Lucene search
+L

6185 matches found

osv_debian
osv_debian
•added 2025/06/18 11:15 a.m.•14 views

DEBIAN-CVE-2022-50096

In the Linux kernel, the following vulnerability has been resolved: x86/kprobes: Update kcb status flag after singlestepping Fix kprobes to update kcb kprobes control block status flag to KPROBEHITSSDONE even if the kp-posthandler is not set. This bug may cause a kernel panic if another INT3 user...

5.5CVSS5.4AI score0.00239EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2025/06/18 11:15 a.m.•15 views

UBUNTU-CVE-2022-50096

In the Linux kernel, the following vulnerability has been resolved: x86/kprobes: Update kcb status flag after singlestepping Fix kprobes to update kcb kprobes control block status flag to KPROBEHITSSDONE even if the kp-posthandler is not set. This bug may cause a kernel panic if another INT3 user...

5.5CVSS6AI score0.00239EPSS
SaveExploits0References7
CVE
CVE
•added 2025/06/18 11:02 a.m.•79 views

CVE-2022-50096

CVE-2022-50096 – Linux kernel (x86/kprobes) : The issue arises from kprobes not correctly updating the kcb status flag after single-stepping, which could cause a kernel panic if another INT3 user runs immediately after due to misinterpretation of INT3 as kprobe single-stepping. The connected docu...

5.5CVSS6.4AI score0.00239EPSS
SaveExploits0References5Affected Software1
osv_debian
osv_debian
•added 2025/06/18 10:15 a.m.•10 views

DEBIAN-CVE-2025-38042

In the Linux kernel, the following vulnerability has been resolved: dmaengine: ti: k3-udma-glue: Drop skipfdq argument from k3udmaglueresetrxchn The user of k3udmaglueresetrxchn e.g. tiam65cpswnuss can run on multiple platforms having different DMA architectures. On some platforms there can be on...

5.5CVSS5.2AI score0.00159EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2025/06/18 10:15 a.m.•18 views

UBUNTU-CVE-2025-38042

In the Linux kernel, the following vulnerability has been resolved: dmaengine: ti: k3-udma-glue: Drop skipfdq argument from k3udmaglueresetrxchn The user of k3udmaglueresetrxchn e.g. tiam65cpswnuss can run on multiple platforms having different DMA architectures. On some platforms there can be on...

5.5CVSS6.3AI score0.00159EPSS
SaveExploits0References12
GithubExploit
GithubExploit
•added 2025/06/15 12:42 p.m.•260 views

Exploit for Missing Authentication for Critical Function in Erlang Erlang\/Otp

VIETNAMESE - Cách sử dụng - Quét một IP: python3...

10CVSS8.3AI score0.98786EPSS
SaveExploits39
RedhatCVE
RedhatCVE
•added 2025/06/14 9:12 a.m.•21 views

CVE-2025-6003

The WordPress Single Sign-On SSO plugin for WordPress is vulnerable to unauthorized access due to a misconfigured capability check on a function in all versions up to, and including, the .5.3 versions of the plugin. This makes it possible for unauthenticated attackers to extract sensitive data...

5.3CVSS5.4AI score0.00299EPSS
SaveExploits0References1
Packet Storm News
Packet Storm News
•added 2025/06/13 12:00 a.m.•18 views

Computational Attestations of Polynomial Integrity Towards Verifiable Machine-Learning

Machine-learning systems continue to advance at a rapid pace, demonstrating remarkable utility in various fields and disciplines. As these systems continue to grow in size and complexity, a nascent industry is emerging which aims to bring machine-learning-as-a-service MLaaS to market. Outsourcing...

6.9AI score
SaveExploits0
The Hacker News
The Hacker News
•added 2025/06/12 1:52 p.m.•14 views

New TokenBreak Attack Bypasses AI Moderation with Single-Character Text Changes

Cybersecurity researchers have discovered a novel attack technique called TokenBreak that can be used to bypass a large language model's LLM safety and content moderation guardrails with just a single character change. "The TokenBreak attack targets a text classification model's tokenization...

5.6AI score
SaveExploits0
Vulnrichment
Vulnrichment
•added 2025/06/12 8:22 a.m.•9 views

CVE-2025-6003 WordPress Single Sign-On (SSO) - Multiple Versions - Incorrect Authorization to Sensitive Information Exposure

The WordPress Single Sign-On SSO plugin for WordPress is vulnerable to unauthorized access due to a misconfigured capability check on a function in all versions up to, and including, the .5.3 versions of the plugin. This makes it possible for unauthenticated attackers to extract sensitive data...

