20970 matches found
CVE-2025-55137
LinkJoin through 882f196 mishandles lacks type checking in password reset...
Linux Distros Unpatched Vulnerability : CVE-2023-52353
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Mbed TLS through 3.5.1. In mbedtlssslsessionreset, the maximum negotiable TLS version is mishandled. For example, if the last...
Linux Distros Unpatched Vulnerability : CVE-2025-37861
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue When the task management thread processes reply queues while the reset thread resets...
Linux Distros Unpatched Vulnerability : CVE-2025-23130
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - f2fs: fix to avoid panic once fallocation fails for pinfile syzbot reports a f2fs bug as below: ------------ cut here ------------ kernel BUG at...
Linux Distros Unpatched Vulnerability : CVE-2022-49936
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - USB: core: Prevent nested device-reset calls Automatic kernel fuzzing revealed a recursive locking violation in usb-storage:...
CVE-2025-4796
The Eventin plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 4.0.34. This is due to the plugin not properly validating a user's identity or capability prior to updating their details like email in the...
CVE-2025-52586
The CVE-2025-52586 issue affects EG4 Electronics EG4 Inverters, where MOD3 command traffic between the monitoring application and the inverter is transmitted in plaintext. The root impact described across sources is interception, manipulation, replay, or forging of sensitive commands/data (voltag...
Linux Distros Unpatched Vulnerability : CVE-2024-26727
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: btrfs: do not ASSERT if the newly created subvolume already got read BUG There is a syzbot...
Linux Distros Unpatched Vulnerability : CVE-2021-47439
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ubuntu Linux - In the Linux kernel, the following vulnerability has been resolved: net: dsa: microchip: Added the condition for scheduling kszmibreadwork When t...
PT-2025-32390
Name of the Vulnerable Software and Affected Versions Eventin versions through 4.0.34 Description The Eventin plugin for WordPress is susceptible to privilege escalation, potentially leading to account takeover. This occurs because the plugin does not adequately validate a user’s identity or...
Important: kernel
Issue Overview: In the Linux kernel, the following vulnerability has been resolved: xsk: Fix race condition in AFXDP generic RX path CVE-2025-37920 In the Linux kernel, the following vulnerability has been resolved: virtio: break and reset virtio devices on deviceshutdown CVE-2025-38064 In the...
CVE-2025-55138
LinkJoin through 882f196 mishandles token ownership in password reset...
CVE-2025-55137
LinkJoin through 882f196 mishandles lacks type checking in password reset...
Facebook users targeted in ‘login’ phish
A few weeks ago we warned our readers of a phishing campaign targeting Instagram users that didn’t resort to the usual links to phishing websites, but used mailto: links instead. Now, it seems that these scammers have turned their attention to Facebook users. It works like this: The target receiv...
Linux Distros Unpatched Vulnerability : CVE-2021-39657
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In ufshcdehdeviceresethandler of ufshcd.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure...
CVE-2025-55138
LinkJoin through 882f196 mishandles token ownership in password reset...
Linux Distros Unpatched Vulnerability : CVE-2022-49758
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - reset: uniphier-glue: Fix possible null-ptr-deref It will cause null-ptr-deref when resourcesizeres invoked, if platformgetresource returns NULL. CVE-2022-49758...
LinkJoin security vulnerability
LinkJoin is a virtual course and meeting software from the individual developer Seth Raphael. A security vulnerability exists in LinkJoin version 882f196, which stems from a lack of type checking in the password reset function...
CVE-2025-55138
CVE-2025-55138 concerns LinkJoin versions through 882f196, where the password-reset flow mishandles token ownership. This is a network-accessible issue with high impact on confidentiality and integrity (CVSS 7.4, HIGH). Connected sources identify the root cause as improper token ownership handlin...
