187 matches found
CVE-2026-65571
Summary: CVE-2026-65571 describes an unauthenticated PHP Object Injection in WordPress 69 Clothing theme, versions
Mozilla Firefox ESR < 115.38
The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 115.38. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-69 advisory. - We are aware that exploit code for this is public however we are not aware of any attacks in the wild...
Mozilla Firefox ESR < 115.38
The version of Firefox ESR installed on the remote Windows host is prior to 115.38. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-69 advisory. - We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing thi...
Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
Overview weasyprint is a The Awesome Document Factory Affected versions of this package are vulnerable to Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' in the processing of presentational hints when unescaped attribute values are embedded into CS...
[SECURITY] Fedora 43 Update: weasyprint-69.0-1.fc43
WeasyPrint can render HTML and CSS to PDF. It aims to support web standards for printing...
Astra Linux – Vulnerability in imagemagick
A flaw was discovered in ImageMagick, specifically in the MagickCore/statistic.c file. An attacker who submits a crafted file processed by ImageMagick could trigger undefined behavior, resulting in values that are outside the range of the type unsigned long. This likely leads to a disruption in t...
Astra Linux – Vulnerability in imagemagick
In the IntensityCompare function in /magick/quantize.c, there are calls to PixelPacketIntensity, which may return overflowing values to the caller when ImageMagick processes a crafted input file. To address this issue, the patch introduces and utilizes the ConstrainPixelIntensity function. This...
Mozilla Firefox ESR < 31.1
The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 31.1. It is, therefore, affected by a vulnerability as referenced in the mfsa2014-69 advisory. - Apparent info leak caused by uninitialized memory with malformed GIFsCVE-2014-1564 CVE-2014-1564 Note that Nessus...
Mozilla Firefox < 32.0
The version of Firefox installed on the remote macOS or Mac OS X host is prior to 32.0. It is, therefore, affected by a vulnerability as referenced in the mfsa2014-69 advisory. - Apparent info leak caused by uninitialized memory with malformed GIFsCVE-2014-1564 CVE-2014-1564 Note that Nessus has...
MAL-2025-157552 Malicious code in kentung-69 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1630e8d30364b11fe31171b0442a0593613f7fab9cb95cb4394b828c8b43b17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in kentung-69 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1630e8d30364b11fe31171b0442a0593613f7fab9cb95cb4394b828c8b43b17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-154101 Malicious code in cinta-69 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5dbb846799b5179c558dfbcc9188aefcfc4181fd55d7780caf8903601d53d68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-153868 Malicious code in bitha-69 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee392148df5ba5d95940d2cbf0e13ac25fad067861d14df8aa9e8084c1bf2751 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-152511 Malicious code in alvira-69 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99aa83c171564e4b23259894939272d84aadc97086d7b7c4701399cf68af29bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in rita-69 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d5b564be55ea704321725a9f460e8bb074cc8021b01cb2b761a4c8dc5893c49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in billa-69 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9baca84631b912e299aae51b20af06205a4dd1c03b831828596b9f6b398bba96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-164943 Malicious code in rita-69 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d5b564be55ea704321725a9f460e8bb074cc8021b01cb2b761a4c8dc5893c49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in aril-69 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd2d76d8d1aa5a8f9a0c67da653040707d9f64f26dd38ab8570ffb4d407455c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in hariyono-69 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7238a87b665d91efd36f8b7ce6a4227ec9f91e09dd0d1a7902970c5f32c44b13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
