MAL-2025-29063 Malicious code in performance-parts (npm)

The package performance-parts was found to contain malicious code...

Malicious code in react-native-performance-lists-profiler (npm)

The package react-native-performance-lists-profiler was found to contain malicious code...

Malicious code in react-native-performance-navigation-bottom-tabs (npm)

The package react-native-performance-navigation-bottom-tabs was found to contain malicious code...

Malicious code in hw-performance-tracking (npm)

The package hw-performance-tracking was found to contain malicious code...

Malicious code in @zalastax/nolb-_functions-io-labs-performance_test9 (npm)

The package @zalastax/nolb-functions-io-labs-performancetest9 was found to contain malicious code...

MAL-2025-29064 Malicious code in performance-server (npm)

The package performance-server was found to contain malicious code...

MAL-2025-10031 Malicious code in @zalastax/nolb-_functions-io-labs-performance_test (npm)

The package @zalastax/nolb-functions-io-labs-performancetest was found to contain malicious code...

Malicious code in performance-server (npm)

The package performance-server was found to contain malicious code...

Malicious code in @zalastax/nolb-_functions-io-labs-performance_t (npm)

The package @zalastax/nolb-functions-io-labs-performancet was found to contain malicious code...

Malicious code in performance-parts (npm)

The package performance-parts was found to contain malicious code...

MAL-2025-10032 Malicious code in @zalastax/nolb-_functions-io-labs-performance_test9 (npm)

The package @zalastax/nolb-functions-io-labs-performancetest9 was found to contain malicious code...

MAL-2025-22824 Malicious code in hw-performance-tracking (npm)

The package hw-performance-tracking was found to contain malicious code...

MAL-2025-31826 Malicious code in react-native-performance-navigation-drawer (npm)

The package react-native-performance-navigation-drawer was found to contain malicious code...

CVE-2025-26398

SolarWinds Database Performance Analyzer was found to contain a hard-coded cryptographic key. If exploited, this vulnerability could lead to a machine-in-the-middle MITM attack against users. This vulnerability requires additional software not installed by default, local access to the server and...

WordPress plugin AI Tools 安全漏洞

WordPress AI Tools plugin is a WordPress plugin based on Artificial Intelligence technology, which is mainly used to optimize website content generation, automate task processing and improve website performance. WordPress AI Tools plugin suffers from a lack of authorization vulnerability, no...

Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues: Updated to version 2.48.5: - CVE-2025-31273: Fixed a vulnerability where processing maliciously crafted web content could lead to memory corruption. bsc1247564 - CVE-2025-31278: Fixed a vulnerability where processing maliciously crafted web...

SUSE Linux多款产品 安全漏洞

SUSE Linux Enterprise Desktop is an enterprise server version of the Linux desktop operating system from SUSE Germany. A security vulnerability exists in various SUSE Linux products that originates from a stream reset in the HTTP/2 implementation that results in excessive consumption of server...

CVE-2025-20074

Time-of-check Time-of-use race condition for some IntelR Connectivity Performance Suite software installers before version 40.24.11210 may allow an authenticated user to potentially enable escalation of privilege via local access...

SUSE-SU-2025:02767-1 Security update for python313

This update for python313 fixes the following issues: - CVE-2025-8194: Fixed denial of service caused by tar archives with negative offsets bsc1247249. - CVE-2025-6069: Avoid worst case quadratic complexity when processing certain crafted malformed inputs with HTMLParser bsc1244705. -...

Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues: Updated to version 2.48.5: - CVE-2025-31273: Fixed a vulnerability where processing maliciously crafted web content could lead to memory corruption. bsc1247564 - CVE-2025-31278: Fixed a vulnerability where processing maliciously crafted web...