An attacker could have leveraged the Windows Error Reporter to run arbitrary code on the system escaping the sandbox. *Note:* This issue only affected Windows operating systems. Other operating systems are unaffected. This vulnerability affects Firefox < 124, Firefox ESR < 115.9, and Thunderbird < 115.9.

...

Linux Distros Unpatched Vulnerability : CVE-2023-2233

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An improper authorization issue has been discovered in GitLab CE/EE affecting all versions starting from 11.8 before 16.2.8, all versions starting from 16.3...

MAL-2025-41455 Malicious code in @revizor/reporter-gitlab (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-41454 Malicious code in @revizor/reporter-console (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2025-30061: Improper Neutralization of Special Elements used in an SQL Command

In the "utils/Reporter/OpenReportWindow.pl" service, there is an SQL injection vulnerability through the "UserID" parameter...

Linux Distros Unpatched Vulnerability : CVE-2022-2244

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An improper authorization vulnerability in GitLab EE/CE affecting all versions from 14.8 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1, allow...

MAL-2025-7957 Malicious code in @frozen-team-qa/playwright-slack-reporter (npm)

The package @frozen-team-qa/playwright-slack-reporter was found to contain malicious code...

MAL-2025-20037 Malicious code in exchange-rate-reporter (npm)

The package exchange-rate-reporter was found to contain malicious code...

MAL-2025-23745 Malicious code in jest-sync-json-reporter (npm)

The package jest-sync-json-reporter was found to contain malicious code...

MAL-2025-34262 Malicious code in sw-reporter (npm)

The package sw-reporter was found to contain malicious code...

MAL-2025-38952 Malicious code in wdio-junit-reporter-file (npm)

The package wdio-junit-reporter-file was found to contain malicious code...

Malicious code in exchange-rate-reporter (npm)

The package exchange-rate-reporter was found to contain malicious code...

Malicious code in jest-sync-json-reporter (npm)

The package jest-sync-json-reporter was found to contain malicious code...

Malicious code in sw-reporter (npm)

The package sw-reporter was found to contain malicious code...

Malicious code in wdio-junit-reporter-file (npm)

The package wdio-junit-reporter-file was found to contain malicious code...

Malicious code in @frozen-team-qa/playwright-slack-reporter (npm)

The package @frozen-team-qa/playwright-slack-reporter was found to contain malicious code...

GHSA-76R7-HHXJ-R776 Active Record logging vulnerable to ANSI escape injection

This vulnerability has been assigned the CVE identifier CVE-2025-55193 Impact The ID passed to find or similar methods may be logged without escaping. If this is directly to the terminal it may include unescaped ANSI sequences. Releases The fixed releases are available at the normal locations...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: cass-operator, overmind, k8ssandra-operator, runc, azuredisk-csi-fips, minio-operator, neuvector-scanner-fips, crossplane-provider-azure-sql, juicefs, helm, aws-application-networking-k8s-fips, flux-image-reflector-controller-fips, grpcurl, argo-workflows, etcd,...

Linux Distros Unpatched Vulnerability : CVE-2024-2605

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An attacker could have leveraged the Windows Error Reporter to run arbitrary code on the system escaping the sandbox. Note: This issue only affected Windows...

PT-2025-46320

Name of the Vulnerable Software and Affected Versions ManageEngine Exchange Reporter Plus versions 5723 and below Description ManageEngine Exchange Reporter Plus versions 5723 and below are susceptible to a Stored Cross-Site Scripting XSS issue within the Custom report functionality. This allows...