CVE-2025-69417: Incorrect Authorization

In the plex.tv backend for Plex Media Server PMS through 2025-12-31, a non-server device token can retrieve share tokens intended for unrelated access via a sharedservers endpoint...

glusterfs: I/O to arbitrary devices on storage server

It was found that the "mknod" call derived from mknod2 can create files pointing to devices on a glusterfs server node. An authenticated attacker could use this to create an arbitrary device and read data from any device attached to the glusterfs server node...

PT-2018-13933

Name of the Vulnerable Software and Affected Versions LG SuperSign CMS affected versions not specified Description The issue allows remote attackers to execute arbitrary code via the sourceUri parameter to "qsr server/device/getThumbnail" API endpoint. Recommendations At the moment, there is no...

PT-2018-13695

Name of the Vulnerable Software and Affected Versions LG SuperSign CMS affected versions not specified Description The issue allows LG TVs to be rebooted remotely without authentication. This can be achieved by sending a direct HTTP request to the /qsr server/device/reboot API endpoint on port...

Linux news 20.07.00

Linux 2.0.39pre6 Вышла новая pre-версия очередного ядра из старой стабильной серии: Linux 2.0.39pre6. Подробнее: Linux Kernel pre-patch 2.4.0 test5-pre3 Вышел очередной, третий по счету, пятого тестового ядра Linux - Linux Kernel 2.4.0. Подробнее: ftp://ftp.funet.fi/pub/linux/kernel/testing Kerne...