CVE-2025-7686 weichuncai(WP伪春菜) <= 1.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting

The weichuncaiWP伪春菜 plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.5. This is due to missing or incorrect nonce validation on the sm-options.php page. This makes it possible for unauthenticated attackers to update settings and inject...

CVE-2025-7686 weichuncai(WP伪春菜) <= 1.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting

The weichuncaiWP伪春菜 plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.5. This is due to missing or incorrect nonce validation on the sm-options.php page. This makes it possible for unauthenticated attackers to update settings and inject...

Open5GS Denial of Service Vulnerability (CNVD-2025-18567)

Open5GS is Open5GS open source an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. Open5GS suffers from a denial of service vulnerability, which can be exploited by an attacker to cause a denial of service via the function gmmstateexception in the file...

Malicious code in @zalastax/nolb-react-sm (npm)

The package @zalastax/nolb-react-sm was found to contain malicious code...

MAL-2025-13768 Malicious code in @zalastax/nolb-react-sm (npm)

The package @zalastax/nolb-react-sm was found to contain malicious code...

Malicious code in @zalastax/nolb-node-sm (npm)

The package @zalastax/nolb-node-sm was found to contain malicious code...

MAL-2025-10431 Malicious code in @zalastax/nolb-_sm- (npm)

The package @zalastax/nolb-sm- was found to contain malicious code...

Malicious code in sm-tracker (npm)

The package sm-tracker was found to contain malicious code...

Malicious code in @zalastax/nolb-_sm- (npm)

The package @zalastax/nolb-sm- was found to contain malicious code...

Malicious code in sm-app (npm)

The package sm-app was found to contain malicious code...

MAL-2025-33438 Malicious code in sm-app (npm)

The package sm-app was found to contain malicious code...

MAL-2025-33439 Malicious code in sm-tracker (npm)

The package sm-tracker was found to contain malicious code...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a post-release reuse issue in dmthin in dmsmregisterthresholdcallback...

CVE-2023-26076

An issue was discovered in Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 1280, Exynos 2200, Exynos Modem 5123, Exynos Modem 5300, and Exynos Auto T5123. An intra-object overflow in the 5G SM message codec can occur due to insufficient parameter validation when decoding reserved...

CISA Releases Thirteen Industrial Control Systems Advisories

CISA released thirteen Industrial Control Systems ICS advisories on May 20, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-140-01 ABUP IoT Cloud Platform ICSA-25-140-02 National Instruments Circuit Design Sui...

CVE-2025-41450

Improper Authentication vulnerability in Danfoss AKSM8xxA Series.This issue affects Danfoss AK-SM 8xxA Series prior to version 4.2...

CVE-2025-41450 Authentication bypass with privileged access in Danfoss AK-SM 8xxA Series prior to version 4.2

Improper Authentication vulnerability in Danfoss AKSM8xxA Series.This issue affects Danfoss AK-SM 8xxA Series prior to version 4.2...

CVE-2025-41450 Authentication bypass with privileged access in Danfoss AK-SM 8xxA Series prior to version 4.2

Improper Authentication vulnerability in Danfoss AKSM8xxA Series.This issue affects Danfoss AK-SM 8xxA Series prior to version 4.2...

PT-2025-20370 · Danfoss · Danfoss Ak-Sm 8Xxa Series

Name of the Vulnerable Software and Affected Versions: Danfoss AK-SM 8xxA Series versions prior to 4.2 Description: The issue is related to an improper authentication vulnerability in the Danfoss AKSM8xxA Series. This vulnerability affects the Danfoss AK-SM 8xxA Series prior to version 4.2...

Security update for pam_u2f

This update for pamu2f fixes the following issues: CVE-2025-23013: Fixed problematic PAMIGNORE return values in pamsmauthenticatebsc1233517. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you ca...