Microsoft GitHub Copilot and Visual Studio Code security vulnerabilities

Microsoft GitHub Copilot and Visual Studio Code is a combination of intelligent coding tools from Microsoft Corporation USA. A security vulnerability exists in Microsoft GitHub Copilot and Visual Studio Code. An attacker exploiting the vulnerability could bypass certain features...

APSB25-112 : Security update available for Adobe Pass

Adobe has released a security update for Adobe Pass. This update resolves a critical vulnerability that could lead to security feature bypass...

Hackers Exploiting Triofox Flaw to Install Remote Access Tools via Antivirus Feature

Google's Mandiant Threat Defense on Monday said it discovered n-day exploitation of a now-patched security flaw in Gladinet's Triofox file-sharing and remote access platform. The critical vulnerability, tracked as CVE-2025-12480 CVSS score: 9.1, allows an attacker to bypass authentication and...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference via libmicrohttpdws.so when building with the --enable-experimental option. An attacker can cause the application to crash by sending malicious network traffic. Workaround Users are advised to avoid using the...

Google Chrome security vulnerabilities

Google Chrome is a web browser from Google, Inc USA. A security vulnerability exists in versions of Google Chrome prior to 140.0.7339.80, which stems from an improper implementation of the download feature and could lead to a bypass of Mark of the Web...

EUVD-2025-38296

The chat feature in the application Sourcecodester FAQ Bot with AI Assistant v1.0 is vulnerable to Cross-Site Scripting XSS due to improper handling of user-supplied input. An attacker can inject malicious HTML or JavaScript into chat messages, which executes in the browser of any user viewing th...

CVE-2025-63639

The chat feature in the application Sourcecodester FAQ Bot with AI Assistant v1.0 is vulnerable to Cross-Site Scripting XSS due to improper handling of user-supplied input. An attacker can inject malicious HTML or JavaScript into chat messages, which executes in the browser of any user viewing th...

CVE-2025-31133 vulnerabilities

Vulnerabilities for packages: k3s, kubernetes, falco-no-driver, nvidia-container-toolkit, node-feature-discovery, podman, sriov-network-device-plugin, buildah, grafana-alloy...

GHSA-9493-H29P-RFM2 vulnerabilities

Vulnerabilities for packages: k3s, kubernetes, falco-no-driver, nvidia-container-toolkit, node-feature-discovery, podman, sriov-network-device-plugin, buildah, grafana-alloy...

CVE-2025-52565 vulnerabilities

Vulnerabilities for packages: k3s, kubernetes, falco-no-driver, nvidia-container-toolkit, node-feature-discovery, podman, sriov-network-device-plugin, buildah, grafana-alloy...

GHSA-QW9X-CQR3-WC7R vulnerabilities

Vulnerabilities for packages: k3s, kubernetes, falco-no-driver, nvidia-container-toolkit, node-feature-discovery, podman, sriov-network-device-plugin, buildah, grafana-alloy...

GHSA-CGRX-MC8F-2PRM vulnerabilities

Vulnerabilities for packages: k3s, wolfictl, envoy-gateway, k8s-device-plugin, kubernetes-csi-driver-nfs, neuvector-scanner, xeol, buildah, grype, nerdctl, k9s, podman, syft, zot, kots, undock, zarf, kubescape, dagger, falco-no-driver, ctop, node-feature-discovery, checksec, trivy-operator,...

CVE-2025-52881 vulnerabilities

Vulnerabilities for packages: k3s, wolfictl, envoy-gateway, k8s-device-plugin, kubernetes-csi-driver-nfs, neuvector-scanner, xeol, buildah, grype, nerdctl, k9s, podman, syft, zot, kots, undock, zarf, kubescape, dagger, falco-no-driver, ctop, node-feature-discovery, checksec, trivy-operator,...

CVE-2025-31133 vulnerabilities

Vulnerabilities for packages: grafana-alloy-fips, podman, rancher, prometheus-podman-exporter, azure-container-networking, k3s, kubernetes, virt-handler, rke2-runtime, cluster-autoscaler-fips, falco-no-driver, node-feature-discovery, cluster-autoscaler, sriov-network-device-plugin-fips,...

CVE-2025-52881 vulnerabilities

Vulnerabilities for packages: volcano, k3s, ctop, grype-db, nerdctl-fips, cluster-autoscaler-fips, falco-no-driver, node-feature-discovery, prometheus-node-exporter-fips, google-osconfig-agent, kubernetes-fips, grype, mesosphere-vsphere-csi, k8s-device-plugin, trivy, volcano-fips,...

GHSA-CGRX-MC8F-2PRM vulnerabilities

Vulnerabilities for packages: volcano, k3s, ctop, grype-db, nerdctl-fips, cluster-autoscaler-fips, falco-no-driver, node-feature-discovery, prometheus-node-exporter-fips, google-osconfig-agent, kubernetes-fips, grype, mesosphere-vsphere-csi, k8s-device-plugin, trivy, volcano-fips,...

GHSA-9493-H29P-RFM2 vulnerabilities

Vulnerabilities for packages: grafana-alloy-fips, podman, rancher, prometheus-podman-exporter, azure-container-networking, k3s, kubernetes, virt-handler, rke2-runtime, cluster-autoscaler-fips, falco-no-driver, node-feature-discovery, cluster-autoscaler, sriov-network-device-plugin-fips,...

CVE-2025-52565 vulnerabilities

Vulnerabilities for packages: grafana-alloy-fips, podman, rancher, prometheus-podman-exporter, azure-container-networking, k3s, kubernetes, rke2-runtime, cluster-autoscaler-fips, falco-no-driver, node-feature-discovery, cluster-autoscaler, sriov-network-device-plugin-fips, kubernetes-fips,...

GHSA-QW9X-CQR3-WC7R vulnerabilities

Vulnerabilities for packages: grafana-alloy-fips, podman, rancher, prometheus-podman-exporter, azure-container-networking, k3s, kubernetes, rke2-runtime, cluster-autoscaler-fips, falco-no-driver, node-feature-discovery, cluster-autoscaler, sriov-network-device-plugin-fips, kubernetes-fips,...

EUVD-2025-38242

ClipBucket v5 is an open source video sharing platform. In versions 5.5.2-146 and below, the Manage Playlists feature is vulnerable to stored Cross-site Scripting XSS,specifically in the Playlist Name field. An authenticated low-privileged user can create a playlist with a malicious name containi...