MAL-2025-5363 Malicious code in astro-island (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

CGA-V27H-RH4V-G3H6

Bulletin has no description...

CVE-2025-6674 CKEditor5 Youtube - Moderately critical - Cross-site Scripting - SA-CONTRIB-2025-081

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal CKEditor5 Youtube allows Cross-Site Scripting XSS.This issue affects CKEditor5 Youtube: from 0.0.0 before 1.0.3...

WordPress WP-Recall plugin <= 16.26.14 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin WP-Recall versions = 16.26.14...

WordPress Team Showcase plugin < 25.05.13 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Tran Nguyen Bao KhanhVCI - VNPT in WordPress Plugin Team Showcase versions 25.05.13...

RHSA-2025:9623 Red Hat Security Advisory: osbuild-composer security update

Bulletin has no description...

MAL-2025-5327 Malicious code in justeat-storybook (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 577d8ffd11e5da3a5000b8a390c45c8474d2dd362e509a65a107f2b0df13e563 The OpenSSF Package Analysis project identified 'justeat-storybook' @ 1.0.3 npm as malicious. It is considered malicious because: - The package...

WordPress Pressroom - News Magazine WordPress Theme Theme <= 6.9 is vulnerable to Cross Site Scripting (XSS)

Software Pressroom - News Magazine WordPress Theme Type Theme Vulnerable versions = 6.9 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2025-32311 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 8441b464fd57 Credits Tran Nguyen...

MAL-2025-5250 Malicious code in nstmrt-stf-api-poc (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 29e69957371cd4fe181aa65e4f774a3c807e8ff11ebda5f2226dd881f89961ae The OpenSSF Package Analysis project identified 'nstmrt-stf-api-poc' ...

MAL-2025-5466 Malicious code in ted-ui (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in ted-ui (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-5393 Malicious code in dropdown_styles.css (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-5426 Malicious code in kendo.core.min (npm)

The package communicates with a domain associated with malicious activity...

RHSA-2025:9584 Red Hat Security Advisory: kernel security update

Bulletin has no description...

MAL-2025-5266 Malicious code in attributors (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis dbefeaf34d3565832f706ae95a143747b2d0ff0a593532a3b8088020fd11bc1d The OpenSSF Package Analysis project identified 'attributors' @ 99.99...

BELL-CVE-2025-38083

Bulletin has no description...

CGA-J2PH-8QFQ-2Q24

Bulletin has no description...

CGA-GGQG-WV33-6HR8

Bulletin has no description...

CGA-P899-8W4F-7VCH

Bulletin has no description...

WordPress Litho Theme <= 3.0 is vulnerable to Arbitrary File Deletion

Software Litho Type Theme Vulnerable versions = 3.0 Fixed in 3.1 OWASP Top 10 A3: Injection Classification Arbitrary File Deletion CVE CVE-2025-49879 Patch priority High CVSS severity High 8.6 Developer Claim ownership PSID b5c6a3b3bdf8 Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity...