Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: xsk: Fix race condition in AFXDP generic RX path CVE-2025-37920 In the Linux kernel, the following vulnerability has been resolved: virtio: break and reset virtio devices on deviceshutdown CVE-2025-38064 In the...

Linux Distros Unpatched Vulnerability : CVE-2024-26727

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: btrfs: do not ASSERT if the newly created subvolume already got read BUG There is a syzbot...

Linux Distros Unpatched Vulnerability : CVE-2021-47439

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net: dsa: microchip: Added the condition for scheduling kszmibreadwork When the ksz module i...

CVE-2025-55138

LinkJoin through 882f196 mishandles token ownership in password reset...

CVE-2025-55137

LinkJoin through 882f196 mishandles lacks type checking in password reset...

Facebook users targeted in ‘login’ phish

A few weeks ago we warned our readers of a phishing campaign targeting Instagram users that didn’t resort to the usual links to phishing websites, but used mailto: links instead. Now, it seems that these scammers have turned their attention to Facebook users. It works like this: The target receiv...

CVE-2025-55137

LinkJoin through 882f196 mishandles lacks type checking in password reset...

CVE-2025-55137

CVE-2025-55137 affects LinkJoin (versions up to and including 882f196). The vulnerability arises from lack of type checking in the password reset functionality, per multiple sources (CVE entry and Red Hat/CVE listings). Base metrics indicate CVSSv3.1: AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N (base sco...

Linux Distros Unpatched Vulnerability : CVE-2021-39657

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In ufshcdehdeviceresethandler of ufshcd.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure...

LinkJoin 安全漏洞

LinkJoin is a virtual course and meeting software by the individual developer Seth Raphael. A security vulnerability exists in LinkJoin version 882f196 that stems from improper handling of token ownership in the password reset feature...

PT-2025-32271 · Linkjoin · Linkjoin

Name of the Vulnerable Software and Affected Versions: LinkJoin versions through 882f196 Description: LinkJoin lacks type checking in the password reset functionality. Recommendations: Apply updates to versions prior to 882f196...

LinkJoin 安全漏洞

LinkJoin is a virtual course and meeting software from the individual developer Seth Raphael. A security vulnerability exists in LinkJoin version 882f196, which stems from a lack of type checking in the password reset function...

CVE-2025-55138

CVE-2025-55138 concerns LinkJoin versions through 882f196, where the password-reset flow mishandles token ownership. This is a network-accessible issue with high impact on confidentiality and integrity (CVSS 7.4, HIGH). Connected sources identify the root cause as improper token ownership handlin...

Linux Distros Unpatched Vulnerability : CVE-2022-49758

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - reset: uniphier-glue: Fix possible null-ptr-deref It will cause null-ptr-deref when resourcesizeres invoked, if platformgetresource returns NULL. CVE-2022-49758...

CVE-2025-55137

LinkJoin through 882f196 mishandles lacks type checking in password reset...

CVE-2025-55138

LinkJoin through 882f196 mishandles token ownership in password reset...

Linux Distros Unpatched Vulnerability : CVE-2024-26847

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: powerpc/rtas: use correct function name for resetting TCE tables The PAPR spec spells the...

PT-2025-32272 · Linkjoin · Linkjoin

Name of the Vulnerable Software and Affected Versions: LinkJoin versions through 882f196 Description: LinkJoin mishandles token ownership in the password reset functionality. Recommendations: Update LinkJoin to a version beyond 882f196...

CVE-2025-55138

LinkJoin through 882f196 mishandles token ownership in password reset...

Fixed in Apache Tomcat 10.1.44

Important: DoS in HTTP/2 due to client triggered stream reset CVE-2025-48989 Tomcat's HTTP/2 implementation was vulnerable to the made you reset attack. The denial of service typically manifested as an OutOfMemoryError. This was fixed with commit 73c04a10. This issue was reported to the ASF...