5.3CVSS6.8AI score0.00299EPSS
SaveExploits0References2
CVE
CVE
•added 2025/06/12 8:22 a.m.•94 views

CVE-2025-6003

The CVE-2025-6003 entry concerns the WordPress Single Sign-On (SSO) plugin. According to provided documents, the issue is an unauthorized access risk caused by a misconfigured capability check in a function, leading unauthenticated attackers to access data restricted to certain users/roles. Affec...

5.3CVSS6.8AI score0.00299EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/06/12 8:22 a.m.•35 views

CVE-2025-6003 WordPress Single Sign-On (SSO) - Multiple Versions - Incorrect Authorization to Sensitive Information Exposure

The WordPress Single Sign-On SSO plugin for WordPress is vulnerable to unauthorized access due to a misconfigured capability check on a function in all versions up to, and including, the .5.3 versions of the plugin. This makes it possible for unauthenticated attackers to extract sensitive data...

5.3CVSS0.00299EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2025/06/12 6:42 a.m.•29 views

WordPress OAuth Single Sign On (SSO) plugin <= 18.5.3 - Incorrect Authorization to Sensitive Information Exposure vulnerability

Incorrect Authorization to Sensitive Information Exposure vulnerability discovered by Israël Hallé Flare - Flare in WordPress Plugin OAuth Single Sign On - SSO OAuth Client versions = 18.5.3...

5.3CVSS6.8AI score0.00299EPSS
SaveExploits0References1Affected Software1
Packet Storm News
Packet Storm News
•added 2025/06/12 12:00 a.m.•13 views

TimberStrike: Dataset Reconstruction Attack Revealing Privacy Leakage in Federated Tree-Based Systems

Federated Learning has emerged as a privacy-oriented alternative to centralized Machine Learning, enabling collaborative model training without direct data sharing. While extensively studied for neural networks, the security and privacy implications of tree-based models remain underexplored. This...

6.9AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/12 12:00 a.m.•8 views

CVE-2025-6003: Incorrect Authorization

The WordPress Single Sign-On SSO plugin for WordPress is vulnerable to unauthorized access due to a misconfigured capability check on a function in all versions up to, and including, the .5.3 versions of the plugin. This makes it possible for unauthenticated attackers to extract sensitive data...

5.3CVSS5.5AI score0.00299EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/06/12 12:00 a.m.•14 views

WordPress plugin Single Sign-On (SSO) 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an...

5.3CVSS5.2AI score0.00299EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/06/12 12:00 a.m.•18 views

PT-2025-25285 · WordPress · Wordpress Single Sign-On (Sso) Plugin

Name of the Vulnerable Software and Affected Versions: WordPress Single Sign-On SSO plugin for WordPress versions prior to 5.3 Description: The issue is related to a misconfigured capability check on a function, allowing unauthorized access. This enables unauthenticated attackers to extract...

5.3CVSS5.2AI score0.00299EPSS
SaveExploits0References9
osv_suse
osv_suse
•added 2025/06/11 12:04 p.m.•18 views

SUSE-SU-2025:01894-1 Security update for the Linux Kernel (Live Patch 24 for SLE 15 SP5)

This update for the Linux Kernel 5.14.21-1505005597 fixes several issues. The following security issues were fixed: - CVE-2024-58013: Bluetooth: MGMT: Fix slab-use-after-free Read in mgmtremoveadvmonitorsync bsc1239096. - CVE-2024-57996: netsched: schsfq: do not allow 1 packet limit bsc1239077...

7.8CVSS6.7AI score0.00275EPSS
SaveExploits0References5
The Hacker News
The Hacker News
•added 2025/06/11 11:25 a.m.•9 views

Why DNS Security Is Your First Defense Against Cyber Attacks?

In today’s cybersecurity landscape, much of the focus is placed on firewalls, antivirus software, and endpoint detection. While these tools are essential, one critical layer often goes overlooked: the Domain Name System DNS. As the starting point of nearly every online interaction, DNS is not onl...

5.8AI score
SaveExploits0
Packet Storm News
Packet Storm News
•added 2025/05/29 12:00 a.m.•33 views

Joint Data Hiding and Partial Encryption of Compressive Sensed Streams

The paper proposes a method to secure the Compressive Sensing CS streams. It consists in protecting part of the measurements by a secret key and inserting the code into the rest. The secret key is generated via a cryptographically secure pseudo-random number generator CSPRNG and XORed with the...

6.9AI score
SaveExploits0
Rows per page
Query Builder