KLA89786 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, spoof user interface, bypass security restrictions, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Type Confusion vulnerability in V8 can be...

EUVD-2025-36786

Malicious code in @msdyn365-commerce-marketplace/address-extensions npm...

Malicious code in @msdyn365-commerce-marketplace/address-extensions (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 528dbe993a884d4b4a7005f6f60fb635ad06a01ee31e8cf08c6435b8cfc1277b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview @msdyn365-commerce-marketplace/address-extensions is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that...

EUVD-2025-36855

Malicious code in rxjs-angular npm...

Security Bulletin: CVE-2023-39417: Extension script @substitutions@ within quoting allow SQL injection

Summary An extension script is vulnerable if it uses @extowner@, @extschema@, or @extschema:...@ inside a quoting construct dollar quoting, '', or "". No bundled extension is vulnerable. Vulnerable uses do appear in a documentation example and in non-bundled extensions. Hence, the attack...

EUVD-2025-36622

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in TieLabs Jannah - Extensions jannah-extensions allows DOM-Based XSS.This issue affects Jannah - Extensions: from n/a through = 1.1.4...

CVE-2025-64208

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in TieLabs Jannah - Extensions jannah-extensions allows DOM-Based XSS.This issue affects Jannah - Extensions: from n/a through = 1.1.4...

CVE-2025-64208 WordPress Jannah - Extensions plugin <= 1.1.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in TieLabs Jannah - Extensions jannah-extensions allows DOM-Based XSS.This issue affects Jannah - Extensions: from n/a through = 1.1.4...

CVE-2025-64208

CVE-2025-64208 : DOM-based Cross-Site Scripting in the WordPress plugin “Jannah - Extensions” (jannah-extensions) up to version 1.1.4. Root cause is improper input neutralization during web page generation, enabling XSS within the context of the affected page. Public details confirm the issue aff...

CVE-2025-64208 WordPress Jannah - Extensions plugin <= 1.1.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in TieLabs Jannah - Extensions jannah-extensions allows DOM-Based XSS.This issue affects Jannah - Extensions: from n/a through = 1.1.4...

CVE-2025-9544

The Doppler Forms WordPress plugin through 2.5.1 registers an AJAX action installextension without verifying user capabilities or using a nonce. As a result, any authenticated user — including those with the Subscriber role — can install and activate additional Doppler Forms WordPress plugin...

PT-2025-44249

Name of the Vulnerable Software and Affected Versions TieLabs Jannah - Extensions versions through 1.1.4 Description The software contains a flaw related to improper input handling during web page generation, specifically a DOM-Based Cross-site Scripting issue. This allows for the execution of...

CVE-2025-64208: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in TieLabs Jannah - Extensions jannah-extensions allows DOM-Based XSS.This issue affects Jannah - Extensions: from n/a through = 1.1.4...

PT-2025-44332

A DLL hijacking vulnerability in the AMD Cleanup Utility could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution...

Siemens SIMATIC Devices Channel Accessible by Non-Endpoint (CVE-2023-7008)

A vulnerability was found in systemd-resolved. This issue may allow systemd-resolved to accept records of DNSSEC-signed domains even when they have no signature, allowing man-in-the-middles or the upstream DNS resolver to manipulate records. This plugin only works with Tenable.ot. Please visit...

PT-2025-44335

Highlights New Product Support AMD Ryzen™ AI 5 330 New Game Support Battlefield™ 6 DX12 Vampire: The Masquerade - Bloodlines 2 DX12 Expanded Vulkan Extension Support VK EXT shader float8 VK KHR video decode vp9 VK KHR video encode av1 VK KHR video encode quantization map VK AMDX dense geometry...

WordPress plugin Jannah – Extensions security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin... A security...

PT-2025-44336

Highlights New Product Support AMD Ryzen™ AI 5 330 New Game Support Battlefield™ 6 DX12 Vampire: The Masquerade - Bloodlines 2 DX12 Expanded Vulkan Extension Support VK EXT shader float8 VK KHR video decode vp9 VK KHR video encode av1 VK KHR video encode quantization map VK AMDX dense geometry...

PT-2025-44339

Highlights New Product Support AMD Ryzen™ AI 5 330 New Game Support Battlefield™ 6 DX12 Vampire: The Masquerade - Bloodlines 2 DX12 Expanded Vulkan Extension Support VK EXT shader float8 VK KHR video decode vp9 VK KHR video encode av1 VK KHR video encode quantization map VK AMDX dense geometry...