WordPress Custom Post Carousels with Owl plugin < 1.4.12 - Contributor+ Stored XSS vulnerability

Contributor+ Stored XSS vulnerability discovered by Pierre Rudloff in WordPress Plugin Custom Post Carousels with Owl versions 1.4.12...

GHSA-M248-72RH-CPX4 Jenkins Dead Man's Snitch Plugin vulnerability does not mask tokens

Jenkins Dead Man's Snitch Plugin 0.1 does not mask Dead Man's Snitch tokens displayed on the job configuration form, increasing the potential for attackers to observe and capture them...

CGA-WGV9-XR5P-XPJG

Bulletin has no description...

CGA-96HV-VR95-3GF7

Bulletin has no description...

CGA-WPG8-JQM9-JQ8X

Bulletin has no description...

CVE-2025-38255 lib/group_cpus: fix NULL pointer dereference from group_cpus_evenly()

In the Linux kernel, the following vulnerability has been resolved: lib/groupcpus: fix NULL pointer dereference from groupcpusevenly While testing nullblk with configfs, echo 0 pollqueues will trigger following panic: BUG: kernel NULL pointer dereference, address: 0000000000000010 Oops: Oops: 000...

RHSA-2025:10673 Red Hat Security Advisory: kernel security update

Bulletin has no description...

RHSA-2025:10620 Red Hat Security Advisory: jq security update

Bulletin has no description...

MAL-2025-5750 Malicious code in houimlogs22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c17d30387b6d0c43cbc6b39b5be60746ceb7ef2a5a6f82469ef4f40f7e46f0c0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

BELL-CVE-2025-38236

Bulletin has no description...

MAL-2025-5664 Malicious code in ai-guide (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 344da047769642e93f7d727b850c547fe9be2272daef99e44ef3f7c9b0f4bc77 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5827 Malicious code in textlocal-messenger (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 977a0980a8abb08f4b44cafb9b81f7b9450f2323d84939a31cd020608e7ee41c Any computer that has this package installed or running should be considered...

CVE-2025-49714

Trust boundary violation in Visual Studio Code - Python extension allows an unauthorized attacker to execute code locally...

CGA-CFF4-QQ7G-Q7CR

Bulletin has no description...

BELL-CVE-2025-32023

Bulletin has no description...

BELL-CVE-2025-48367

Bulletin has no description...

Security Bulletin: IBM watsonx Orchestrate Cartridge affected by vulnerability in axios-1.6.1.tgz

Summary IBM watsonx Orchestrate Cartridge contains a vulnerable version of axios-1.6.1.tgz Vulnerability Details IBM X-Force ID: 386108 DESCRIPTION: axios is vulnerable to a denial of service, caused by a regular expression denial of service ReDoS flaw in the format method. By sending a specially...

BELL-CVE-2025-38227

Bulletin has no description...

Regular Expression Denial Of Service (ReDoS)

Transformers is vulnerable to Regular Expression Denial of Service ReDoS. The vulnerability is due to inefficient regular expression complexity in the SETTINGRE variable within chat.py, which allows an attacker to exploit exponential backtracking using specially crafted input...

MAL-2025-5742 Malicious code in zplex (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4ad25f43dff85fb90079f71e1416944834a6e7244faf6a1c75aa20fe17661db3 Any computer that has this package installed or running should be considered...