SUSE SLED15 / SLES15 / openSUSE 15 Security Update : go1.25-openssl (SUSE-SU-2025:03525-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:03525-1 advisory. Update to version 1.25.1, released 2025-09-03 bsc1244485. Security issues fixed: - CVE-2025-47910:...

EUVD-2014-1806

Malware in sbrugna...

EUVD-2011-2760

Malware in sbrugna...

EUVD-2014-7786

Malware in sbrugna...

EUVD-2023-28048

Malicious code in bioql PyPI...

EUVD-2023-52802

Malicious code in bioql PyPI...

EUVD-2025-3906

Malicious code in bioql PyPI...

EUVD-2023-44294

Malicious code in bioql PyPI...

EUVD-2024-16680

Malicious code in bioql PyPI...

Malicious code in yamsafer-bubble (npm)

The package yamsafer-bubble was found to contain malicious code...

MAL-2025-40206 Malicious code in yamsafer-bubble (npm)

The package yamsafer-bubble was found to contain malicious code...

CVE-2025-24714

Cross-Site Request Forgery CSRF vulnerability in Wow-Company Bubble Menu – circle floating menu bubble-menu allows Cross Site Request Forgery.This issue affects Bubble Menu – circle floating menu: from n/a through = 4.0.2...

CVE-2023-48769

Cross-Site Request Forgery CSRF vulnerability in Blue Coral Chat Bubble – Floating Chat with Contact Chat Icons, Messages, Telegram, Email, SMS, Call me back.This issue affects Chat Bubble – Floating Chat with Contact Chat Icons, Messages, Telegram, Email, SMS, Call me back: from n/a through 2.3...

CVE-2023-23984

Cross-Site Request Forgery CSRF vulnerability in Wow-Company Bubble Menu – circle floating menu plugin = 3.0.1 leading to form deletion...

CVE-2023-3650

The Bubble Menu WordPress plugin before 3.0.5 does not sanitize and escape some of its settings, which could allow high-privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example, in multisite setup...

CVE-2021-29500

bubble fireworks is an open source java package relating to Spring Framework. In bubble fireworks before version 2021.BUILD-SNAPSHOT there is a vulnerability in which the package did not properly verify the signature of JSON Web Tokens. This allows to forgery of valid JWTs...

CVE-2025-24714

Cross-Site Request Forgery CSRF vulnerability in Wow-Company Bubble Menu – circle floating menu bubble-menu allows Cross Site Request Forgery.This issue affects Bubble Menu – circle floating menu: from n/a through = 4.0.2...

CVE-2025-24714 WordPress Bubble Menu Plugin <= 4.0.2 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Wow-Company Bubble Menu – circle floating menu bubble-menu allows Cross Site Request Forgery.This issue affects Bubble Menu – circle floating menu: from n/a through = 4.0.2...

CVE-2025-24714

CVE-2025-24714 — Cross-Site Request Forgery in the WordPress plugin “Bubble Menu – circle floating menu” (affecting versions up to 4.0.2). Technical detail from sources shows the issue is a CSRF vulnerability capable of unauthorized actions on behalf of an authenticated user. Patch/mitigation: up...

WordPress Bubble Menu Plugin <= 4.0.2 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Khang Duong in WordPress Plugin Bubble Menu – circle floating menu versions = 4.0.2...