CVE-2025-24741

CVE-2025-24741 – Open Redirect in KB Support WordPress plugin affecting versions

CVE-2025-23197: Improper Check for Unusual or Exceptional Conditions

matrix-hookshot is a Matrix bot for connecting to external services like GitHub, GitLab, JIRA, and more. When Hookshot 6 version 6.0.1 or below, or Hookshot 5 version 5.4.1 or below, is configured with GitHub support, it is vulnerable to a Denial of Service DoS whereby it can crash on restart due...

Unbreakable Enterprise kernel security update

5.15.0-304.171.4.3 - NFSD: Limit the number of concurrent async COPY operations Chuck Lever Orabug: 37516381 CVE-2024-49974 - NFSD: Async COPY result needs to return a write verifier Chuck Lever Orabug: 37516381 CVE-2024-49974 - security/keys: fix slab-out-of-bounds in keytaskpermission Chen Rido...

CVE-2025-24741: URL Redirection to Untrusted Site

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in LOGON KB Support kb-support.This issue affects KB Support: from n/a through = 1.6.7...

SimpleHelp Privilege Escalation

The vulnerability of SimpleHelp’s software for remote support is related to insecure management of privileges. Exploiting this vulnerability allows a malicious actor to elevate their privileges to the root level...

SimpleHelp RCE

The vulnerability of SimpleHelp’s software for remote support is related to the incorrect definition of symbolic links before accessing the file. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...

SimpleHelp Remote Disclosure

The vulnerability of SimpleHelp’s software for remote support is related to an incorrect limitation on the path to the restricted-access directory. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...

Remote Support Privileged Command Injection

The vulnerability of the BeyondTrust Remote Support and Privileged Remote Access software lies in the lack of measures taken to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability allows a malicious actor to enhance their privileges and execute...

CVE-2025-24591

Missing Authorization vulnerability in NinjaTeam GDPR CCPA Compliance Support allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects GDPR CCPA Compliance Support: from n/a through 2.7.1...

CVE-2025-0314

An issue has been discovered in GitLab CE/EE affecting all versions from 17.2 before 17.6.4, 17.7 before 17.7.3, and 17.8 before 17.8.1. Improper rendering of certain file types lead to cross-site scripting...

CVE-2025-24591: Missing Authorization

Missing Authorization vulnerability in Ninja Team GDPR CCPA Compliance Support ninja-gdpr-compliance allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GDPR CCPA Compliance Support: from n/a through = 2.7.1...

OPENSUSE-SU-2025:0025-1 Security update for cheat

This update for cheat fixes the following issues: - Update to 4.4.2: Bump chroma to newest version Remove plan9 support due to build failure Upgrade to yaml.v3 - Update to 4.4.1: Update dependencies Make minor changes to appease revive linter...

[SECURITY] Fedora 41 Update: webkit2gtk4.0-2.46.5-1.fc41

WebKitGTK is the port of the WebKit web rendering engine to the GTK platform. This package contains WebKitGTK for GTK 3 and libsoup 2...

CVE-2024-42186: Improper Certificate Validation

BigFix Patch Download Plug-ins are affected by an insecure protocol support. The application can allow improper handling of SSL certificates validation...

HCL BigFix Patch Management 信任管理问题漏洞

HCL BigFix Patch Management is a comprehensive patch management solution from HCL Corporation that is used to help organizations effectively manage and deploy security and non-security patches for operating systems and applications. A security vulnerability exists in HCL BigFix Patch Management...

PT-2025-4839 · Github · Github

Name of the Vulnerable Software and Affected Versions: matrix-hookshot versions 5.4.1 and earlier matrix-hookshot versions 6.0.1 and earlier Description: The issue is related to a Denial of Service DoS condition that can occur when the software is configured with GitHub support. This happens due ...

PHP: Multiple Vulnerabilities

Background PHP is a widely-used general-purpose scripting language that is especially suited for Web development and can be embedded into HTML. Description Multiple vulnerabilities have been discovered in PHP. Please review the CVE identifiers referenced below for details. Impact Please review th...

redis:6 security update

6.2.17-1.0.1 - Build with 64k pages to support redis on both UEK6 and UEK7 on aarch64 6.2.17-1 - rebase to 6.2.17 for CVE-2024-46981 6.2.16-1 - rebase to 6.2.16 RHEL-66165...

USN-7225-1 HTMLDOC vulnerabilities

It was discovered that HTMLDOC incorrectly handled memory in the imagesetmask, gitreadlzw, writeheader and writenode functions, which could lead to a heap buffer overflow. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected...

GHSA-H78M-J95M-5356 Cilium has an information leakage via insecure default Hubble UI CORS header

Impact For users who deploy Hubble UI using either Cilium CLI or via the Cilium Helm chart, an insecure default Access-Control-Allow-Origin header value could lead to sensitive data exposure. A user with access to a Hubble UI instance affected by this issue could leak configuration details about...