PT-2026-8154

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the perf subsystem related to user space stack tracing. A race condition can occur when a task is exiting, leading to a NULL pointer dereference if pe...

CVE-2025-11157: Deserialization of Untrusted Data

A high-severity remote code execution vulnerability exists in feast-dev/feast version 0.53.0, specifically in the Kubernetes materializer job located at feast/sdk/python/feast/infra/computeengines/kubernetes/main.py. The vulnerability arises from the use of yaml.load..., Loader=yaml.Loader to...

EUVD-2025-206053

Missing Authorization vulnerability in merkulove Worker for Elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Worker for Elementor: from n/a through 1.0.10...

EUVD-2025-206055

Missing Authorization vulnerability in merkulove Worker for WPBakery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Worker for WPBakery: from n/a through 1.1.1...

CVE-2025-66144

Missing Authorization vulnerability in merkulove Worker for Elementor worker-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Worker for Elementor: from n/a through = 1.0.10...

CVE-2025-66145

Missing Authorization vulnerability in merkulove Worker for WPBakery worker-wpbakery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Worker for WPBakery: from n/a through = 1.1.1...

CVE-2025-66144

CVE-2025-66144 describes a Missing Authorization vulnerability in Merkulove Worker for Elementor affecting Worker for Elementor up to version 1.0.10 due to misconfigured access control. CVSS 3.1 base score 5.4 (Medium); attack vector NETWORK, complexity LOW, privileges Required LOW, no user inter...

CVE-2025-66144 WordPress Worker for Elementor plugin <= 1.0.10 - Broken Access Control vulnerability

Missing Authorization vulnerability in merkulove Worker for Elementor worker-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Worker for Elementor: from n/a through = 1.0.10...

CVE-2025-66144 WordPress Worker for Elementor plugin <= 1.0.10 - Broken Access Control vulnerability

Missing Authorization vulnerability in merkulove Worker for Elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Worker for Elementor: from n/a through 1.0.10...

CVE-2025-66145

Technical details about CVE-2025-66145 are not provided in the supplied documents. No information on affected versions, root cause, impact, or fixes is present here. Monitor for updates.

CVE-2025-66145 WordPress Worker for WPBakery plugin <= 1.1.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in merkulove Worker for WPBakery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Worker for WPBakery: from n/a through 1.1.1...

SUSE CVE-2023-54176

In the Linux kernel, the following vulnerability has been resolved: mptcp: stricter state check in mptcpworker As reported by Christoph, the mptcp protocol can run the worker when the relevant msk socket is in an unexpected state: connect // incoming reset + fastclose // the mptcp worker is...

PT-2025-54451

Name of the Vulnerable Software and Affected Versions Merkulove Worker for Elementor versions through 1.0.10 Description The software contains a missing authorization issue that allows exploitation due to incorrectly configured access control security levels. Recommendations Update Merkulove Work...

WordPress plugin Worker for WPBakery 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin.... A security...

Linux Distros Unpatched Vulnerability : CVE-2023-54176

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mptcp: stricter state check in mptcpworker As reported by Christoph, the mptcp protocol can run the worker when the relevant msk socket is in an unexpected stat...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992901)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992901 advisory. In the Linux kernel, the following vulnerability has been resolved: powerpc: Don't try to copy PPR for task with NULL ptregs powerpc sets up PFKTHREAD and PFIOWORKER...

WordPress plugin Worker for Elementor 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin.... A security...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993074)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993074 advisory. In the Linux kernel, the following vulnerability has been resolved: drm: Fix potential null-ptr-deref in drmvblankdestroyworker drmvblankinit call drmmaddactionorres...

CVE-2025-66145: Missing Authorization

Missing Authorization vulnerability in merkulove Worker for WPBakery worker-wpbakery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Worker for WPBakery: from n/a through = 1.1.1...

PT-2025-54452

Name of the Vulnerable Software and Affected Versions Merkulove Worker for WPBakery versions through 1.1.1 Description The software contains a missing authorization issue stemming from incorrectly configured access control security levels. This allows for potential exploitation. Recommendations...