2025

Roo Code is an AI-powered autonomous coding agent that lives in users' editors. Versions below 3.26.0 contain a vulnerab

There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube

A vulnerability has been found in PHPGurukul Online Course Registration 3.1. Affected is an unknown function of the file

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix unbuffered write error handling If all

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix refcount leak causing resource not relea

In the Linux kernel, the following vulnerability has been resolved: iio: imu: bno055: fix OOB access of hw_xlate array

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: Validate length in packet header befo

In the Linux kernel, the following vulnerability has been resolved: open_tree_attr: do not allow id-mapping changes wit

In the Linux kernel, the following vulnerability has been resolved: media: usbtv: Lock resolution while streaming When

In the Linux kernel, the following vulnerability has been resolved: media: ivsc: Fix crash at shutdown due to missing m

In the Linux kernel, the following vulnerability has been resolved: media: venus: Add a check for packet size after rea

In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Fix stack protector issue in send_i

In the Linux kernel, the following vulnerability has been resolved: ACPI: pfr_update: Fix the driver update version che

In the Linux kernel, the following vulnerability has been resolved: io_uring/futex: ensure io_futex_wait() cleans up pr

In the Linux kernel, the following vulnerability has been resolved: NFS: Fix a race when updating an existing write Af

In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: tas2781: Fix wrong reference of tasdevic

In the Linux kernel, the following vulnerability has been resolved: s390/sclp: Fix SCCB present check Tracing code cal

In the Linux kernel, the following vulnerability has been resolved: fs/buffer: fix use-after-free when call bh_read() h

In the Linux kernel, the following vulnerability has been resolved: ftrace: Also allocate and copy hash for reading of

In the Linux kernel, the following vulnerability has been resolved: iio: light: as73211: Ensure buffer holes are zeroed

In the Linux kernel, the following vulnerability has been resolved: comedi: Make insn_rw_emulate_bits() do insn->n samp

In the Linux kernel, the following vulnerability has been resolved: comedi: pcl726: Prevent invalid irq number The rep

In the Linux kernel, the following vulnerability has been resolved: tracing: Limit access to parser->buffer when trace_

In the Linux kernel, the following vulnerability has been resolved: i2c: rtl9300: Fix out-of-bounds bug in rtl9300_i2c_

In the Linux kernel, the following vulnerability has been resolved: net/sched: Fix backlog accounting in qdisc_dequeue_

In the Linux kernel, the following vulnerability has been resolved: net: usb: asix_devices: Fix PHY address mask in MDI

In the Linux kernel, the following vulnerability has been resolved: gve: prevent ethtool ops after shutdown A crash ca

In the Linux kernel, the following vulnerability has been resolved: s390/mm: Do not map lowcore with identity mapping

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix vm_bind_ioctl double free bug If the a

ECOVACS vacuum robot base stations do not validate firmware updates, so malicious over-the-air updates can be sent to ba

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Beaver Builder Wor

Path Traversal: '.../...//' vulnerability in Stefan Keller WooCommerce Payment Gateway for Saferpay woocommerce-payment-

Cross-Site Request Forgery (CSRF) vulnerability in ericzane Floating Window Music Player floating-window-music-player al

In System UI, there is a possible way to view other users' images due to a confused deputy. This could lead to local esc

In Skia, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote escalation of

index.em7 in ScienceLogic SL1 before 12.1.1 allows SQL Injection via a parameter in a request. NOTE: this is disputed by

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in gopiplus New Simpl

Cross-Site Request Forgery (CSRF) vulnerability in WP Corner Quick Event Calendar quick-event-calendar allows Stored XSS

Cross-Site Request Forgery (CSRF) vulnerability in KaizenCoders Enable Latex enable-latex allows Stored XSS.This issue a

Cross-Site Request Forgery (CSRF) vulnerability in David Merinas Add to Feedly add-to-feedly allows Stored XSS.This issu

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in KaizenCoders Table

Improper Neutralization of Formula Elements in a CSV File vulnerability in Denis V (Artprima) AP HoneyPot WordPress Plug

Cross-Site Request Forgery (CSRF) vulnerability in Samer Bechara Ultimate AJAX Login ultimate-ajax-login allows Reflecte

Cross-Site Request Forgery (CSRF) vulnerability in OTWthemes Popping Sidebars and Widgets Light popping-sidebars-and-wid

Cross-Site Request Forgery (CSRF) vulnerability in Mark O'Donnell MSTW League Manager mstw-league-manager allows Stored

Cross-Site Request Forgery (CSRF) vulnerability in Deepak S Hide Real Download Path hide-real-download-path allows Store

Cross-Site Request Forgery (CSRF) vulnerability in aakash1911 WP likes wp-likes allows Reflected XSS.This issue affects