PT-2025-21263 · Unknown · Pgina.Fork

Name of the Vulnerable Software and Affected Versions: pGina.Fork versions 3.9.9.12 and earlier Description: The issue allows authentication bypass when an adversary controls DNS resolution for pginaloginserver. This occurs due to a flaw in the HttpAuth plugin. Recommendations: For versions...

CVE-2025-48027

The CVE-2025-48027 entry concerns the HttpAuth plugin in pGina.Fork up to version 3.9.9.12. Affected component is the HttpAuth plugin used by pGina.Fork; root cause is authentication bypass when an adversary controls DNS resolution for pginaloginserver. Documents from multiple sources confirm the...

Mozilla Thunderbird 安全漏洞

Mozilla Thunderbird is a suite of e-mail client software from the Mozilla Foundation in the United States that is separate from the Mozilla Application Suite. The software supports the IMAP and POP mail protocols as well as the HTML mail format. A security vulnerability exists in Mozilla...

Alibaba Cloud Linux 3 : 0138: python-dns (ALINUX3-SA-2024:0138)

The remote Alibaba Cloud Linux 3 host has a package installed that is affected by a vulnerability as referenced in the ALINUX3-SA-2024:0138 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2023-29483: eventlet before 0.35.2, as used in...

CVE-2025-20003

Improper link resolution before file access 'Link Following' for some IntelR Graphics Driver software installers may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-20003

CVE-2025-20003 describes a local privilege-escalation in Intel Graphics Driver installers due to improper link resolution before file access (Link Following). Affected products include Intel® Graphics Drivers for Arc, Arc Pro, Data Center GPU Flex, and Iris Xe, plus older Core/Atom families; root...

CVE-2025-20003

Improper link resolution before file access 'Link Following' for some IntelR Graphics Driver software installers may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-29975

Improper link resolution before file access 'link following' in Microsoft PC Manager allows an authorized attacker to elevate privileges locally...

CVE-2025-29975

Improper link resolution before file access 'link following' in Microsoft PC Manager allows an authorized attacker to elevate privileges locally...

2025-05 Cumulative Update for Windows 10 Version 21H2 for x86-based Systems (KB5058379)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...

CVE-2025-29837

Technical details about CVE-2025-29837 (affected products, root cause, exploitability) are not publicly disclosed in the provided connected documents; no specifics on impact or remediation are available here.

CVE-2025-29975

CVE-2025-29975 affects Microsoft PC Manager on Windows. It stems from improper link resolution before file access ("link following"), enabling a locally authenticated attacker to elevate privileges. The root cause is a link-following flaw in the PC Manager component, with high impact to confident...

kernel: netfilter: xtables: avoid NFPROTO_UNSPEC where needed

In the Linux kernel, the following vulnerability has been resolved: netfilter: xtables: avoid NFPROTOUNSPEC where needed syzbot managed to call xtcluster match via ebtables: WARNING: CPU: 0 PID: 11 at net/netfilter/xtcluster.c:72 xtclustermt+0x196/0x780 .. ebtdotable+0x174b/0x2a40 Module register...

Windows Installer Information Disclosure Vulnerability

Improper link resolution before file access 'link following' in Windows Installer allows an authorized attacker to disclose information locally...

PT-2025-20952 · Microsoft · Windows Installer +1

Name of the Vulnerable Software and Affected Versions: Windows Installer affected versions not specified Description: The issue is related to improper link resolution before file access, also known as 'link following', in Windows Installer. This allows an authorized attacker to disclose informati...

Intel Graphics Drivers 后置链接漏洞

Intel Graphics Drivers is an integrated graphics driver from Intel Corporation USA. Intel Graphics Drivers suffers from a back-link vulnerability that stems from improper link resolution and could lead to elevation of privilege via local access...

PT-2025-20977 · Microsoft · Pcmanager

Name of the Vulnerable Software and Affected Versions: Microsoft PC Manager affected versions not specified Description: The issue is related to improper link resolution before file access, also known as 'link following', in Microsoft PC Manager. This allows an authorized attacker to elevate...

PT-2025-21063 · Intel · Intel Graphics Driver

Name of the Vulnerable Software and Affected Versions: IntelR Graphics Driver affected versions not specified Description: The issue concerns improper link resolution before file access, also known as "Link Following", in some IntelR Graphics Driver software installers. This may allow an...

CVE-2025-1079 RCE In Google Web Designer

Client RCE on macOS and Linux via improper symbolic link resolution in Google Web Designer's preview feature...

PAM: Multiple Vulnerabilities

Background PAM Pluggable Authentication Modules is an architecture allowing the separation of the development of privilege granting software from the development of secure and appropriate authentication schemes. Description Multiple vulnerabilities have been discovered in PAM. Please review the C...