CVE-2025-26603

Vim is a greatly improved version of the good old UNIX editor Vi. Vim allows to redirect screen messages using the :redir ex command to register, variables and files. It also allows to show the contents of registers using the :registers or :display ex command. When redirecting the output of...

CVE-2025-26603: Use After Free

Vim is a greatly improved version of the good old UNIX editor Vi. Vim allows to redirect screen messages using the :redir ex command to register, variables and files. It also allows to show the contents of registers using the :registers or :display ex command. When redirecting the output of...

Improper Validation of Specified Type of Input

Overview keylime is a TPM-based key bootstrapping and system integrity measurement system for cloud Affected versions of this package are vulnerable to Improper Validation of Specified Type of Input due to the registrar process. An attacker can cause the application to fail by populating the...

SUSE CVE-2023-0045

The current implementation of the prctl syscall does not issue an IBPB immediately during the syscall. The ibprctlset function updates the Thread Information Flags TIFs for the task and updates the SPECCTRL MSR on the function speculationctrlupdate, but the IBPB is only issued on the next schedul...

PT-2025-6451 · WordPress · Wp Ghost

Name of the Vulnerable Software and Affected Versions: The WP Ghost Hide My WP Ghost – Security & Firewall plugin for WordPress versions up to, and including, 5.3.02 Description: The issue is due to the plugin not properly restricting the "/wp-register.php" path, making it possible for...

PT-2025-10071

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A bug in the Linux kernel's KVM Kernel-based Virtual Machine implementation allows the guest's DR6 value to be clobbered when the guest modifies DR6 and then a fastpath VM-Exit occurs...

PT-2025-10068

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel has a flaw within the io uring/kbuf subsystem. Specifically, the IORING REGISTER PBUF RING function can reuse an old struct io buffer list if it was created for a legacy...

WordPress WP Job Board Pro plugin <= 1.2.76 - Unauthenticated Privilege Escalation via process_register vulnerability

Unauthenticated Privilege Escalation via processregister vulnerability discovered by Foxyyy in WordPress Plugin WP Job Board Pro versions = 1.2.76...

Astra Linux – Vulnerability in symfony

symfony/runtime is a module for the Symphony PHP framework that enables decoupling PHP applications from global state. When the registerargvargc PHP directive is set to on, and users call any URL with a specially crafted query string, they can change the environment or debug mode used by the kern...

OESA-2025-1097 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix potencial out-of-bounds when buffer offset is invalid I found potencial out-of-bounds when buffer offset fields of a few requests is invalid. This pat...

CVE-2024-25883

The mstatus register in RSD commit 3d13a updates incorrectly, leading to processing errors...

trojan 安全漏洞

trojan is a multi-user administration and deployment program by Jrohy Individual Developer, supporting web page administration. A security vulnerability exists in trojan versions v.2.0.0 through v.2.15.3, which is caused by elevation of privilege via the initialization interface /auth/register...

CVE-2024-55215

An issue in trojan v.2.0.0 through v.2.15.3 allows a remote attacker to escalate privileges via the initialization interface /auth/register...

CVE-2024-55215: Incorrect Default Permissions

An issue in trojan v.2.0.0 through v.2.15.3 allows a remote attacker to escalate privileges via the initialization interface /auth/register...

CVE-2024-25883

The mstatus register in RSD commit 3d13a updates incorrectly, leading to processing errors...

CVE-2024-25883

The mstatus register in RSD commit 3d13a updates incorrectly, leading to processing errors...

Astra Linux - уязвимость в linux-5.10

In the Linux kernel, the following vulnerability has been resolved: arm64: mops: Do not dereference src reg for a set operation The source register is not used for SET and reading it can result in a UBSAN out-of-bounds array access error, specifically when the MOPS exception is taken from a SET...

PT-2025-5880

Name of the Vulnerable Software and Affected Versions RSD commit 3d13a Description The issue arises from the incorrect update of the mstatus register in the RSD commit 3d13a, leading to processing errors. Recommendations For RSD commit 3d13a, consider temporarily disabling the processing...

PT-2025-5889

Name of the Vulnerable Software and Affected Versions Microsoft Edge Chromium-based affected versions not specified Description The issue is related to insufficient granularity of address spaces protected by register blocking, which can be exploited by a remote attacker to execute arbitrary code...

CVE-2024-25883

The RSD application (part of the rsd-devel open source) is affected by an incorrect update of the mstatus register in commit 3d13a . This flaw leads to processing errors within the system. As a mitigation, it is recommended to temporarily disable processing functionality related to the mstatus re...