CLSA-2026-1784682948 TuxCare security update for craftcms/cms (14 CVEs)

TuxCare rebuilt craftcms/cms to address 14 CVEs. Fixed in 3.9.15-p7+tuxcare...

Malicious Package

Overview web3-p7 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

The vulnerability of the microprogramming software of the Schneider Electric PowerLogic P7 relay protection device, related to the failure to take measures to neutralize special elements, allows a intruder to execute arbitrary commands.

The vulnerability of the microprogramming software of Schneider Electric PowerLogic P7 relay protection devices relates to the lack of measures to neutralize special elements. Exploiting this vulnerability could allow a remote attacker to execute arbitrary commands...

The vulnerability of the microprogramming software of Schneider Electric PowerLogic P7 relay protection devices, related to the underutilization of the assert() function, allows a intruder to trigger a malfunction during maintenance.

The vulnerability of the microprogramming software of the Schneider Electric PowerLogic P7 relay protection device for electrical systems is related to the lack of use of the “assert” function. Exploiting this vulnerability could allow a malicious actor to trigger a service failure...

📄 Magento Adobe Commerce 2.4.5-p7 Arbitrary File Read

Magento Adobe Commerce version 2.4.5-p7 suffers from an arbitrary file read vulnerability. ============================================================================================================================================= | Title : Magento Adobe Commerce 2.4.5-p7 arbitrary file read...

CVE-2025-54263 Adobe Commerce | Incorrect Authorization (CWE-863)

Adobe Commerce versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by an Incorrect Authorization vulnerability. A low-privileged attacker could leverage this vulnerability to bypass security measures and maintain unauthorized access. Exploitation of...

EUVD-2015-8192

Malware in sbrugna...

EUVD-2015-7982

Malware in sbrugna...

EUVD-2015-7640

Malware in sbrugna...

EUVD-2015-2351

Malware in sbrugna...

EUVD-2015-2352

Malware in sbrugna...

EUVD-2024-53304

Malicious code in bioql PyPI...

Improper Input Validation

Overview magento/community-edition is a modern cloud eCommerce platform. Affected versions of this package are vulnerable to Improper Input Validation. An attacker could cause the application to crash or become unresponsive by providing specially crafted input. Remediation Upgrade...

Malicious code in @zalastax/nolb-p7 (npm)

The package @zalastax/nolb-p7 was found to contain malicious code...

MAL-2025-12883 Malicious code in @zalastax/nolb-p7 (npm)

The package @zalastax/nolb-p7 was found to contain malicious code...

Path Traversal

Overview magento/community-edition is a modern cloud eCommerce platform. Affected versions of this package are vulnerable to Path Traversal resulting in a security feature bypass. An attacker could leverage this vulnerability to modify limited data. Remediation Upgrade magento/community-edition t...

Cross-Site Request Forgery (CSRF)

Overview magento/community-edition is a modern cloud eCommerce platform. Affected versions of this package are vulnerable to Cross-Site Request Forgery CSRF. A high-privileged attacker could trick a victim into executing unintended actions on a web application where the victim is authenticated,...

CVE-2024-56656 bnxt_en: Fix aggregation ID mask to prevent oops on 5760X chips

In the Linux kernel, the following vulnerability has been resolved: bnxten: Fix aggregation ID mask to prevent oops on 5760X chips The 5760X P7 chip's HW GRO/LRO interface is very similar to that of the previous generation 5750X or P5. However, the aggregation ID fields in the completion structur...

PT-2024-36965

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.12.0-rc2+ Description The Linux kernel has a vulnerability in the bnxt en driver, specifically in the HW GRO/LRO interface of the 5760X P7 chip. The aggregation ID fields in the completion structures on P7 have...

CVE-2024-50158

In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxtre: Fix out of bound check Driver exports pacing stats only on GenP5 and P7 adapters. But while parsing the pacing stats, driver has a check for "rdev-dbrpacing". This caused a trace when KASAN is enabled. BUG: KASAN:...