Malicious code in @zalastax/nolb-react-pt (npm)

The package @zalastax/nolb-react-pt was found to contain malicious code...

Malicious code in pt-serif (npm)

The package pt-serif was found to contain malicious code...

Malicious code in @zalastax/nolb-pt (npm)

The package @zalastax/nolb-pt was found to contain malicious code...

Malicious code in pt-mono (npm)

The package pt-mono was found to contain malicious code...

PT-2025-33305

Name of the Vulnerable Software and Affected Versions: libcoap affected versions not specified Description: A use-after-free issue exists in the coap delete pdu lkd function within coap pdu.c. This occurs due to improper memory handling after a PDU object is freed, potentially leading to memory...

PT-2025-32982 · Zkteco · Zkteco Wl20

Name of the Vulnerable Software and Affected Versions: ZKTeco WL20 affected versions not specified Description: The device stores Wi-Fi credentials, configuration data, and system data in plaintext within the device firmware. An attacker with physical access can extract the firmware and reverse...

PT-2025-32718 · Intel · Intel Tdx

Name of the Vulnerable Software and Affected Versions: IntelR TDX affected versions not specified Description: An improper synchronization issue exists within the firmware of certain IntelR TDX implementations. A user with privileged access may be able to escalate their privileges through local...

PT-2025-32345 · Unknown · Powered Blue 870

Name of the Vulnerable Software and Affected Versions: Powered BLUE 870 versions 0.20130927 and prior Description: Powered BLUE 870 versions 0.20130927 and prior contain an OS command injection issue. Successful exploitation of this issue may allow arbitrary OS commands to be executed on the...

PT-2025-32347 · Fujifilm Healthcare Americas · Synapse Mobility

Name of the Vulnerable Software and Affected Versions: Synapse Mobility versions 8.0 through 8.1.1 Description: Synapse Mobility 8.0, 8.0.1, 8.0.2, 8.1, and 8.1.1 contain a privilege escalation vulnerability through external control of Web parameters. If exploited, a user of the product may...

PT-2025-32417 · Imagination Technologies · Graphics Ddk

Name of the Vulnerable Software and Affected Versions: affected versions not specified Description: The software may experience a memory leak or kernel exceptions due to reading kernel heap data after it has been freed or dereferencing a NULL pointer, potentially leading to kernel exceptions...

CVE-2025-5304

The PT Project Notebooks plugin for WordPress is vulnerable to Privilege Escalation due to missing authorization in the wpnbptonewusersadd function in versions 1.0.0 through 1.1.3. This makes it possible for unauthenticated attackers to elevate their privileges to that of an administrator...

CVE-2025-5304 PT Project Notebooks 1.0.0 - 1.1.3 - Missing Authorization to Unauthenticated Privilege Escalation via wpnb_pto_new_users_add Function

The PT Project Notebooks plugin for WordPress is vulnerable to Privilege Escalation due to missing authorization in the wpnbptonewusersadd function in versions 1.0.0 through 1.1.3. This makes it possible for unauthenticated attackers to elevate their privileges to that of an administrator...

CVE-2025-38055

In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Fix segfault with PEBS-via-PT with samplefreq Currently, using PEBS-via-PT with a sample frequency instead of a sample period, causes a segfault. For example: BUG: kernel NULL pointer dereference, address:...

CVE-2025-38055

In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Fix segfault with PEBS-via-PT with samplefreq Currently, using PEBS-via-PT with a sample frequency instead of a sample period, causes a segfault. For example: BUG: kernel NULL pointer dereference, address:...

CVE-2025-38055 perf/x86/intel: Fix segfault with PEBS-via-PT with sample_freq

In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Fix segfault with PEBS-via-PT with samplefreq Currently, using PEBS-via-PT with a sample frequency instead of a sample period, causes a segfault. For example: BUG: kernel NULL pointer dereference, address:...

CVE-2025-38055 perf/x86/intel: Fix segfault with PEBS-via-PT with sample_freq

In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Fix segfault with PEBS-via-PT with samplefreq Currently, using PEBS-via-PT with a sample frequency instead of a sample period, causes a segfault. For example: BUG: kernel NULL pointer dereference, address:...

CVE-2025-38055

CVE-2025-38055 affects the Linux kernel (perf/x86/intel) where PEBS-via-PT with a sample_freq could trigger a NULL pointer dereference due to intel_pmu_pebs_event_update_no_drain() misinterpreting pebs_enabled bits as counter indexes. The issue arises when bits 60/61 are set for PEBS-via-PT, and ...

SUSE-SU-2025:20413-1 Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-52888: media: mediatek: vcodec: Only free buffer VA that is not NULL bsc1228557. - CVE-2024-46713: kabi fix for perf/aux: Fix AUX buffer...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: The segfault caused by PEBS-via-PT with a sample frequency has been fixed. Currently, using PEBS-via-PT with a sample frequency instead of a sample period causes a segfault. For example: BUG: Kernel NULL pointer...

CVE-2025-5173

A vulnerability has been found in HumanSignal label-studio-ml-backend up to 9fb7f4aa186612806af2becfb621f6ed8d9fdbaf and classified as problematic. Affected by this vulnerability is the function load of the file label-studio-ml-backend/labelstudioml/examples/yolo/utils/neuralnets.py of the...