The vulnerability of the HS256 algorithm implementation in the Knowledge Space integrated planning platform lies in the use of weak credentials. This allows a hacker to gain full access to the platform.

The vulnerability of the HS256 algorithm implementation in the Knowledge Space integrated planning platform lies in the use of weak authentication data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain full access to the platform...

Using Valgrind on Chrome

Brief script that demonstrates running valgrind and afl-fuzz on Google Chrome. This favorite code for security auditing and memory leak detection with Valgrind runs the Valgrind tool and several other tools to check for memory leaks, which can lead to resource buffer overflows and more. Exploit /...

CVE-2025-0426

A security issue was discovered in Kubernetes where a large number of container checkpoint requests made to the unauthenticated kubelet read-only HTTP endpoint may cause a Node Denial of Service by filling the Node's disk...

CVE-2025-0426

A security issue was discovered in Kubernetes where a large number of container checkpoint requests made to the unauthenticated kubelet read-only HTTP endpoint may cause a Node Denial of Service by filling the Node's disk...

CVE-2025-0426

A security issue was discovered in Kubernetes where a large number of container checkpoint requests made to the unauthenticated kubelet read-only HTTP endpoint may cause a Node Denial of Service by filling the Node's disk...

[SECURITY] Fedora 40 Update: s390utils-2.33.1-4.fc40

This is a meta package for installing the default s390-tools sub packages. If you do not need all default sub packages, it is recommended to install the required sub packages separately. The s390utils packages contain a set of user space utilities that should to be used together with the zSeries...

[SECURITY] Fedora 40 Update: keyring-ima-signer-0.1.0-17.fc40

The IMA Integrity Measurement Architecture is a key component of the Linux integrity subsystem designed to ensure integrity, authenticity, and confidentiality of systems including hardware root of trusts TPM. This tool allows signing of files in userspace, inclusding options of including the...

SUSE CVE-2025-21699

In the Linux kernel, the following vulnerability has been resolved: gfs2: Truncate address space when flipping GFS2DIFJDATA flag Truncate an inode's address space when flipping the GFS2DIFJDATA flag: depending on that flag, the pages in the address space will either use buffer heads or...

CVE-2025-21699

In the Linux kernel, the following vulnerability has been resolved: gfs2: Truncate address space when flipping GFS2DIFJDATA flag Truncate an inode's address space when flipping the GFS2DIFJDATA flag: depending on that flag, the pages in the address space will either use buffer heads or...

AZL-56843 CVE-2025-21699 affecting package kernel for versions less than 6.6.76.1-1

In the Linux kernel, the following vulnerability has been resolved: gfs2: Truncate address space when flipping GFS2DIFJDATA flag Truncate an inode's address space when flipping the GFS2DIFJDATA flag: depending on that flag, the pages in the address space will either use buffer heads or...

DEBIAN-CVE-2025-21699

In the Linux kernel, the following vulnerability has been resolved: gfs2: Truncate address space when flipping GFS2DIFJDATA flag Truncate an inode's address space when flipping the GFS2DIFJDATA flag: depending on that flag, the pages in the address space will either use buffer heads or...

UBUNTU-CVE-2025-21699

In the Linux kernel, the following vulnerability has been resolved: gfs2: Truncate address space when flipping GFS2DIFJDATA flag Truncate an inode's address space when flipping the GFS2DIFJDATA flag: depending on that flag, the pages in the address space will either use buffer heads or...

CVE-2025-21699

CVE-2025-21699 is a Linux kernel issue in the gfs2 component. The flaw arises when truncating an inode’s address space while flipping the GFS2_DIF_JDATA flag; depending on the flag, the pages in the address space are managed either by buffer heads or by iomap_folio_state structs, and the memory m...

CVE-2025-21699

In the Linux kernel, the following vulnerability has been resolved: gfs2: Truncate address space when flipping GFS2DIFJDATA flag Truncate an inode's address space when flipping the GFS2DIFJDATA flag: depending on that flag, the pages in the address space will either use buffer heads or...

CVE-2025-21699 gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag

In the Linux kernel, the following vulnerability has been resolved: gfs2: Truncate address space when flipping GFS2DIFJDATA flag Truncate an inode's address space when flipping the GFS2DIFJDATA flag: depending on that flag, the pages in the address space will either use buffer heads or...

CVE-2025-21699 gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag

In the Linux kernel, the following vulnerability has been resolved: gfs2: Truncate address space when flipping GFS2DIFJDATA flag Truncate an inode's address space when flipping the GFS2DIFJDATA flag: depending on that flag, the pages in the address space will either use buffer heads or...

CVE-2024-13665

The Admire Extra plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'space' shortcode in all versions up to, and including, 1.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attacker...

Atlassian Confluence Public Space Detected

Atlassian Confluence uses spaces to organize content into meaningful categories. Every space has its own set of permissions to control access to its content. By setting a space public, an administrator can make its content available to anyone inside or outside the organization. No source data...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from not truncating the address space when flipping the GFS2DIFJDATA flag. An attacker exploiting this vulnerability...

PT-2025-6440 · WordPress · Admire Extra

Name of the Vulnerable Software and Affected Versions: Admire Extra plugin for WordPress versions up to, and including, 1.6 Description: The issue arises from insufficient input sanitization and output escaping on user-supplied attributes in the plugin's 'space' shortcode, allowing authenticated...