Malicious code in @zalastax/nolb-lion-h (npm)

The package @zalastax/nolb-lion-h was found to contain malicious code...

MAL-2025-43317 Malicious code in @zalastax/nolb-lion-h (npm)

The package @zalastax/nolb-lion-h was found to contain malicious code...

CVE-2025-58837

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Shiful H SS Font Awesome Icon ss-font-awesome-icon allows Stored XSS.This issue affects SS Font Awesome Icon: from n/a through = 4.1.3...

CVE-2025-58837: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Shiful H SS Font Awesome Icon ss-font-awesome-icon allows Stored XSS.This issue affects SS Font Awesome Icon: from n/a through = 4.1.3...

CVE-2025-58840: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ibnul H. Custom Team Manager custom-team-manager allows Stored XSS.This issue affects Custom Team Manager: from n/a through = 2.4.2...

Linux Distros Unpatched Vulnerability : CVE-2023-43281

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Double Free vulnerability in Nothings Stb Image.h v.2.28 allows a remote attacker to cause a denial of service via a crafted file to the stbiloadgifmain functio...

CVE-2025-57772

CVE-2025-57772 affects DataEase prior to 2.10.12. A H2 JDBC RCE bypass exists where the getJdbcUrl method can return the JdbcUrl parameter, bypassing H2 filtering and allowing the JDBC URL to specify the driver (e.g., driver: org.h2.Driver) for the connection. This leads to potential remote code ...

[SECURITY] Fedora 41 Update: rust-h2-0.4.12-1.fc41

An HTTP/2 client and server...

[SECURITY] Fedora 42 Update: rust-h2-0.4.12-1.fc42

An HTTP/2 client and server...

Fedora 42 : rust-h2 / uv (2025-c22dd590b8)

The remote Fedora 42 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2025-c22dd590b8 advisory. - Update uv to version 0.8.8. - Update the h2 crate to version 0.4.12. The builds in this update also address CVE-2025-54368. Tenable has extracted the...

CVE-2025-8143 Soledad <= 8.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'pcsml_smartlists_h'

The Soledad theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘pcsmlsmartlistsh’ parameter in all versions up to, and including, 8.6.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level acce...

WordPress Soledad theme <= 8.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'pcsml_smartlists_h' vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via 'pcsmlsmartlistsh' vulnerability discovered by stealthcopter in WordPress Theme Soledad versions = 8.6.7...

Malicious code in @zalastax/nolb-google-h (npm)

The package @zalastax/nolb-google-h was found to contain malicious code...

Malicious code in @zalastax/nolb-lion-lib-h (npm)

The package @zalastax/nolb-lion-lib-h was found to contain malicious code...

MAL-2025-11128 Malicious code in @zalastax/nolb-demo-h (npm)

The package @zalastax/nolb-demo-h was found to contain malicious code...

MAL-2025-12099 Malicious code in @zalastax/nolb-json-h (npm)

The package @zalastax/nolb-json-h was found to contain malicious code...

Malicious code in @zalastax/nolb-qmuzik-h (npm)

The package @zalastax/nolb-qmuzik-h was found to contain malicious code...

Malicious code in @zalastax/nolb-demo-h (npm)

The package @zalastax/nolb-demo-h was found to contain malicious code...

Malicious code in @zalastax/nolb-gulp-h (npm)

The package @zalastax/nolb-gulp-h was found to contain malicious code...

Malicious code in @zalastax/nolb-hapi-h (npm)

The package @zalastax/nolb-hapi-h was found to contain malicious code...