Malicious code in elf-stats-mulled-ornament-810 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a68193ecbc69141a7ed610f69110b64551adf4ac175894416841205703c9db3 The package elf-stats-mulled-ornament-810 was found to contain malicious code. Source: ghsa-malware...

Malicious Package

Overview hast-util-to-mdast9 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview unified10 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious code in elf-stats-jubilant-ornament-641 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b627f81ef3d4b49b83a86d60778eb2510e4d1cc4a7d0786394c115f194b9264 The package elf-stats-jubilant-ornament-641 was found to contain malicious code. Source: ghsa-malware...

PT-2026-38943

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A PM runtime usage count underflow exists in the wave5 driver. The driver unconditionally calls the pm runtime put sync function during the remove path, which may conflict with the pm...

MAL-2025-192291 Malicious code in email-regexed (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a196eb68421b32096da5ff260a7a9aca6f9d74937768b62ae4aff437c0c89729 The package email-regexed was found to contain malicious code. Source: ghsa-malware 0dac0855a64ab32c42fcd0ab7694e81f0ca1ba1cbedb27990dad05e7162c51e1...

Malicious code in email-regexed (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a196eb68421b32096da5ff260a7a9aca6f9d74937768b62ae4aff437c0c89729 The package email-regexed was found to contain malicious code. Source: ghsa-malware 0dac0855a64ab32c42fcd0ab7694e81f0ca1ba1cbedb27990dad05e7162c51e1...

Malicious code in email-validated (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16af72446800f2251ecdda400ad30c23637f628d1487ae5c911bb4283e3fe10c The package email-validated was found to contain malicious code. Source: ghsa-malware 9f2a0d9794c8d949cc051fe3c306af63ddb55b6848d0607ef1f5d332585a2fc...

Malicious code in dotenv-intend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b29ae1386b4f6a14de72979eae00fc96b33b8a080975db5c8eb8917d23fdeff The package dotenv-intend was found to contain malicious code. Source: ghsa-malware 64a31dce3bccc8134695abbe65011f655e810a0a28726ce2d60668e3689ab605...

MAL-2025-192290 Malicious code in dotenv-intend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b29ae1386b4f6a14de72979eae00fc96b33b8a080975db5c8eb8917d23fdeff The package dotenv-intend was found to contain malicious code. Source: ghsa-malware 64a31dce3bccc8134695abbe65011f655e810a0a28726ce2d60668e3689ab605...

Malicious code in buffer-envjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 328f0f326f30ba6e46eee18a532f81cdd6afdbd656e79c16ec2158af7f924c8f The package buffer-envjs was found to contain malicious code. Source: ghsa-malware 7dc4f4a51201db42dd81059708300e05eabba51b1ab48793c8f37d582fd24d93 A...

CVE-2025-13109

The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.3.7.2 via the "woofaddquery" and "woofremovequery" functions due to missing validation on a user controlled key. This makes it...

CVE-2025-13109

CVE-2025-13109 concerns the WordPress plugin HUSKY – Products Filter Professional for WooCommerce (versions

CVE-2025-13109 HUSKY – Products Filter Professional for WooCommerce <= 1.3.7.2 - Authenticated (Subscriber+) Insecure Direct Object Reference via 'woof_add_query/woof_remove_query'

The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.3.7.2 via the "woofaddquery" and "woofremovequery" functions due to missing validation on a user controlled key. This makes it...

CVE-2025-13109 HUSKY – Products Filter Professional for WooCommerce <= 1.3.7.2 - Authenticated (Subscriber+) Insecure Direct Object Reference via 'woof_add_query/woof_remove_query'

The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.3.7.2 via the "woofaddquery" and "woofremovequery" functions due to missing validation on a user controlled key. This makes it...

WordPress HUSKY plugin <= 1.3.7.2 - Authenticated (Subscriber+) Insecure Direct Object Reference via 'woof_add_query/woof_remove_query' vulnerability

Authenticated Subscriber+ Insecure Direct Object Reference via 'woofaddquery/woofremovequery' vulnerability discovered by Athiwat Tiprasaharn Jitlada in WordPress Plugin HUSKY versions = 1.3.7.2...

Linux RPC Protocol Heap Buffer Overflow DoS

The vulnerability of the rpcrdmaremoveone function in the net/sunrpc/xprtrdma/ibclient.c module of the Linux operating system’s RPC protocol implementation is related to the lack of memory release after the effective lifespan has ended. Exploiting this vulnerability could allow an attacker to cau...

PT-2025-48805

The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.3.7.2 via the "woof add query" and "woof remove query" functions due to missing validation on a user controlled key. This makes i...

Mautic user without privileged access to the Marketplace can install and uninstall composer packages

Summary A non privileged user can install and remove arbitrary packages via composer for a composer based installed, even if the flag in update settings for enable composer based update is unticked. Impact A low-privileged user of the platform can install malicious code to obtain higher privilege...

CVE-2025-13828

SummaryA non privileged user can install and remove arbitrary packages via composer for a composer based installed, even if the flag in update settings for enable composer based update is unticked. ImpactA low-privileged user of the platform can install malicious code to obtain higher privileges...