MAL-2025-5815 Malicious code in laredoute (npm)

The package communicates with a domain associated with malicious activity...

Siemens Solid Edge SE2025 安全漏洞

Siemens Solid Edge SE2025 is a development software from Siemens Germany. Siemens Solid Edge SE2025 suffers from a stack buffer overflow vulnerability that can be exploited by an attacker to execute code in the context of the current process...

WordPress Yogi Theme <= 2.9.0 is vulnerable to PHP Object Injection

Software Yogi Type Theme Vulnerable versions = 2.9.0 Fixed in N/A OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2025-24779 Patch priority High CVSS severity High 8.8 Developer Claim ownership PSID 10b2a1712298 Credits Bonds Required privilege Subscriber Published 8 July,...

GLSA-202507-08 : REXML: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202507-08 REXML: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in REXML. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block directly from...

MINI-99R8-HJ73-V5CJ

Bulletin has no description...

WordPress Media Folder plugin <= 1.0.0 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Media Folder versions = 1.0.0...

CVE-2025-6210 Hardlink-Based Path Traversal in run-llama/llama_index

A vulnerability in the ObsidianReader class of the run-llama/llamaindex repository, specifically in version 0.12.27, allows for hardlink-based path traversal. This flaw permits attackers to bypass path restrictions and access sensitive system files, such as /etc/passwd, by exploiting hardlinks. T...

MINI-RP39-2Q76-54QM

Bulletin has no description...

BELL-CVE-2025-38194

Bulletin has no description...

BELL-CVE-2025-38206

Bulletin has no description...

BELL-CVE-2025-38213

Bulletin has no description...

BELL-CVE-2025-38232

Bulletin has no description...

BELL-CVE-2025-38212

Bulletin has no description...

MINI-4M9P-QRVM-CR7M

Bulletin has no description...

MINI-275M-PX9M-RM3F

Bulletin has no description...

WordPress Electrician - Electrical Service WordPress Theme <= 1.0 is vulnerable to Cross Site Scripting (XSS)

Software Electrician - Electrical Service WordPress Type Theme Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2025-31055 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID c51b2442e459 Credits Tran Nguye...

MINI-9HC9-2FP5-GRRQ

Bulletin has no description...

MINI-9FMJ-4G6V-HJHW

Bulletin has no description...

MINI-3M2G-RH76-6767

Bulletin has no description...

MAL-2025-5636 Malicious code in ass-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d9179dab2c24e4e6a26ba920c58d4c057745bfaf4cf851a377864974a3fdfd1a The OpenSSF Package Analysis project identified 'ass-frontend' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...