MAL-2025-43528 Malicious code in astrobiology-less-loader-plutology-nightwatch (npm)

The package astrobiology-less-loader-plutology-nightwatch was found to contain malicious code...

Malicious code in astrobiology-less-loader-plutology-nightwatch (npm)

The package astrobiology-less-loader-plutology-nightwatch was found to contain malicious code...

Malicious code in less-loader-quasar-spectroscopy-astrobiology (npm)

The package less-loader-quasar-spectroscopy-astrobiology was found to contain malicious code...

Malicious code in less-loader-ablation-frontend-transport (npm)

The package less-loader-ablation-frontend-transport was found to contain malicious code...

MAL-2025-46439 Malicious code in ultra-less-ethology-string (npm)

The package ultra-less-ethology-string was found to contain malicious code...

MAL-2025-46478 Malicious code in ursa-nestjs-less-loader-sails (npm)

The package ursa-nestjs-less-loader-sails was found to contain malicious code...

MAL-2025-43416 Malicious code in aether-venus-lacerta-less-loader (npm)

The package aether-venus-lacerta-less-loader was found to contain malicious code...

MAL-2025-45564 Malicious code in pipe-less-loader-fornax-regulus (npm)

The package pipe-less-loader-fornax-regulus was found to contain malicious code...

CVE-2025-48964 affecting package iputils for versions less than 20240117-2

CVE-2025-48964 affecting package iputils for versions less than 20240117-2. A patched version of the package is available...

WordPress Clanora theme < 1.3.1 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Clanora versions 1.3.1...

CVE-2025-8194 affecting package python3 for versions less than 3.12.9-4

CVE-2025-8194 affecting package python3 for versions less than 3.12.9-4. A patched version of the package is available...

Linux Distros Unpatched Vulnerability : CVE-2017-6820

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rcubeutils.php in Roundcube before 1.1.8 and 1.2.x before 1.2.4 is susceptible to a cross-site scripting vulnerability via a crafted Cascading Style Sheets CSS...

Multiple vulnerabilities in Movable Type

Overview Movable Type provided by Six Apart Ltd. contains multiple vulnerabilities listed below. Use of less trusted source CWE-348 - CVE-2025-53522 Open redirect CWE-601 - CVE-2025-55706 Six Apart Ltd. reported these vulnerabilities to JPCERT/CC to notify users of the solutions through JVN...

CVE-2025-53522

CVE-2025-53522 affects Movable Type and related editions, caused by use of a less trusted source (CWE-348). A remote unauthenticated attacker could trigger a tampered password-reset email. Documented impact: password reset email may be forged by exploiting the trusted source weakness. Public disc...

Linux Distros Unpatched Vulnerability : CVE-2022-48624

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - closealtfile in filename.c in less before 606 omits shellquote calls for LESSCLOSE. CVE-2022-48624 Note that Nessus relies on the presence of the package as...

CVE-2025-53522: Use of Less Trusted Source

Movable Type contains an issue with use of less trusted source. If exploited, tampered email to reset a password may be sent by a remote unauthenticated attacker...

JVN#76729865: Multiple vulnerabilities in Movable Type

Movable Type provided by Six Apart Ltd. contains multiple vulnerabilities listed below. Use of less trusted source（CWE-348） CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N Base Score 6.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Base Score 5.3 CVE-2025-53522 Open...

Linux Distros Unpatched Vulnerability : CVE-2023-5727

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The executable file warning was not presented when downloading .msix, .msixbundle, .appx, and .appxbundle files, which can run commands on a user's computer...

CVE-2025-8041 Incorrect URL truncation in Firefox for Android

In the address bar, Firefox for Android truncated the display of URLs from the end instead of prioritizing the origin. This vulnerability was fixed in Firefox 141...

kernel: x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes

In the Linux kernel, the following vulnerability has been resolved: x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes Currently, loadmicrocodeamd iterates over all NUMA nodes, retrieves their CPU masks and unconditionally accesses per-CPU data for the first CPU of each mask...