Device Plugins for Kubernetes Advisory

Summary: A potential security vulnerability for some Device Plugins for Kubernetes software maintained by Intel may allow denial of service. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-24313 Description: Improper access...

Linux Distros Unpatched Vulnerability : CVE-2024-39477

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: do not call vmaaddreservation upon ENOMEM sysbot reported a splat 1 on...

Huawei EulerOS: Security Advisory for python-jinja2 (EulerOS-SA-2025-1998)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Linux Distros Unpatched Vulnerability : CVE-2022-29156

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drivers/infiniband/ulp/rtrs/rtrs-clt.c in the Linux kernel before 5.16.12 has a double free related to rtrscltdevrelease. CVE-2022-29156 Note that Nessus relies...

Linux Distros Unpatched Vulnerability : CVE-2021-2478

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: DML. Supported versions that are affected are 8.0.26 and prior. Easily exploitable...

WordPress Master Addons for Elementor plugin <= 2.0.8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via fancyBox vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via fancyBox vulnerability discovered by Webbernaut in WordPress Plugin Master Addons for Elementor versions = 2.0.9.0...

CVE-2025-53188

creationtimestamp| type| source ---|---|--- 2025-08-11 21:58:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lw5s5lbhcs2p...

CVE-2025-53910

creationtimestamp| type| source ---|---|--- 2025-08-11 19:18:18+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115011741088255294...

CVE-2025-54463

creationtimestamp| type| source ---|---|--- 2025-08-11 19:18:18+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115011741088255294...

CVE-2025-54458

creationtimestamp| type| source ---|---|--- 2025-08-11 19:18:18+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115011741088255294...

CVE-2023-21354

creationtimestamp| type| source ---|---|--- 2025-08-11 18:48:50+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lw5hipum5v42...

CVE-2025-8758

A vulnerability was found in TRENDnet TEW-822DRE FW103B02. It has been classified as problematic. This affects an unknown part of the component vsftpd. The manipulation leads to least privilege violation. Attacking locally is a requirement. The complexity of an attack is rather high. The...

CVE-2025-02749

creationtimestamp| type| source ---|---|--- 2025-08-11 15:53:13+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lw55ps6drc2b...

CVE-2025-8829

creationtimestamp| type| source ---|---|--- 2025-08-11 15:39:40+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115010881354876002 2026-01-23 21:03:07+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3md4lxqdgll2i 2026-06-23 14:03:57+00:00| exploited|...

CVE-2025-8819

creationtimestamp| type| source ---|---|--- 2025-08-11 15:39:39+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115010881354876002...

WordPress Premium Addons for KingComposer Plugin <= 1.1.1 - Local File Inclusion Vulnerability

Local File Inclusion Vulnerability discovered by Nguyen Xuan Chien Patchstack Alliance in WordPress Plugin Premium Addons for KingComposer versions = 1.1.1...

CVE-2025-8840

Summary (CVE-2025-8840, jshERP): Up to version 3.5, jshERP’s Endpoint component exposes an authorization flaw in the file /jshERP-boot/user/deleteBatch where manipulation of the argument ids enables a remote attack. Public exploit disclosure is noted. Several sources corroborate an improper autho...

CVE-2025-8837

A vulnerability was identified in JasPer up to 4.2.5. This affects the function jpcdecdump of the file src/libjasper/jpc/jpcdec.c of the component JPEG2000 File Handler. The manipulation leads to use after free. An attack has to be approached locally. The exploit has been disclosed to the public...

CVE-2025-8835

A vulnerability was found in JasPer up to 4.2.5. Affected by this vulnerability is the function jasimagechclrspc of the file src/libjasper/base/jasimage.c of the component Image Color Space Conversion Handler. The manipulation leads to null pointer dereference. It is possible to launch the attack...

Debian dla-4268 : node-tmp - security update

The remote Debian 11 host has a package installed that is affected by a vulnerability as referenced in the dla-4268 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4268-1 [email protected] https://www.debian.org/lts/security/...