Security update for podman

This update for podman rebuilds it against the current go 1.25 security release. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed for your product: openSUSE Leap 15....

CVE-2026-1508

creationtimestamp| type| source ---|---|--- 2026-03-10 07:30:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116203705252982618...

MiracleLinux 3 : firefox-24.4.0-1.0.1.AXS3 (AXSA:2014-233:01)

The remote MiracleLinux 3 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2014-233:01 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. Security issues fixed with this releas...

EUVD-2026-1508

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CMSJunkie - WordPress Business Directory Plugins WP-BusinessDirectory wp-businessdirectory allows Reflected XSS.This issue affects WP-BusinessDirectory: from n/a through = 3.1.5...

CVE-2025-1508

The WP Crowdfunding plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the downloaddata action in all versions up to, and including, 2.1.14. This makes it possible for authenticated attackers, with subscriber-level access and above, to download...

CVE-2025-1508

creationtimestamp| type| source ---|---|--- 2025-03-12 03:44:28+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7263...

CVE-2025-1508 WP Crowdfunding <= 2.1.14 - Missing Authorization to Authenticated (Subscriber+) Post Content Download

The WP Crowdfunding plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the downloaddata action in all versions up to, and including, 2.1.14. This makes it possible for authenticated attackers, with subscriber-level access and above, to download...

CVE-2025-1508 WP Crowdfunding <= 2.1.14 - Missing Authorization to Authenticated (Subscriber+) Post Content Download

The WP Crowdfunding plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the downloaddata action in all versions up to, and including, 2.1.14. This makes it possible for authenticated attackers, with subscriber-level access and above, to download...

SUSE CVE-2022-1508

An out-of-bounds read flaw was found in the Linux kernel's iouring module in the way a user triggers the ioread function with some special parameters. This flaw allows a local user to read some memory out of bounds...

CVE-2024-1508

creationtimestamp| type| source ---|---|--- 2024-03-13 15:26:39+00:00| seen| https://t.me/ctinow/206787 2024-03-13 15:26:49+00:00| seen| https://t.me/ctinow/206794...

CVE-2024-1508 Prime Slider – Addons For Elementor <= 3.13.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Mercury Widget

The Prime Slider – Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'settings'titletags'' attribute of the Mercury widget in all versions up to, and including, 3.13.2 due to insufficient input sanitization and output escaping. This makes it possible f...

CVE-2024-1508

CVE-2024-1508 describes a stored cross-site scripting flaw in the Prime Slider – Addons For Elementor (WordPress) plugin, affecting all versions up to 3.13.2. The vulnerability arises in the Mercury widget via the settings['title_tags'] attribute due to insufficient input sanitization and output ...

CVE-2024-1508 Prime Slider – Addons For Elementor <= 3.13.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Mercury Widget

The Prime Slider – Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'settings'titletags'' attribute of the Mercury widget in all versions up to, and including, 3.13.2 due to insufficient input sanitization and output escaping. This makes it possible f...

WordPress Prime Slider – Addons For Elementor Plugin <= 3.13.2 is vulnerable to Cross Site Scripting (XSS)

Software Prime Slider – Addons For Elementor Type Plugin Vulnerable versions = 3.13.2 Fixed in 3.13.3 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-1508 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 1f2721cd17ac Credits...

Malicious code in wlwz-2312-1508 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b41a5751f5bebfefc6924901eeddcf70379be22759489be044c2c43b26d863b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-313 Malicious code in wlwz-2312-1508 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b41a5751f5bebfefc6924901eeddcf70379be22759489be044c2c43b26d863b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-1508

creationtimestamp| type| source ---|---|--- 2023-05-24 00:40:32+00:00| seen| https://t.me/cibsecurity/64657...

CVE-2023-1508 SQLi in AdamPOS's Mobilmen Terminal Software

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Adam Retail Automation Systems Mobilmen Terminal Software allows SQL Injection. This issue affects Mobilmen Terminal Software: before 3...

CVE-2023-1508 SQLi in AdamPOS's Mobilmen Terminal Software

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Adam Retail Automation Systems Mobilmen Terminal Software allows SQL Injection. This issue affects Mobilmen Terminal Software: before 3...

CVE-2023-1508

Summary: A SQL Injection vulnerability in Adam Retail Automation Systems Mobilmen Terminal Software (Mobilmen Terminal Software) affects versions before 3 due to improper neutralization of special elements in SQL commands. Impact: high confidentiality, integrity, and availability (CVSS v3.1 base ...