CVE-2025-5394

🚨 CVE-2025-5394 - Unauthenticated Arbitrary Plugin Upload in Alone Theme 📌 Affected Product: Alone – Charity Multipurpose Non-profit WordPress Theme Versions: 🚀 Example Usage: python3 CVE-2025-5394.py -help usage: CVE-2025-5394.py...

CVE-2025-5394

CVE-2025-5394 – WordPress Alone Theme = 7.8.3 - Unauthenticated Arbitrary File Upload via Plugin Installation 🔥 Vulnerability Summary The WordPress theme Alone versions = 7.8.3 is vulnerable to an unauthenticated arbitrary file upload vulnerability. This flaw allows unauthenticated attackers to...

CVE-2025-5394

CVE-2025-5394 CVE‑2025‑5394 WP Alone theme ≤ 7.8.3...

EUVD-2026-101048

In the Linux kernel, the following vulnerability has been resolved: s390/ipl: Fix NULL deref in dumpreipl without re-IPL parm block Unlike kdump, which passes the re-IPL parameter block through osinfo, the stand-alone dump passes it through the IPL parm block address and checksum in lowcore. Some...

CVE-2026-98399 s390/ipl: Fix NULL deref in dump_reipl without re-IPL parm block

In the Linux kernel, the following vulnerability has been resolved: s390/ipl: Fix NULL deref in dumpreipl without re-IPL parm block Unlike kdump, which passes the re-IPL parameter block through osinfo, the stand-alone dump passes it through the IPL parm block address and checksum in lowcore. Some...

[SECURITY] Fedora 44 Update: perl-PAR-Packer-1.064-6.fc44

This module implements the App::Packer::Backend interface, for generating stand-alone executables, perl scripts and PAR files...

[R4] Stand-alone Security Patch Available for Tenable Security Center Versions 6.6.0, 6.7.2 and 6.8.0: SC202607.1

R4 Stand-alone Security Patch Available for Tenable Security Center Versions 6.6.0, 6.7.2 and 6.8.0: SC202607.1 Arnie Cabral Mon, 07/20/2026 - 13:01 Security Center leverages third-party software to help provide underlying functionality. Several of the third-party components apache, OpenSSL,...

uutils coreutils: cp/install/mv/ln --suffix alone does not enable backup mode (silent data loss vs GNU)

determinebackupmode in src/uucore/src/lib/features/backupcontrol.rs only checks --backup/-b and returns BackupMode::None when only --suffix is given. GNU enables backup mode when --suffix is used alone defaulting to existing/numbered, or $VERSIONCONTROL. Affects cp, install, mv, ln which share th...

[SECURITY] Fedora 42 Update: perl-PAR-Packer-1.064-3.fc42

This module implements the App::Packer::Backend interface, for generating stand-alone executables, perl scripts and PAR files...

[SECURITY] Fedora 43 Update: kea-3.0.3-1.fc43

DHCP implementation from Internet Systems Consortium, Inc. that features fully functional DHCPv4, DHCPv6 and Dynamic DNS servers. Both DHCP servers fully support server discovery, address assignment, renewal, rebinding and release. The DHCPv6 server supports prefix delegation. Both servers suppor...

[R2] Stand-alone Security Patch Available for Tenable Security Center Versions 6.5.1, 6.6.0, 6.7.2 and 6.8.0: SC202604.1

R2 Stand-alone Security Patch Available for Tenable Security Center Versions 6.5.1, 6.6.0, 6.7.2 and 6.8.0: SC202604.1 Aaron Roy Tue, 04/07/2026 - 11:35 Security Center leverages third-party software to help provide underlying functionality. A third-party component PostgreSQL was found to contain...

Exploit for CVE-2025-5394

CVE-2025-5394 Alone – Charity Mu...

EUVD-2025-75027

Malicious code in aloneraven-smiletea npm...

EUVD-2025-77778

Malicious code in alonebonoboz3n npm...

MAL-2025-99363 Malicious code in alone_bonobo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a59b844f94fb2cef112a46818136d7b9e6cddaa30e2794ccfae5719e305b1bdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-71676

Malicious code in alonemosquitoz3n npm...

Malicious code in alone_wren_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70ae46fb60078832b26d79badd98afb8dd04c96b77d96b45ec7c9e59aaddeb1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55902

Malicious code in alone-amber-turkey npm...

EUVD-2025-55901

Malicious code in alone-magenta-newt npm...

Malicious code in alone_catshark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff615df318bf587283748be76e6cff4f8b9ad8a8b711fd7df5cd3aacaed22547 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...