@better-auth/cli (>=1.0.0-canary.2, <=1.2.9), @erquhart/convex-better-auth (0.4.1) +11 more potentially affected by CVE-2025-53535 via better-auth (>=1.0.0, <=1.2.9-beta.10)

better-auth NPM version =1.0.0, =1.0.0-canary.2, =0.0.0, =0.1.174, =1.0.2, =1.0.5, =1.0.0, =0.0.5, =1.1.368, =3.7.1, =0.1.2-beta.2, =1.0.0, =1.1.0 Source cves: CVE-2025-53535 Source advisory: OSV:GHSA-36RG-GFQ2-3H56...

webkitgtk: processing web content may lead to arbitrary code execution

The issue was addressed with improved checks. This issue is fixed in tvOS 17, Safari 17, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. Processing web content may lead to arbitrary code execution...

Oracle Linux 10 : xorg-x11-server-Xwayland (ELSA-2025-7458)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-7458 advisory. - CVE fix for: CVE-2025-49175 RHEL-97129, CVE-2025-49176 RHEL-97135, CVE-2025-49177 RHEL-97141, CVE-2025-49178 RHEL-97147, CVE-2025-49179 RHEL-97153,...

Oracle Linux 10 : buildah (ELSA-2025-7459)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-7459 advisory. - Rebuild on new golang to fix CVE-2025-22871 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

RHEL 10 : kernel (RHSA-2025:10371)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:10371 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: ipv6: mcast: extend RCU...

CVE-2025-21942

creationtimestamp| type| source ---|---|--- 2025-07-06 10:14:32+00:00| seen| Telegram/TNI45YMcYuZGWXNT9lHMAlxnG-tZq-QvUXtvMfI2JMybQco...

WordPress Card flip image slideshow plugin <= 1.5 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Peter Thaleikis in WordPress Plugin Card flip image slideshow versions = 1.5...

📄 AndroMouse Server 8.0 Remote Code Execution

AndroMouse Server version 8.0 proof of concept that exploits an unauthenticated UDP interface to simulate mouse/keyboard actions and execute malicious commands via certutil. Exploit Title: AndroMouse Server 8.0 - Remote Code Execution Date: 03/07/25 Exploit Author: Chokri Hammedi Vendor Homepage:...

Oracle Linux 10 : kernel (ELSA-2025-8137)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-8137 advisory. 6.12.0-55.19.1.0.10.OL10 - nvme-pci: remove two deallocate zeroes quirks Orabug: 37756650 - Add new Oracle Linux Driver Signing key 1 certificate...

Oracle Linux 10 : kernel (ELSA-2025-9079)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-9079 advisory. 6.12.0-55.19.1.0.10.OL10 - nvme-pci: remove two deallocate zeroes quirks Orabug: 37756650 - Add new Oracle Linux Driver Signing key 1 certificate...

WordPress WP Human Resource Management plugin 2.0.0-2.2.17 - Missing Authorization to Authenticated (Employee+) Arbitrary User Deletion vulnerability

Missing Authorization to Authenticated Employee+ Arbitrary User Deletion vulnerability discovered by kr0d in WordPress Plugin WP Human Resource Management versions 2.0.0-2.2.17...

WordPress VikRentCar Car Rental Management System plugin <= 1.4.3 - Authenticated (Administrator+) Arbitrary File Upload vulnerability

Authenticated Administrator+ Arbitrary File Upload vulnerability discovered by Jonas Benjamin Friedli in WordPress Plugin VikRentCar versions = 1.4.3...

WordPress Printcart Web to Print Product Designer for WooCommerce plugin <= 2.4.0 - SQL Injection Vulnerability

SQL Injection Vulnerability discovered by timomangcut in WordPress Plugin Printcart Web to Print Product Designer for WooCommerce versions = 2.4.0...

Oracle Linux 10 : kernel (ELSA-2025-9896)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-9896 advisory. 6.12.0-55.19.1.0.10.OL10 - nvme-pci: remove two deallocate zeroes quirks Orabug: 37756650 - Add new Oracle Linux Driver Signing key 1 certificate...

Oracle Linux 10 : python3.12 (ELSA-2025-10140)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-10140 advisory. - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435 Tenable has extracted the preceding description block...

WordPress Element Pack Addons for Elementor plugin <= 8.0.0 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via data-caption Attribute vulnerability

Authenticated Contributor+ DOM-Based Stored Cross-Site Scripting via data-caption Attribute vulnerability discovered by Webbernaut in WordPress Plugin Element Pack Elementor Addons versions 8.0.0...

CVE-2025-46707

creationtimestamp| type| source ---|---|--- 2025-07-02 15:10:14+00:00| seen| Telegram/LMg1WmhJT9gGU21dBw36K6RQlxqnRk2OcEzj6jswfmBsHI...

Oracle Linux 10 : thunderbird (ELSA-2025-10195)

The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2025-10195 advisory. 128.12.0-1.0.1 - Add Oracle prefs 128.12.0-1 - Update to 128.12.0 build1 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 10 : corosync (ELSA-2025-7478)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-7478 advisory. 3.1.9-1.1 - Resolves: RHEL-84612 - totemsrp: Check size of orftoken msg fixes CVE-2025-30472 Tenable has extracted the preceding description block directly fro...

RHEL 10 : thunderbird (RHSA-2025:10195)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2025:10195 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: thunderbird: Unsolicited File Download, Disk Space...