3552 matches found
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987174)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987174 advisory. In the Linux kernel, the following vulnerability has been resolved: libbpf: Handle size overflow for ringbuf mmap The maximum size of ringbuf is 2GB on x86-64 host, ...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986550)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986550 advisory. In the Linux kernel, the following vulnerability has been resolved: media: dvb-frontends: tda10048: Fix integer overflow state-xtalhz can be up to 16M, so it can...
Unity Linux 20.1070a Security Update: firefox (UTSA-2025-987427)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987427 advisory. On arm64, a WASM brtable instruction with a lot of entries could lead to the label being too far from the instruction causing truncation and incorrect computation of...
CVE-2025-11346
The CVE concerns ILIAS up to versions 8.23/9.13/10.1 where the Base64 Decoding Handler’s unserialize function is exploitable by manipulating the f_settings argument, enabling deserialization and a remote attack. The issue’s root cause is improper handling of f_settings in the unserialize flow. Im...
USN-7801-2: Linux kernel (Oracle) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - x86 architecture; - Compute Acceleration Framework; - Bus devices; - AM...
uscc-binary-exploits
Binary Exploitation Framework A comprehensive collection of t...
PT-2025-40943
Name of the Vulnerable Software and Affected Versions ILIAS versions prior to 8.24 ILIAS versions prior to 9.14 ILIAS versions prior to 10.2 Description A flaw exists in ILIAS related to the unserialize function within the Base64 Decoding Handler component. Manipulation of the f settings argument...
PT-2025-40853
Name of the Vulnerable Software and Affected Versions The Ultimate Addons for Elementor Formerly Elementor Header & Footer Builder versions prior to 2.5.0 Description The software does not properly sanitize SVG file contents when uploaded. This occurs when using the xmlrpc.php endpoint with base6...
EUVD-2021-34353
Malicious code in bioql PyPI...
EUVD-2025-31209
Malicious code in bioql PyPI...
EUVD-2025-31728
Malicious code in bioql PyPI...
EUVD-2022-55432
Malicious code in bioql PyPI...
EUVD-2022-55488
Malicious code in bioql PyPI...
EUVD-2025-25674
Malicious code in bioql PyPI...
EUVD-2022-55245
Malicious code in bioql PyPI...
EUVD-2025-31947
Malicious code in bioql PyPI...
EUVD-2025-30863
Malicious code in bioql PyPI...
📄 ERPNext 15.67.0 / Frappe 15.72.4 Cross Site Scripting
ERPNext version 15.67.0 and Frappe version 15.72.4 suffer from a persistent cross site scripting vulnerability. CVE-2025-56379 — Stored Cross-Site Scripting XSS in ERPNext 15.67.0 / Frappe 15.72.4 📌 Summary A stored Cross‑Site Scripting XSS vulnerability exists in the Blog module of ERPNext...
PT-2025-40531
TCL 65C655 Smart TV, running firmware version V8-R75PT01-LF1V269.001116 Android TV, Kernel 5.4.242+, is vulnerable to a blind, unauthenticated Server-Side Request Forgery SSRF vulnerability via the UPnP MediaRenderer service AVTransport:1. The device accepts unauthenticated SetAVTransportURI SOAP...
CVE-2025-56379
A stored cross-site scripting XSS vulnerability in the blog post feature of ERPNEXT v15.67.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the content field...