PT-2026-20425

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw related to memory management during System Management Unit SMU Mode 1 reset. During the reset cycle, the Application Specific Integrated Circuit ASIC...

EUVD-2025-141118

Malicious code in kapvino-smu-idabi npm...

MAL-2025-175146 Malicious code in kapvino-smu-idabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7d74c87947aec28bda00c39d23dd58432513d6c3ccdc1eb9753e590f02bcc1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990499)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990499 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7 For pptable structs that use flexible array...

EUVD-2021-13170

Malware in sbrugna...

EUVD-2021-13185

Malware in sbrugna...

EUVD-2022-55246

Malicious code in bioql PyPI...

EUVD-2025-21626

Malicious code in bioql PyPI...

EUVD-2021-33418

Malicious code in bioql PyPI...

EUVD-2023-24710

Malicious code in bioql PyPI...

CVE-2023-53152

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix calltrace warning in amddrmbuddyfini The following call trace is observed when removing the amdgpu driver, which is caused by that BOs allocated for psp are not freed until removing. 61811.450562 RIP:...

PT-2025-37198

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.15.0-03037-gaacc73ceeb8b Description: A flaw exists in the Linux kernel's IOMMU subsystem, specifically within the ARM SMU Qualcomm component. The vulnerability stems from a missing workaround for the SM6115...

Linux Distros Unpatched Vulnerability : CVE-2022-49971

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amd/pm: Fix a potential gpumetricstable memory leak Memory is allocated for gpumetricstable in smuv1304initsmctables, but not freed in smuv1304finismctables...

CVE-2025-49031

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Stefan M. SMu Manual DoFollow manuall-dofollow allows Reflected XSS.This issue affects SMu Manual DoFollow: from n/a through = 1.8.1...

CVE-2025-49031

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Stefan M. SMu Manual DoFollow manuall-dofollow allows Reflected XSS.This issue affects SMu Manual DoFollow: from n/a through = 1.8.1...

CVE-2025-49031 WordPress SMu Manual DoFollow plugin <= 1.8.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Stefan M. SMu Manual DoFollow manuall-dofollow allows Reflected XSS.This issue affects SMu Manual DoFollow: from n/a through = 1.8.1...

CVE-2025-49031

CVE-2025-49031 is a Reflected Cross-Site Scripting (XSS) vulnerability in the WordPress plugin SMu Manual DoFollow, affecting versions up to and including 1.8.1. The issue stems from improper neutralization of input during web page generation, enabling reflected XSS when processing user-controlle...

WordPress plugin SMu Manual DoFollow cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in...

PT-2025-29804 · Unknown · Smu Manual Dofollow

Name of the Vulnerable Software and Affected Versions: SMu Manual DoFollow versions through 1.8.1 Description: The software contains a Reflected Cross-site Scripting XSS issue due to improper neutralization of input during web page generation. This allows for the injection of malicious scripts in...

SUSE CVE-2025-38319

In the Linux kernel, the following vulnerability has been resolved: drm/amd/pp: Fix potential NULL pointer dereference in atomctrlinitializemcregtable The function atomctrlinitializemcregtable and atomctrlinitializemcregtablev22 does not check the return value of smuatomgetdatatable. If...