PT-2025-49938

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in alekv Pixel Manager for WooCommerce woocommerce-google-adwords-conversion-tracking-tag allows Retrieve Embedded Sensitive Data.This issue affects Pixel Manager for WooCommerce: from n/a through = 1.51.1...

WordPress plugin Pixel Manager for WooCommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plug-in. A security...

Pixel Watch Security Bulletin—December 2025Stay organized with collectionsSave and categorize content based on your preferences.

The Pixel Watch Security Bulletin contains details of security vulnerabilities affecting Pixel Watch devices Google Devices. For Google devices, security patch levels of 2025-12-05 or later address all issues in this bulletin and all issues in the December 2025 Android Security Bulletin. To learn...

📄 Samsung QuramDng Out-Of-Bounds Write

Samsung QuramDng has an invalid LossyJpeg component assumption that leads to an out-of-bounds write. BACKGROUND Samsung Android uses an internal DNG decoding library, QuramDng in libimagecodec.quram.so, to decode images in com.samsung.ipservice and com.samsung.gallery3d. Samsung Gallery will deco...

Pixel Update Bulletin—December 2025Stay organized with collectionsSave and categorize content based on your preferences.

The Pixel Update Bulletin contains details of security vulnerabilities and functional improvements affecting supported Pixel devices Google devices. For Google devices, security patch levels of 2025-12-05 or later address all issues in this bulletin and all issues in the December 2025 Android...

Malicious code in pixel-bloom (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e8b2781d37ee1adef96e13bb9b91bbf543cf9536031d1b42f574ffc860b8922 The package pixel-bloom was found to contain malicious code...

MAL-2025-191580 Malicious code in pixel-bloom (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e8b2781d37ee1adef96e13bb9b91bbf543cf9536031d1b42f574ffc860b8922 The package pixel-bloom was found to contain malicious code...

Malicious Package

Overview pixel-bloom is a malicious package. This package contains malicious code associated with a social engineering campaign called "Contagious Interview." The attackers target developers through fake job interviews or coding test assignments that require the installation of this package. Once...

EUVD-2025-199045

Malicious code in react-native-get-pixel-dimensions npm...

Malicious code in react-native-get-pixel-dimensions (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3570e34574e0faad44ff9473f62241285d926a86915d14b3593b9c3105520fc The package react-native-get-pixel-dimensions was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190998 Malicious code in react-native-get-pixel-dimensions (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3570e34574e0faad44ff9473f62241285d926a86915d14b3593b9c3105520fc The package react-native-get-pixel-dimensions was found to contain malicious code. Source: ghsa-malware...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

Google Brings AirDrop Compatibility to Android's Quick Share Using Rust-Hardened Security

In a surprise move, Google on Thursday announced that it has updated Quick Share, its peer-to-peer file transfer service, to work with Apple's equipment AirDrop, allowing users to more easily share files and photos between Android and iPhone devices. The cross-platform sharing feature is currentl...

Systematically Deconstructing APVD Steganography and Its Payload with a Unified Deep Learning Paradigm

In the era of digital communication, steganography allows covert embedding of data within media files. Adaptive Pixel Value Differencing APVD is a steganographic method valued for its high embedding capacity and invisibility, posing challenges for traditional steganalysis. This paper proposes a...

WordPress Plugin Pixel Manager for WooCommerce Information Disclosure Vulnerability

WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. WordPress plugin Pixel Manager for WooCommerce has an information disclosure vulnerability, the...

CVE-2025-12545

The Pixel Manager for WooCommerce – Track Conversions and Analytics, Google Ads, TikTok and more plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.49.2 via the ajaxpmwgetproductids function due to insufficient restrictions on which products can be...

CVE-2025-12545

The Pixel Manager for WooCommerce – Track Conversions and Analytics, Google Ads, TikTok and more plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.49.2 via the ajaxpmwgetproductids function due to insufficient restrictions on which products can be...

CVE-2025-12545

CVE-2025-12545 affects the Pixel Manager for WooCommerce – Track Conversions and Analytics, Google Ads, TikTok and more WordPress plugin. The vulnerability is an information exposure in all versions up to 1.49.2 caused by insufficient access restrictions in the ajax_pmw_get_product_ids() function...

WordPress Pixel Manager for WooCommerce plugin <= 1.49.2 - Unauthenticated Information Exposure vulnerability

Unauthenticated Information Exposure vulnerability discovered by Athiwat Tiprasaharn Jitlada in WordPress Plugin Pixel Manager for WooCommerce versions = 1.49.2...

OSV-2025-906 Use-of-uninitialized-value in QImage::pixel

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=461199967 Crash type: Use-of-uninitialized-value Crash state: QImage::pixel XCFImageFormat::copyGrayAToRGB XCFImageFormat::copyLayerToImage...