CVE-2025-62783 InventoryGui affected by item duplication in GUIs which use GuiStorageElement

InventoryGui is a library for creating chest GUIs for Bukkit/Spigot plugins. Versions 1.6.1-SNAPSHOT and earlier contain a vulnerability where any plugin using the GuiStorageElement can allow item duplication when the experimental Bundle item feature is enabled on the server. The vulnerability is...

CVE-2025-62783

InventoryGui is a library for Bukkit/Spigot plugins. Versions 1.6.1-SNAPSHOT and earlier contain a vulnerability in GuiStorageElement that can allow item duplication when the experimental Bundle item feature is enabled on the server. The issue is mitigated by upgrading to 1.6.2-SNAPSHOT. No explo...

CVE-2025-62782 InventoryGUI vulnerable to item duplication via Bundle items when using GuiStorageElement

InventoryGui is a library for creating chest GUIs for Bukkit/Spigot plugins. Versions 1.6.3-SNAPSHOT and earlier contain a vulnerability where GUIs using GuiStorageElement can allow item duplication when the experimental Bundle item feature is enabled on the server. The vulnerability is resolved ...

InventoryGui allows item duplication with experimental "Bundle" item in GUIs which use GuiStorageElement

Impact Any plugin using the GuiStorageElement is impacted when used on a server which allows the currently experimental Bundle items. Patches Patched with https://github.com/Phoenix616/InventoryGui/commit/00e684bd689ebc60bcb5b83ce4ef3c5a01778494 "backported" to 1.6.3-SNAPSHOT Update to...

Malicious Package

Overview ajna-rewards-snapshot is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Siemens SIMATIC Devices Use of Uninitialized Resource (CVE-2024-26920)

In the Linux kernel, the following vulnerability has been resolved: tracing/trigger: Fix to return error if failed to alloc snapshot This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc...

PT-2025-44048

Name of the Vulnerable Software and Affected Versions InventoryGui versions 1.6.1-SNAPSHOT and earlier Description A flaw exists in InventoryGui that could allow item duplication when the experimental Bundle item feature is enabled on the server. This issue affects any plugin utilizing the...

Siemens SIMATIC Devices Improper Locking (CVE-2024-35805)

In the Linux kernel, the following vulnerability has been resolved: dm snapshot: fix lockup in dmexceptiontableexit There was reported lockup when we exit a snapshot with many exceptions. Fix this by adding condresched to the loop that frees the exceptions. This plugin only works with Tenable.ot...

Malicious code in ajna-rewards-snapshot (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5ea81a48c03116271d6cc0fb54220dcc73b51b0ad8f01543f45365ec51c1de3 Any computer that has this package installed or running should be considered...

MAL-2025-48612 Malicious code in ajna-rewards-snapshot (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5ea81a48c03116271d6cc0fb54220dcc73b51b0ad8f01543f45365ec51c1de3 Any computer that has this package installed or running should be considered...

Fedora 42 : golang-github-facebook-time (2025-a6cb455ca2)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-a6cb455ca2 advisory. - Update to latest snapshot - Switch to vendoring dependencies per the upcoming Golang guidelines, this allows us to ship on EL10 Tenable has...

Fedora 41 : golang-github-facebook-time (2025-cf2e1f1604)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-cf2e1f1604 advisory. - Update to latest snapshot - Switch to vendoring dependencies per the upcoming Golang guidelines, this allows us to ship on EL10 Tenable has...

Malicious code in mender-snapshot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e55028420d641ba5efac6b963704e410ceddc79d03b1bb881525d553e3471d3a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

EUVD-2025-35756

Malicious code in mender-snapshot npm...

Malicious Package

Overview mender-snapshot is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2025-48578 Malicious code in mender-snapshot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e55028420d641ba5efac6b963704e410ceddc79d03b1bb881525d553e3471d3a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Improper Permission Checks

Apache ZooKeeper is vulnerable to improper permission checks. The vulnerability is due to insufficient authorization validation in the AdminServer, allowing authorized clients to execute snapshot and restore commands without proper permissions...

CVE-2025-10167

The Stock History & Reports Manager for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'algwcstocksnapshotrestocked shortcode in all versions up to, and including, 2.2.2 due to insufficient input sanitization and output escaping on user supplied...

EUVD-2025-33853

The Stock History & Reports Manager for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'algwcstocksnapshotrestocked shortcode in all versions up to, and including, 2.2.1 due to insufficient input sanitization and output escaping on user supplied...

PT-2025-41663

Name of the Vulnerable Software and Affected Versions Stock History & Reports Manager for WooCommerce plugin for WordPress versions up to and including 2.2.1 Description The Stock History & Reports Manager for WooCommerce plugin for WordPress is susceptible to Stored Cross-Site Scripting through...