Aggregator

A vulnerability described as critical has been identified in PJ Life & Business Coaching Plugin up to 3.0.0 on WordPress. The impacted element is an unknown function. Such manipulation leads to file inclusion. This vulnerability is uniquely identified as CVE-2025-69409. The attack can be launched remotely. No exploit exists.

A vulnerability marked as critical has been reported in Nika Plugin up to 1.2.14 on WordPress. The affected element is an unknown function. This manipulation causes file inclusion. This vulnerability is handled as CVE-2025-68545. The attack can be initiated remotely. There is not any exploit available.

A vulnerability labeled as critical has been found in Fana Plugin up to 1.1.35 on WordPress. Impacted is an unknown function. The manipulation results in file inclusion. This vulnerability is known as CVE-2025-68539. It is possible to launch the attack remotely. No exploit is available.

A vulnerability identified as critical has been detected in Diza Plugin up to 1.3.15 on WordPress. This issue affects some unknown processing. The manipulation leads to file inclusion. This vulnerability is traded as CVE-2025-68543. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability categorized as critical has been discovered in Struktur Plugin up to 2.5.1 on WordPress. This vulnerability affects unknown code. Executing a manipulation can lead to file inclusion. This vulnerability appears as CVE-2025-69407. The attack may be performed from remote. There is no available exploit.

A vulnerability was found in ModelTC LightLLM up to 1.1.0. It has been rated as critical. This affects the function pickle.loads of the component WebSocket Endpoint. Performing a manipulation results in deserialization. This vulnerability is reported as CVE-2026-26220. The attack is possible to be carried out remotely. No exploit exists.

A vulnerability was found in TEEJAY Maypole up to 2.13 on Perl. It has been declared as problematic. Affected by this issue is the function rand. Such manipulation leads to cryptographically weak prng. This vulnerability is documented as CVE-2025-15578. The attack can be executed remotely. There is not any exploit available.

A vulnerability was found in DDICK Crypt::URandom up to 0.54 on Perl. It has been classified as critical. Affected by this vulnerability is the function crypt_urandom_getrandom. This manipulation of the argument length causes heap-based buffer overflow. This vulnerability is registered as CVE-2026-2474. Remote exploitation of the attack is possible. No exploit is available. Upgrading the affected component is recommended.

A vulnerability was found in BVA Concierge::Sessions up to 0.8.4 on Perl and classified as problematic. Affected is the function rand. The manipulation results in generation of predictable numbers or identifiers. This vulnerability is cataloged as CVE-2026-2439. The attack may be launched remotely. There is no exploit available. It is suggested to upgrade the affected component.

A vulnerability, which was classified as problematic, has been found in Linux Kernel up to 5.15.176/6.1.126/6.6.73/6.12.10. This vulnerability affects the function folio_seek_hole_data. This manipulation of the argument bit causes infinite loop. This vulnerability appears as CVE-2025-21665. The attacker needs to be present on the local network. There is no available exploit. It is advisable to upgrade the affected component.

A vulnerability classified as problematic has been found in Linux Kernel up to 6.1.126/6.6.73/6.12.10. Affected by this issue is the function imx8mp_blk_ctrl_remove. The manipulation leads to out-of-bounds read. This vulnerability is documented as CVE-2025-21668. The attack requires being on the local network. There is not any exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic was found in Linux Kernel up to 6.1.126/6.6.73/6.12.10. This affects the function iomap_write_delalloc_scan. The manipulation results in infinite loop. This vulnerability is reported as CVE-2025-21667. The attacker must have access to the local network to execute the attack. No exploit exists. Upgrading the affected component is advised.

A vulnerability described as critical has been identified in Linux Kernel up to 6.12.10. The affected element is the function yt2_1380_fc_serdev_probe. Executing a manipulation can lead to null pointer dereference. This vulnerability appears as CVE-2025-21685. The attacker needs to be present on the local network. There is no available exploit. Upgrading the affected component is recommended.

A vulnerability labeled as problematic has been found in Linux Kernel up to 6.1.126/6.6.73/6.12.10. This issue affects the function its_irq_set_vcpu_affinity of the component irqchip. Such manipulation leads to privilege escalation. This vulnerability is documented as CVE-2024-57949. The attack requires being on the local network. There is not any exploit available. The affected component should be upgraded.

A vulnerability marked as critical has been reported in Linux Kernel up to 6.6.73/6.12.10. Impacted is the function gpio_lock of the component xilinx. Performing a manipulation results in stack-based buffer overflow. This vulnerability is reported as CVE-2025-21684. The attacker must have access to the local network to execute the attack. No exploit exists. It is suggested to upgrade the affected component.

A vulnerability, which was classified as problematic, was found in Linux Kernel up to 6.13.0. This vulnerability affects the function ets_class_from_arg of the file net/sched/sch_ets.c. The manipulation results in improper validation of array index. This vulnerability is reported as CVE-2025-21692. The attacker must have access to the local network to execute the attack. No exploit exists. You should upgrade the affected component.

今年情人节，想给爱人送上一份甜蜜的礼物可能并不容易，因为研究表明，高物价和生活成本的上涨给美国上班族带来了沉重的负担。投资者观察网站（InvestorsObserver）的分析师报告称，如今庆祝情人节的成本比十年前的2016年高出51%。

据央视新闻消息，2026年2月12日，中央广播电视总台发布2026年春节联欢晚会节目版权保护的声明。

A vulnerability labeled as critical has been found in Linux Kernel up to 6.6.74/6.12.11/6.13.0. This affects an unknown function of the file mm/mincore.c of the component cachestat. The manipulation results in permission issues. This vulnerability is identified as CVE-2025-21691. The attack can only be performed from the local network. There is not any exploit available. The affected component should be upgraded.

A vulnerability was found in Linux Kernel up to 6.12.11. It has been rated as problematic. Impacted is the function zswap_compress/zswap_decompress of the component mm. Performing a manipulation results in improper initialization. This vulnerability was named CVE-2025-21693. The attack needs to be approached within the local network. There is no available exploit. Upgrading the affected component is advised.