Close Menu
    DevStackTipsDevStackTips
    • Home
    • News & Updates
      1. Tech & Work
      2. View All

      Modernizing your approach to governance, risk and compliance

      June 18, 2025

      ScyllaDB X Cloud’s autoscaling capabilities meet the needs of unpredictable workloads in real time

      June 17, 2025

      Parasoft C/C++test 2025.1, Secure Code Warrior AI Security Rules, and more – Daily News Digest

      June 17, 2025

      What I Wish Someone Told Me When I Was Getting Into ARIA

      June 17, 2025

      Hades 2 gets another major update bringing new art, godly powers, and romance as Supergiant gets ready for the game’s full release

      June 18, 2025

      Sam Altman says OpenAI could need a “significant fraction” of the Earth’s power for future artificial intelligence computing

      June 18, 2025

      Microsoft’s Windows 95 testing phase was so intense that it crashed cash registers with over $10,000 worth of software

      June 18, 2025

      The biggest rival for Microsoft’s Xbox Ally is Valve’s Steam Deck, not Switch 2, so stop comparing the wrong gaming handhelds

      June 18, 2025
    • Development
      1. Algorithms & Data Structures
      2. Artificial Intelligence
      3. Back-End Development
      4. Databases
      5. Front-End Development
      6. Libraries & Frameworks
      7. Machine Learning
      8. Security
      9. Software Engineering
      10. Tools & IDEs
      11. Web Design
      12. Web Development
      13. Web Security
      14. Programming Languages
        • PHP
        • JavaScript
      Featured

      Microsoft Copilot for Power Platform

      June 18, 2025
      Recent

      Microsoft Copilot for Power Platform

      June 18, 2025

      Integrate Coveo Atomic CLI-Based Hosted Search Page into Adobe Experience Manager (AEM)

      June 18, 2025

      Mastering TypeScript: Your Ultimate Guide to Types, Inference & Compatibility

      June 18, 2025
    • Operating Systems
      1. Windows
      2. Linux
      3. macOS
      Featured

      Hades 2 gets another major update bringing new art, godly powers, and romance as Supergiant gets ready for the game’s full release

      June 18, 2025
      Recent

      Hades 2 gets another major update bringing new art, godly powers, and romance as Supergiant gets ready for the game’s full release

      June 18, 2025

      Sam Altman says OpenAI could need a “significant fraction” of the Earth’s power for future artificial intelligence computing

      June 18, 2025

      Microsoft’s Windows 95 testing phase was so intense that it crashed cash registers with over $10,000 worth of software

      June 18, 2025
    • Learning Resources
      • Books
      • Cheatsheets
      • Tutorials & Guides
    Home»Development»Security»New Linux udisks flaw lets attackers get root on major Linux distros

    New Linux udisks flaw lets attackers get root on major Linux distros

    June 18, 2025

    New Linux udisks flaw lets attackers get root on major Linux distros

    Attackers can exploit two newly discovered local privilege escalation (LPE) vulnerabilities to gain root privileges on systems running major Linux distributions.
    The first flaw (tracked as CVE-2025-60 …
    Read more


    Published Date:
    Jun 18, 2025 (5 hours, 49 minutes ago)

    Vulnerabilities has been mentioned in this article.

    Source: Read More

    Facebook Twitter Reddit Email Copy Link
    Previous ArticleBeyondTrust warns of pre-auth RCE in Remote Support software
    Next Article Cyberagentschap VS meldt actief misbruik van lek in Linux-kernel

    Related Posts

    Security

    Cyberagentschap VS meldt actief misbruik van lek in Linux-kernel

    June 18, 2025
    Security

    BeyondTrust warns of pre-auth RCE in Remote Support software

    June 18, 2025
    Leave A Reply Cancel Reply

    For security, use of Google's reCAPTCHA service is required which is subject to the Google Privacy Policy and Terms of Use.

    Continue Reading

    Critical Linux Root Exploit Chain Discovered in PAM & UDisks, Affecting Major Distros

    Security

    CVE-2025-3898 – Apache Webserver Denial of Service Vulnerability

    Common Vulnerabilities and Exposures (CVEs)
    Atomfall finally fixes the audio bug that almost made me quit

    Atomfall finally fixes the audio bug that almost made me quit

    News & Updates

    CVE-2025-48489 – FreeScout Cross-Site Scripting (XSS) Vulnerability

    Common Vulnerabilities and Exposures (CVEs)

    Highlights

    CVE-2025-4748 – Erlang OTP Path Traversal Vulnerability

    June 16, 2025

    CVE ID : CVE-2025-4748

    Published : June 16, 2025, 11:15 a.m. | 3 hours, 5 minutes ago

    Description : Improper Limitation of a Pathname to a Restricted Directory (‘Path Traversal’) vulnerability in Erlang OTP (stdlib modules) allows Absolute Path Traversal, File Manipulation. This vulnerability is associated with program files lib/stdlib/src/zip.erl and program routines zip:unzip/1, zip:unzip/2, zip:extract/1, zip:extract/2 unless the memory option is passed.

    This issue affects OTP from OTP 17.0 until OTP 28.0.1, OTP 27.3.4.1 and OTP 26.2.5.13, corresponding to stdlib from 2.0 until 7.0.1, 6.2.2.1 and 5.2.3.4.

    Severity: 0.0 | NA

    Visit the link for more details, such as CVSS details, affected products, timeline, and more…

    CVE-2025-47959 – Visual Studio Command Injection Vulnerability

    June 13, 2025

    CVE-2025-26844 – Znuny Cookie Without HttpOnly Flag Vulnerability

    May 8, 2025

    CVE-2025-32917 – Checkmk Java Home Privilege Escalation

    May 13, 2025
    © DevStackTips 2025. All rights reserved.
    • Contact
    • Privacy Policy

    Type above and press Enter to search. Press Esc to cancel.