EUVD-2025-200206

Malicious code in data-xabit npm...

PT-2025-49010

🚨 CVE-2025-55129 HackerOne community member Kassem S.kassem s94 has reported that username handling in Revive Adserver was still vulnerable to impersonation attacks after the fix for CVE-2025-52672, via several alternate techniques. Homoglyphs based impersonation has been independently reported b...

CVE-2024-53684

creationtimestamp| type| source ---|---|--- 2025-12-01 15:30:11+00:00| seen| https://infosec.place/objects/fcc180c5-bea6-4b5b-bec5-f92b23b88c85 2025-12-05 12:38:47+00:00| seen| https://gist.github.com/Darkcrai86/429c8f390841b2dff6c0c47a3c6ff82b...

Malicious code in szsec-infoss-report (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65c0643394ed303f9ad8d679b6b48dc98aa2d93dabfff6c2c5d53fe588bebbe4 The package szsec-infoss-report was found to contain malicious code...

MAL-2025-191592 Malicious code in szsec-infoss-report (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65c0643394ed303f9ad8d679b6b48dc98aa2d93dabfff6c2c5d53fe588bebbe4 The package szsec-infoss-report was found to contain malicious code...

Malicious code in szsec-infos-report-wh2sper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1878797ef2a97b1f4eb2c7e6e16f7b633625a6a60fd63fad5eb5c7acd355de51 The package szsec-infos-report-wh2sper was found to contain malicious code...

MAL-2025-191591 Malicious code in szsec-infos-report-wh2sper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1878797ef2a97b1f4eb2c7e6e16f7b633625a6a60fd63fad5eb5c7acd355de51 The package szsec-infos-report-wh2sper was found to contain malicious code...

Malicious code in szsec-infos-report-wh1sper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b009d66a2dccfe829b9259191c35e451f8f0ff75d1041165f2faf49e8f5dbd16 The package szsec-infos-report-wh1sper was found to contain malicious code...

MAL-2025-191590 Malicious code in szsec-infos-report-wh1sper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b009d66a2dccfe829b9259191c35e451f8f0ff75d1041165f2faf49e8f5dbd16 The package szsec-infos-report-wh1sper was found to contain malicious code...

MAL-2025-191589 Malicious code in szsec-info-report (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6386da123439e1c1588e1432f8a8163e8acbe4363aa983265f6ddee9b9e5c8d The package szsec-info-report was found to contain malicious code...

Malicious code in szsec-info-report (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6386da123439e1c1588e1432f8a8163e8acbe4363aa983265f6ddee9b9e5c8d The package szsec-info-report was found to contain malicious code...

MAL-2025-191577 Malicious code in kyjnzu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76ec5839e1ac972ae9271550bfe712c6d00f654ebce392fdc89762ab7347a663 The package kyjnzu was found to contain malicious code...

WordPress LearnPress plugin <= 4.2.9.4 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by benzdeus in WordPress Plugin LearnPress versions = 4.2.9.4...

OSV-2025-959 Heap-buffer-overflow in re_parse_term

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=464349132 Crash type: Heap-buffer-overflow READ 2 Crash state: reparseterm reparsedisjunction reparseterm...

OSV-2025-955 Use-of-uninitialized-value in decoder_context::construct_reference_picture_lists

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=464323256 Crash type: Use-of-uninitialized-value Crash state: decodercontext::constructreferencepicturelists decodercontext::processslicesegmentheader decodercontext::readsliceNAL...

Cross-site Scripting (XSS)

librenms/librenms is vulnerable to reflected cross-site scripting XSS. The vulnerability is due to improper filtering in the reportthis function in librenms/includes/functions.php, specifically incorrect use of htmlentities in an href context, which allows an attacker to inject malicious script v...

Vulnerabilities fixed in GitLab

GitLab has fixed vulnerabilities in its Community Edition CE and Enterprise Edition EE versions. The vulnerabilities include the ability for unauthenticated users to cause Denial of Service DoS conditions by submitting malicious JSON requests. In addition, unauthenticated users could join arbitra...

WordPress Customer Reviews Collector for WooCommerce plugin <= 4.6.1 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by Jonas Benjamin Friedli in WordPress Plugin Customer Reviews Collector for WooCommerce versions = 4.6.1...

Wordfence Intelligence Weekly WordPress Vulnerability Report (November 17, 2025 to November 23, 2025)

Last week, there were 167 vulnerabilities disclosed in 152 WordPress Plugins and 2 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 69 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabilities...

kernel: ip6mr: Fix skb_under_panic in ip6mr_cache_report()

A buffer underwrite vulnerability exists in the linux kernel in the function skbunderpanic in ip6mrcachereport, leading to an attacker, via crafting a payload, could result in damage to system availability and integrity...