PT-2026-25152

The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.6.9.29. This is due to the get item permissions check method granting access to users with the ssa manage...

Slackware Linux 15.0 / current mozilla-firefox Vulnerability (SSA:2026-047-03)

The version of mozilla-firefox installed on the remote host is prior to 140.7.1esr. It is, therefore, affected by a vulnerability as referenced in the SSA:2026-047-03 advisory. New mozilla-firefox packages are available for Slackware 15.0 and -current to fix a security issue. Tenable has extracte...

Slackware Linux 15.0 / current lcms2 Vulnerability (SSA:2026-009-01)

The version of lcms2 installed on the remote host is prior to 2.18. It is, therefore, affected by a vulnerability as referenced in the SSA:2026-009-01 advisory. New lcms2 packages are available for Slackware 15.0 and -current to fix a security issue. Tenable has extracted the preceding descriptio...

Slackware Linux 15.0 / current libtasn1 Vulnerability (SSA:2026-008-01)

The version of libtasn1 installed on the remote host is prior to 4.21.0. It is, therefore, affected by a vulnerability as referenced in the SSA:2026-008-01 advisory. New libtasn1 packages are available for Slackware 15.0 and -current to fix a security issue. Tenable has extracted the preceding...

Slackware Linux 15.0 / current gnupg2 Multiple Vulnerabilities (SSA:2025-364-01)

The version of gnupg2 installed on the remote host is prior to 2.2.52 / 2.5.16. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2025-364-01 advisory. New gnupg2 packages are available for Slackware 15.0 and -current to fix security issues. Tenable has extracted the...

Slackware Linux 15.0 / current vim Vulnerability (SSA:2025-361-01)

The version of vim installed on the remote host is prior to 9.1.2028. It is, therefore, affected by a vulnerability as referenced in the SSA:2025-361-01 advisory. New vim packages are available for Slackware 15.0 and -current to fix a security issue. Tenable has extracted the preceding descriptio...

Slackware Linux 15.0 / current mozilla-firefox Multiple Vulnerabilities (SSA:2025-343-01)

The version of mozilla-firefox installed on the remote host is prior to 140.6.0esr. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2025-343-01 advisory. New mozilla-firefox packages are available for Slackware 15.0 and -current to fix security issues. Tenable has...

Slackware Linux 15.0 / current libxslt Multiple Vulnerabilities (SSA:2025-332-01)

The version of libxslt installed on the remote host is prior to 1.1.44. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2025-332-01 advisory. New libxslt packages are available for Slackware 15.0 and -current to fix security issues. Tenable has extracted the...

Slackware: Security Advisory (SSA:2025-332-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Slackware Linux 15.0 / current libarchive Vulnerability (SSA:2025-322-01)

The version of libarchive installed on the remote host is prior to 3.8.3. It is, therefore, affected by a vulnerability as referenced in the SSA:2025-322-01 advisory. New libarchive packages are available for Slackware 15.0 and -current to fix security issues. Tenable has extracted the preceding...

CVE-2025-40150

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid migrating empty section It reports a bug from device w/ zufs: F2FS-fs dm-64: Inconsistent segment 173822 type 1, 0 in SSA and SIT F2FS-fs dm-64: Stopped filesystem due to reason: 4 Thread A Thread B -...

EUVD-2025-147400

Malicious code in tusya-fasss-ssa npm...

Malicious code in tusya-fass-ssa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0410e5309c33ed4b4e03dbeb718e4d1458f878aa169cf6f0221bc017d824b69a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-147401

Malicious code in tusya-fass-ssa npm...

Malicious code in dajouka-ssa-t9a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e59cf2b749557aa341d10f9df914795c195bf4e01fcb339656c76b8f0b00c92f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dajouka-fass-ssa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16d9d15ccb31a73e4aaa4e96d35d1ef92f9e284b77ff3a124a73d151353be030 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dajouka-faa-ssa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0afd3f263ecdfa3a5559991b60bd078fbcc58d0311ef2046af854e7dc23b6404 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Slackware Linux 15.0 / current tigervnc Multiple Vulnerabilities (SSA:2025-302-02)

The version of tigervnc installed on the remote host is prior to 1.12.0 / 1.15.0. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2025-302-02 advisory. New tigervnc packages are available for Slackware 15.0 and -current to fix security issues. Tenable has extracted...

Slackware Linux 15.0 openssl Vulnerability (SSA:2025-296-01)

The version of openssl installed on the remote host is prior to 1.1.1zd. It is, therefore, affected by a vulnerability as referenced in the SSA:2025-296-01 advisory. New openssl packages are available for Slackware 15.0 to fix a security issue. Tenable has extracted the preceding description bloc...

Slackware Linux 15.0 / current bind Multiple Vulnerabilities (SSA:2025-295-01)

The version of bind installed on the remote host is prior to 9.18.41 / 9.20.15. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2025-295-01 advisory. New bind packages are available for Slackware 15.0 and -current to fix security issues. Tenable has extracted the...