqs are disabled: 3.455330 WARNING: CPU: 1 PID: 0 at kernel/smp.c:815...

CVE-2024-53687 riscv: Fix IPIs usage in kfence_protect_page()

In the Linux kernel, the following vulnerability has been resolved: riscv: Fix IPIs usage in kfenceprotectpage flushtlbkernelrange may use IPIs to flush the TLBs of all the cores, which triggers the following warning when the irqs are disabled: 3.455330 WARNING: CPU: 1 PID: 0 at kernel/smp.c:815...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates in the RISC-V architecture in kfenceprotectpage, which may use IPIs when IRQs are disabled, resulting in a...

New PayPal Phishing Scam Exploits MS365 Tools and Genuine-Looking Emails

Fortinet uncovers a new PayPal phishing scam exploiting legitimate platform features. Learn how this sophisticated attack works and how to protect yourself from falling victim...

Android Security Bulletin-January 2025Stay organized with collectionsSave and categorize content based on your preferences.

The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Security patch levels of 2025-01-05 or later address all of these issues. To learn how to check a device's security patch level, see Check and update your Android version. Android partners are...

CVE-2024-56413

Missing session invalidation after user deletion. The following products are affected: Acronis Cyber Protect 16 Windows before build 39169...

CVE-2024-56414

Web installer integrity check used weak hash algorithm. The following products are affected: Acronis Cyber Protect 16 Windows before build 39169...

CVE-2024-55543

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect 16 Windows before build 39169...

CVE-2024-55543

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect 16 Windows before build 39169...

CVE-2024-55542

Local privilege escalation due to excessive permissions assigned to Tray Monitor service. The following products are affected: Acronis Cyber Protect 16 Linux, macOS, Windows before build 39169, Acronis Cyber Protect Cloud Agent Linux, macOS, Windows before build 35895...