UBUNTU-CVE-2025-21910

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: regulatory: improve invalid hints checking Syzbot keeps reporting an issue 1 that occurs when erroneous symbols sent from userspace get through into useralpha2 via regulatoryhintuser call. Such invalid regulatory...

Improper Verification of Cryptographic Signature

Overview Affected versions of this package are vulnerable to Improper Verification of Cryptographic Signature in the matchSignatures function in cosign.go, which does not check for subjectRegExp or issuerRegExp values during artifact signature verification. An attacker can deploy unauthorized...

Race Condition

Overview Affected versions of this package are vulnerable to Race Condition during the namespace deletion process in deleteAllContent in namespacedresourcesdeleter.go. An attacker can bypass network restrictions because network policies are deleted before the pods they are meant to protect. All...

DEBIAN-CVE-2025-27773

The SimpleSAMLphp SAML2 library is a PHP library for SAML2 related functionality. Prior to versions 4.17.0 and 5.0.0-alpha.20, there is a signature confusion attack in the HTTPRedirect binding. An attacker with any signed SAMLResponse via the HTTP-Redirect binding can cause the application to...

UBUNTU-CVE-2025-27773

The SimpleSAMLphp SAML2 library is a PHP library for SAML2 related functionality. Prior to versions 4.17.0 and 5.0.0-alpha.20, there is a signature confusion attack in the HTTPRedirect binding. An attacker with any signed SAMLResponse via the HTTP-Redirect binding can cause the application to...

Malicious code in web3-2-alpha (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7b4594c9bb4674f2a9f165fc30fb2a0a4422504c322e19dae701700c87444fcc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1635 Malicious code in ts-alpha-archive (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 70c8f2ae0b7a59a7ccefbf9994c9b2bbfbdae35fc8a5e00813f91126eba04074 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ts-alpha-archive (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 70c8f2ae0b7a59a7ccefbf9994c9b2bbfbdae35fc8a5e00813f91126eba04074 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2025-6244 · Misskey · Misskey

Name of the Vulnerable Software and Affected Versions: Misskey versions 12.109.0 through 2025.2.0-alpha.0 Description: Misskey is an open source, federated social media platform. Due to a lack of CSRF protection and the lack of proper security attributes in the authentication cookies of Bull's...

CVE-2022-3608

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.2.0-alpha...

CVE-2024-27298

parse-server is a Parse Server for Node.js / Express. This vulnerability allows SQL injection when Parse Server is configured to use the PostgreSQL database. The vulnerability has been fixed in 6.5.0 and 7.0.0-alpha.20...

MAL-2025-1060 Malicious code in alpha-launcher (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 813103e220bbdc9611499386ec8ea80516980d09eeca43e74370925dc5f3a387 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in alpha-launcher (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 813103e220bbdc9611499386ec8ea80516980d09eeca43e74370925dc5f3a387 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in compound-protocol-alpha (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 03d150fbb080030ea3445a65033db1386bff9efd41db369c041100a4eedbcea6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-598 Malicious code in compound-protocol-alpha (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 03d150fbb080030ea3445a65033db1386bff9efd41db369c041100a4eedbcea6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-22500

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ali Ali Alpha Price Table For Elementor alpha-price-table-for-elementor allows DOM-Based XSS.This issue affects Alpha Price Table For Elementor: from n/a through = 1.2.0...

CVE-2025-22500 WordPress Alpha Price Table For Elementor plugin <= 1.0.8 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ali Ali Alpha Price Table For Elementor allows DOM-Based XSS.This issue affects Alpha Price Table For Elementor: from n/a through 1.0.8...

CVE-2025-22500

CVE-2025-22500 is a DOM-based XSS vulnerability in the Alpha Price Table For Elementor plugin. The CVE description states it affects Alpha Price Table For Elementor versions from n/a up to 1.2.0, due to improper input neutralization during web page generation. Wordfence data lists the CVE as curr...

CVE-2025-22500 WordPress Alpha Price Table For Elementor plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ali Ali Alpha Price Table For Elementor alpha-price-table-for-elementor allows DOM-Based XSS.This issue affects Alpha Price Table For Elementor: from n/a through = 1.2.0...

WordPress Alpha Price Table For Elementor plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Gab in WordPress Plugin Alpha Price Table For Elementor versions = 1.2.0...