Malicious code in sanitize-encode-interpret-sigma-water (npm)

The package sanitize-encode-interpret-sigma-water was found to contain malicious code...

MAL-2025-27363 Malicious code in new-mock-sanitize-rho-signal (npm)

The package new-mock-sanitize-rho-signal was found to contain malicious code...

MAL-2025-32477 Malicious code in route-theta-sanitize-iota-await (npm)

The package route-theta-sanitize-iota-await was found to contain malicious code...

MAL-2025-32672 Malicious code in sanitize-encode-interpret-sigma-water (npm)

The package sanitize-encode-interpret-sigma-water was found to contain malicious code...

MAL-2025-23220 Malicious code in info-sanitize-shell-omicron-thread (npm)

The package info-sanitize-shell-omicron-thread was found to contain malicious code...

MAL-2025-32673 Malicious code in sanitize-interpret-zero-emulate-container (npm)

The package sanitize-interpret-zero-emulate-container was found to contain malicious code...

MAL-2025-32675 Malicious code in sanitize-runtime-test-dog-user (npm)

The package sanitize-runtime-test-dog-user was found to contain malicious code...

MAL-2025-32671 Malicious code in sanitize-easy-sigma-user-execute (npm)

The package sanitize-easy-sigma-user-execute was found to contain malicious code...

MAL-2025-37246 Malicious code in try-void-sandbox-sanitize-emulate (npm)

The package try-void-sandbox-sanitize-emulate was found to contain malicious code...

MAL-2025-32674 Malicious code in sanitize-object-pipe-class-grid (npm)

The package sanitize-object-pipe-class-grid was found to contain malicious code...

MAL-2025-28211 Malicious code in omega-old-catch-report-sanitize (npm)

The package omega-old-catch-report-sanitize was found to contain malicious code...

PT-2025-33416 · Sourcecodester · Covid19 Testing Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester COVID 19 Testing Management System version 1.0 Description: A SQL injection issue exists in an unknown functionality of the file /profile.php. Manipulation of the mobilenumber argument can lead to SQL injection, allowing for...

mod_security: ModSecurity Denial of Service Vulnerability

A denial of service flaw was found in ModSecurity. This vulnerability is present in the sanitiseArg/sanitizeArg function can be overloaded with a large number of arguments which will lead to excessive memory usage when processing json values. This may lead to a denial of service in the affected w...

PT-2025-32457 · Unknown · Portabilis I-Educar

Name of the Vulnerable Software and Affected Versions: Portabilis i-Educar versions up to 2.9 Description: A problematic issue exists in Portabilis i-Educar up to version 2.9, specifically within the Cadastrar Vínculo Page. The issue involves the manipulation of the nome argument in the...

PT-2025-32378 · Unknown · Easy Hosting Control Panel

Name of the Vulnerable Software and Affected Versions: Easy Hosting Control Panel EHCP version 20.04.1.b Description: The Easy Hosting Control Panel EHCP contains a SQL injection issue via the id parameter in the Change Settings function. Recommendations: As a temporary workaround, consider...

ublk: santizize the arguments from userspace when adding a device

...

ALSA-2025:12662 Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: padata: fix UAF in padatareorder CVE-2025-21727 kernel: HID: intel-ish-hid: Fix use-after-free issue in ishtphidremove CVE-2025-21928 kernel: HID: intel-ish-hid: Fix use-after-free issue ...

CVE-2025-54418 CodeIgniter4's ImageMagick Handler has Command Injection Vulnerability

CodeIgniter is a PHP full-stack web framework. A command injection vulnerability present in versions prior to 4.6.2 affects applications that use the ImageMagick handler for image processing imagick as the image library and either allow file uploads with user-controlled filenames and process...

PT-2025-31034 · Code Projects · Exam Form Submission

Name of the Vulnerable Software and Affected Versions: code-projects Exam Form Submission version 1.0 Description: A critical issue exists in code-projects Exam Form Submission 1.0 related to SQL injection. The manipulation of the credits argument in the processing of the file /admin/update s3.ph...

PT-2025-31042 · Code Projects · Exam Form Submission

Name of the Vulnerable Software and Affected Versions: code-projects Exam Form Submission version 1.0 Description: A critical issue exists in code-projects Exam Form Submission 1.0. The vulnerability is due to the manipulation of the ID argument in the /admin/delete s6.php file, leading to a SQL...