CVE-2025-13380

The CVE-2025-13380 entry affects the WordPress plugin AI Engine for WordPress: ChatGPT, GPT Content Generator, vulnerable in all versions up to 1.0.1. Root cause is insufficient validation of user-supplied file paths in the lqdai_update_post AJAX endpoint and use of file_get_contents() with user-...

CVE-2025-13380 AI Engine for WordPress: ChatGPT, GPT Content Generator <= 1.0.1 - Authenticated (Contributor+) Arbitrary File Read

The AI Engine for WordPress: ChatGPT, GPT Content Generator plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 1.0.1. This is due to insufficient validation of user-supplied file paths in the 'lqdaiupdatepost' AJAX endpoint and the use of filegetconten...

WordPress AI Engine for WordPress: ChatGPT, GPT Content Generator plugin <= 1.0.1 - Authenticated (Contributor+) Arbitrary File Read vulnerability

Authenticated Contributor+ Arbitrary File Read vulnerability discovered by Ryan Kozak in WordPress Plugin AI Engine for WordPress: ChatGPT, GPT Content Generator versions = 1.0.1...

[SECURITY] Fedora 43 Update: webkitgtk-2.50.2-1.fc43

WebKitGTK is the port of the WebKit web rendering engine to the GTK platform...

CVE-2025-65951 Inside Track / Entropy Derby Timelock Encryption Bypassed via Pre-Computed VDF Output Leakage

Inside Track / Entropy Derby is a research-grade horse-racing betting engine. Prior to commit 2d38d2f, the VDF-based timelock encryption system fails to enforce sequential delay against the betting operator. Bettors pre-compute the entire Wesolowski VDF and include vdfOutputHex in their encrypted...

EUVD-2025-199359

Malicious code in prompt-eng-server npm...

EUVD-2025-199344

Malicious code in @accordproject/template-engine npm...

Malicious code in @accordproject/template-engine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9523084c03eecff384f8441a619316a1459bbd50b076f93f0c0175db405a2c4f The package @accordproject/template-engine was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191177 Malicious code in @accordproject/template-engine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9523084c03eecff384f8441a619316a1459bbd50b076f93f0c0175db405a2c4f The package @accordproject/template-engine was found to contain malicious code. Source: ghsa-malware...

Inside Track 加密问题漏洞

Inside Track is a horse racing betting engine by the individual developer Lumina Mescuwa. Inside Track suffers from an encryption issue vulnerability that stems from the VDF encryption system not enforcing a sequential delay, which could lead to immediate decryption...

PT-2025-47978

Name of the Vulnerable Software and Affected Versions Inside Track / Entropy Derby versions prior to commit 2d38d2f Description The VDF-based timelock encryption system in Inside Track / Entropy Derby fails to enforce sequential delay against the betting operator. This allows bettors to pre-compu...

Malicious code in @opentermsarchive/engine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b65f79ad38dfbbbddd8ec94c40721b2c951c3bf7c76de5e109d75cd20ab25bd5 The package @opentermsarchive/engine was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191044 Malicious code in @opentermsarchive/engine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b65f79ad38dfbbbddd8ec94c40721b2c951c3bf7c76de5e109d75cd20ab25bd5 The package @opentermsarchive/engine was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-199105

Malicious code in @opentermsarchive/engine npm...

Malicious code in firestore-search-engine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d13c5bf9a90c4b5043c0ac86fea67792a3688c2d84fb39eb0f2cf28902fe2e78 The package firestore-search-engine was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191092 Malicious code in firestore-search-engine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d13c5bf9a90c4b5043c0ac86fea67792a3688c2d84fb39eb0f2cf28902fe2e78 The package firestore-search-engine was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-199221

Malicious code in firestore-search-engine npm...

Redis: Redis Lua Use-After-Free may lead to remote code execution

A vulnerability found in Redis where a flaw in the Lua scripting engine can trigger a use-after-free condition. An authenticated attacker can exploit this by running a specially crafted Lua script, potentially resulting in remote code execution RCE within the Redis process...

Exploit for CVE-2025-64087

CVE-2025-64087 SSTI FreeMarker Server-Side Template Injec...

Ubuntu 16.04 LTS : Linux kernel (Oracle) vulnerabilities (USN-7875-1)

"The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7875-1 advisory. Jean-Claude Graf, Sandro Regge, Ali Hajiabadi, and Kaveh Razavi discovered that the Linux kernel contained insufficient branch predictor isolation betwe...