CVE-2025-68144

CVE-2025-68144 affects mcp-server-git. In versions prior to 2025.12.17, the git_diff and git_checkout functions forward user-controlled arguments directly to the git CLI without sanitization. This allows flag-like values (for example, --output=/path/to/file) to be interpreted as git options rathe...

PT-2025-51937

Name of the Vulnerable Software and Affected Versions mcp-server-git versions prior to 2025.12.17 Description The git diff and git checkout functions in mcp-server-git did not properly sanitize user-supplied arguments before passing them to git CLI commands. Specifically, flag-like values, such a...

CVE-2025-40053: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: dlink: handle copythresh allocation failure The driver did not handle failure of netdevallocskbipalign. If the allocation failed, dereferencing skb-protocol could lead to a NULL pointer dereference. This patch tries to...

CVE-2025-10006

The WPBakery Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'revslidervc' shortcode in all versions up to, and including, 8.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

rev-up-your-harley (>=0.1.0, <=1.0.1), rustpython-vm (>=0.1.0, <=0.1.1) +2 more potentially affected by unknown CVE via unic-emoji (>=0.7.0, <=0.9.0)

unic-emoji CARGO version =0.7.0, =0.1.0, =0.1.0, =0.7.0, =0.7.0, =0.9.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0084...

rev-up-your-harley (>=0.1.0, <=1.0.1), rustpython-vm (>=0.1.0, <=0.1.1) +2 more potentially affected by unknown CVE via unic-char (>=0.6.0, <=0.9.0)

unic-char CARGO version =0.6.0, =0.1.0, =0.1.0, =0.6.0, =0.7.0, =0.9.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0086...

rev-up-your-harley (>=0.1.0, <=1.0.1), rustpython-vm (>=0.1.0, <=0.1.1) +1 more potentially affected by unknown CVE via unic (>=0.7.0, <=0.9.0)

unic CARGO version =0.7.0, =0.1.0, =0.1.0, =0.7.0, =0.9.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0095...

doge_dns (>=0.2.4-beta, <=1.0.2), rev-up-your-harley (>=0.1.0, <=1.0.1) +3 more potentially affected by unknown CVE via unic-idna (>=0.5.0, <=0.9.0)

unic-idna CARGO version =0.5.0, =0.2.4-beta, =0.1.0, =0.1.0, =0.5.0, =0.7.0, =0.9.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0085...

doge_dns (>=0.2.4-beta, <=1.0.2), rev-up-your-harley (>=0.1.0, <=1.0.1) +4 more potentially affected by unknown CVE via unic-idna-mapping (>=0.4.0, <=0.9.0)

unic-idna-mapping CARGO version =0.4.0, =0.2.4-beta, =0.1.0, =0.1.0, =0.5.0, =0.7.0, =0.4.0, =0.9.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0097...

EUVD-2025-34979

The WPBakery Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'revslidervc' shortcode in all versions up to, and including, 8.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2025-10006

The WPBakery Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'revslidervc' shortcode in all versions up to, and including, 8.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2025-10006

CVE-2025-10006 affects WPBakery Page Builder for WordPress (

PT-2025-42692

Name of the Vulnerable Software and Affected Versions WPBakery Page Builder plugin for WordPress versions prior to 8.6 Description The software is susceptible to Stored Cross-Site Scripting through the 'rev slider vc' shortcode due to inadequate input sanitization and output escaping of...

EUVD-2017-5921

Malware in sbrugna...

EUVD-2008-5889

Malware in sbrugna...

Clash Verge Rev security vulnerability

Clash Verge Rev is an open source proxy tool from Clash Verge Rev. A security vulnerability exists in Clash Verge Rev 2.2.3 and earlier versions, which stems from installing system services by default and exposing critical functionality via an unauthorized HTTP API, which could lead to local...

EUVD-2025-20666

Malicious code in bioql PyPI...

EUVD-2025-14125

Malicious code in bioql PyPI...

EUVD-2024-20693

Malicious code in bioql PyPI...

CVE-2025-56448: Authentication Bypass by Capture-replay

The Positron PX360BT SW REV 8 car alarm system is vulnerable to a replay attack due to a failure in implementing rolling code security. The alarm system does not properly rotate or invalidate used codes, allowing repeated reuse of captured transmissions. This exposes users to significant security...