WordPress CSS3 Vertical Web Pricing Tables plugin <= 1.9 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Plugin CSS3 Vertical Web Pricing Tables versions = 1.9...

CGA-V9C8-GPV8-6X2C

Bulletin has no description...

CGA-WCGV-G3J4-XMPF

Bulletin has no description...

CVE-2025-37099

A remote code execution vulnerability exists in HPE Insight Remote Support IRS prior to v7.15.0.646...

CGA-QCHX-PC45-JQ7G

Bulletin has no description...

GHSA-XG8H-J46F-W952 Pillow vulnerability can cause write buffer overflow on BCn encoding

There is a heap buffer overflow when writing a sufficiently large 64k encoded with default settings image in the DDS format due to writing into a buffer without checking for available space. This only affects users who save untrusted data as a compressed DDS image. Unclear how large the potential...

CGA-G395-3W3W-P3PP

Bulletin has no description...

CGA-WC6J-PPHM-JGG7

Bulletin has no description...

CGA-PJJH-7Q49-584W

Bulletin has no description...

CGA-7PFG-6W4G-4739

Bulletin has no description...

BELL-CVE-2025-38087

Bulletin has no description...

BELL-CVE-2025-38088

Bulletin has no description...

BELL-CVE-2025-32462

Bulletin has no description...

BELL-CVE-2025-38089

Bulletin has no description...

BELL-CVE-2025-38090

Bulletin has no description...

MAL-2025-5524 Malicious code in velocky (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 59c90a9e49cd7bf616362e6e175865e9d59a7399ac59ad7cb8aafd9eb7b82981 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-53096 Sunshine clickjacking in the UI leads to unauthorized actions being performed

Sunshine is a self-hosted game stream host for Moonlight. Prior to version 2025.628.4510, the web UI of Sunshine lacks protection against Clickjacking attacks. This vulnerability allows an attacker to embed the Sunshine interface within a malicious website using an invisible or disguised iframe. ...

Electron vulnerable to Heap Buffer Overflow in NativeImage

Impact The nativeImage.createFromPath and nativeImage.createFromBuffer functions call a function downstream that is vulnerable to a heap buffer overflow. An Electron program that uses either of the affected functions is vulnerable to a buffer overflow if an attacker is in control of the image's...

CVE-2025-52898 Frappe account takeover via password reset token leakage

Frappe is a full-stack web application framework. Prior to versions 14.94.3 and 15.58.0, a carefully crafted request could lead to a malicious actor getting access to a user's password reset token. This can only be exploited on self hosted instances configured in a certain way. Frappe Cloud users...

MAL-2025-5340 Malicious code in datanerd (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e27cc5b384d5f579c6bb715b63787b1c01c0dea212e824f44db6e5fe99b824d5 Any computer that has this package installed or running should be considered...