UBUNTU-CVE-2023-53715

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: cfg80211: Pass the PMK in binary instead of hex Apparently the hex passphrase mechanism does not work on newer chips/firmware e.g. BCM4387. It seems there was a simple way of passing it in binary all along, so use...

CVE-2023-53715

CVE-2023-53715: In the Linux kernel wifi/brcmfmac cfg80211 path, the passphrase PMK is now passed in binary instead of hex to accommodate newer chips/firmware (e.g., BCM4387). The fix also clears the structure before setting the PMK to prevent leaking uninitialized stack contents to the device. O...

The vulnerability of the server-based geospatial information system, MapServer, related to the lack of measures taken to protect the SQL query structure, allows attackers to execute arbitrary code.

The vulnerability of the server-based geospatial information system, MapServer, is related to the lack of measures taken to protect the SQL query structure during the processing of the PropertyName parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotel...

The vulnerability of the PHP library PhpSpreadsheet, related to the lack of protection for website structure, allows attackers to execute arbitrary JavaScript code.

The vulnerability of the PHP library PhpSpreadsheet is related to the lack of protective measures for website structures. Exploiting this vulnerability allows a perpetrator to execute arbitrary JavaScript code remotely...

EUVD-2022-54716

In the Linux kernel, the following vulnerability has been resolved: cpufreq: governor: Use kobject release method to free dbsdata The struct dbsdata embeds a struct govattrset and the struct govattrset embeds a kobject. Since every kobject must have a release method and we can't use kfree to free...

The vulnerability of D-Link Nuclias Connect software for centralized control of wireless networks arises from the lack of protective measures for the website structure, allowing attackers to execute arbitrary code.

The vulnerability of D-Link Nuclias Connect wireless network management software is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the WordPress website content management system, related to the lack of measures taken to protect the website’s structure, allows attackers to perform cross-site scripting attacks.

The vulnerability of the WordPress website content management system is related to the lack of measures taken to protect the website’s structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

The vulnerability of the XWiki Rendering system, related to the lack of measures taken to protect the structure of web pages, allows attackers to perform cross-site scripting attacks.

The vulnerability of the XWiki Rendering system is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

The vulnerability of the XWiki Platform, a platform for creating collaborative web applications, relates to the lack of measures taken to protect the SQL query structure, allowing attackers to gain access to protected information.

The vulnerability of the XWiki Platform, a platform for creating collaborative web applications, lies in the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to the protected information...

The vulnerability of the XWiki Platform, a platform for creating collaborative web applications, relates to the lack of measures taken to protect the SQL query structure, allowing attackers to gain access to protected information.

The vulnerability of the XWiki Platform, a platform for creating collaborative web applications, lies in the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to the protected information...

The vulnerability of the Perl Data Structure Transformation Module in JSON Cpanel::JSON::XS, related to integer overflow, allows an attacker to execute arbitrary code.

The vulnerability of the Perl JSON data structure transformation module in Cpanel::JSON::XS is related to integer overflow during JSON data parsing. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

The vulnerability of the Naver Whale web browser arises from the lack of measures taken to protect the structure of web pages. This allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Naver Whale web browser exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information through a special...

The vulnerability of the Special:ApiSandbox component of the software for implementing the MediaWiki hypertext environment allows a attacker to perform XSS attacks.

The vulnerability of the Special:ApiSandbox component of the MediaWiki software environment relates to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

The vulnerability of the MultimediaViewer component of the software, which is used to implement the hypertext environment of MediaWiki, allows a attacker to carry out XSS attacks.

The vulnerability of the MultimediaViewer component of the MediaWiki software framework relates to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

0-DAY

0-DAYzero-day !Repo Statushttps://img.shields.io/badge/...

OESA-2025-2482 poppler security update

is a PDF rendering library. Security Fixes: Poppler 24.06.1 through 25.x before 25.04.0 allows stack consumption and a SIGSEGV via deeply nested structures within the metadata such as GTSPDFEVersion of a PDF document, e.g., a regular expression for a long pdfsubver string. This occurs in...

EUVD-2025-34779

An integer overflow vulnerability exists in the QuickJS regular expression engine libregexp due to an inconsistent representation of the bytecode buffer size. The regular expression bytecode is stored in a DynBuf structure, which correctly uses a $\textsize\textt$ an unsigned type, typically...

UBUNTU-CVE-2025-39992

In the Linux kernel, the following vulnerability has been resolved: mm: swap: check for stable address space before operating on the VMA It is possible to hit a zero entry while traversing the vmas in unusemm called from swapoff path and accessing it causes the OOPS: Unable to handle kernel NULL...

The vulnerability of the Nagios XI monitoring tool, related to the lack of protective measures for the website structure, allows attackers to carry out XSS attacks.

The vulnerability of the Nagios XI monitoring tool is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks from a remote location...

The vulnerability of the Ivanti Endpoint Manager software management tool lies in the lack of security measures for the SQL query structure, allowing attackers to read arbitrary data.

The vulnerability of the Ivanti Endpoint Manager software management tool is related to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to read arbitrary data remotely...