CVE-2025-38584

In the Linux kernel, the following vulnerability has been resolved: padata: Fix pd UAF once and for all There is a race condition/UAF in padatareorder that goes back to the initial commit. A reference count is taken at the start of the process in padatadoparallel, and released at the end in...

Linux Distros Unpatched Vulnerability : CVE-2025-8264

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Versions of the package z-push/z-push-dev before 2.7.6 are vulnerable to SQL Injection due to unparameterized queries in the IMAP backend. An attacker can inje...

CVE-2024-12575

CVE-2024-12575 relates to the WordPress plugin Poll Maker – Versus Polls, Anonymous Polls, Image Polls (≤ 5.8.9). The vulnerability is an unauthenticated basic information exposure exposed via the ajax action ays_finish_poll, allowing attackers to retrieve admin email information from poll respon...

Malicious code in qdrant-node-js-basic-example (npm)

The package qdrant-node-js-basic-example was found to contain malicious code...

Malicious code in test-mlw2-cleck-gault-nidal-basic (npm)

The package test-mlw2-cleck-gault-nidal-basic was found to contain malicious code...

MAL-2025-35086 Malicious code in test-mlw2-cleck-gault-nidal-basic (npm)

The package test-mlw2-cleck-gault-nidal-basic was found to contain malicious code...

MAL-2025-15505 Malicious code in Basic-Material-framework (npm)

The package Basic-Material-framework was found to contain malicious code...

MAL-2025-15506 Malicious code in basic-webpack-project (npm)

The package basic-webpack-project was found to contain malicious code...

MAL-2025-28498 Malicious code in ort-rn-basic-usage (npm)

The package ort-rn-basic-usage was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

simple-basic-react-button (0.1.0) potentially affected by unknown CVE via prpo-types (0.0.1-security)

prpo-types NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on prpo-types and may be impacted: - simple-basic-react-button 0.1.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-30788...

Malicious code in basic-webpack-project (npm)

The package basic-webpack-project was found to contain malicious code...

Malicious code in Basic-Material-framework (npm)

The package Basic-Material-framework was found to contain malicious code...

Malicious code in test-mlw2-pedro-basic (npm)

The package test-mlw2-pedro-basic was found to contain malicious code...

MAL-2025-35953 Malicious code in test-mlw2-pedro-basic (npm)

The package test-mlw2-pedro-basic was found to contain malicious code...

MAL-2025-30999 Malicious code in qdrant-node-js-basic-example (npm)

The package qdrant-node-js-basic-example was found to contain malicious code...

Malicious code in ort-rn-basic-usage (npm)

The package ort-rn-basic-usage was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

PT-2025-33250 · Unknown · Radiustheme Classified Listing

Name of the Vulnerable Software and Affected Versions: RadiusTheme Classified Listing versions through 5.0.0 Description: The software contains an Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS issue that allows Code Injection. Recommendations: At the moment, there is...

Flowise Custom MCP Remote Code Execution

This module exploits a remote code execution vulnerability in Flowise versions = 2.2.7-patch.1 and use exploit/multi/http/flowise/custommcprce msf undefinedcustommcprce show actions ...actions... msf undefinedcustommcprce set ACTION msf undefinedcustommcprce show options ...show and set options...

CVE-2025-8834

A vulnerability has been found in JCG Link-net LW-N915R 17s.20.001.908. Affected is an unknown function of the file /wireless/basic.asp of the component Wireless Basic Settings Page. The manipulation of the argument Network Name leads to cross site scripting. It is possible to launch the attack...

CVE-2025-8825

A vulnerability was identified in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 up to 20250801. This affects the function RPsetBasicAuto of the file /goform/RPsetBasicAuto. The manipulation of the argument staticIp/staticNetmask leads to os command injection. It is possible to initiat...