SonicWALL SSL-VPN 安全漏洞

SonicWALL SSL-VPN is a VPN connection solution from SonicWALL USA. The product is applied for remote secure connections. A security vulnerability exists in SonicWALL SSL-VPN that stems from the presence of an SSL-VPN Multi-Factor Authentication Bypass MFA vulnerability, which could lead to an...

PT-2025-4533

Name of the Vulnerable Software and Affected Versions Ofek Nakar Virtual Bot versions prior to 1.0.0 Description The issue is related to the improper neutralization of special elements used in an SQL command, allowing for Blind SQL Injection. This means an attacker can execute SQL commands withou...

WordPress plugin Virtual Bot SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...

CVE-2025-22542: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Ofek Nakar Virtual Bot virtual-bot allows Blind SQL Injection.This issue affects Virtual Bot: from n/a through = 1.0.0...

kernel: i40e: fix race condition by adding filter's intermediate sync state

A flaw was found in the Linux kernel's i40e network driver. A local user can exploit this race condition to cause a Denial of Service DoS through memory corruption. The issue occurs when multiple concurrent operations modify Media Access Control MAC and Virtual Local Area Network VLAN filters und...

kernel: i40e: fix race condition by adding filter's intermediate sync state

A flaw was found in the Linux kernel's i40e network driver. A local user can exploit this race condition to cause a Denial of Service DoS through memory corruption. The issue occurs when multiple concurrent operations modify Media Access Control MAC and Virtual Local Area Network VLAN filters und...

Important: Red Hat Security Advisory: kernel-rt security update

An update for kernel-rt is now available for Red Hat Enterprise Linux 9.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available f...

WordPress VR Views plugin <= 1.5.1 - Stored Cross Site Scripting (XSS) vulnerability

Stored Cross Site Scripting XSS vulnerability discovered by 0xd4rk5id3 Patchstack Alliance in WordPress Plugin VR Views versions = 1.5.1...

CVE-2025-22538

Cross-Site Request Forgery CSRF vulnerability in Ofek Nakar Virtual Bot virtual-bot allows Stored XSS.This issue affects Virtual Bot: from n/a through = 1.0.0...

CVE-2025-22538 WordPress Virtual Bot Plugin <= 1.0.0 - CSRF Cross Site Scripting (XSS) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Ofek Nakar Virtual Bot virtual-bot allows Stored XSS.This issue affects Virtual Bot: from n/a through = 1.0.0...

CVE-2025-22538 WordPress Virtual Bot Plugin <= 1.0.0 - CSRF Cross Site Scripting (XSS) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Ofek Nakar Virtual Bot allows Stored XSS.This issue affects Virtual Bot: from n/a through 1.0.0...

WordPress Virtual Bot Plugin <= 1.0.0 - CSRF Cross Site Scripting (XSS) vulnerability

CSRF Cross Site Scripting XSS vulnerability discovered by Caesar Evan Santoso Patchstack Alliance in WordPress Plugin Virtual Bot versions = 1.0.0...

WordPress Virtual Bot Plugin <= 1.0.0 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Caesar Evan Santoso Patchstack Alliance in WordPress Plugin Virtual Bot versions = 1.0.0...

Exploit for Improper Initialization in Linux Linux_Kernel

It is an offensive tool for Linux. The repository appears to be...

WordPress plugin Virtual Bot 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

CVE-2025-22538: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Ofek Nakar Virtual Bot virtual-bot allows Stored XSS.This issue affects Virtual Bot: from n/a through = 1.0.0...

USN-7183-1: Linux kernel vulnerabilities

Andy Nguyen discovered that the Bluetooth L2CAP implementation in the Linux kernel contained a type-confusion error. A physically proximate remote attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2020-12351 Andy Nguyen discovered that the...

DEBIAN-CVE-2024-56765

In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries/vas: Add close callback in vasvmops struct The mapping VMA address is saved in VAS window struct when the paste address is mapped. This VMA address is used during migration to unmap the paste address if the window...

UBUNTU-CVE-2024-56765

In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries/vas: Add close callback in vasvmops struct The mapping VMA address is saved in VAS window struct when the paste address is mapped. This VMA address is used during migration to unmap the paste address if the window...

CVE-2024-8474

OpenVPN Connect before version 3.5.0 can contain the configuration profile's clear-text private key which is logged in the application log, which an unauthorized actor can use to decrypt the VPN traffic...