PT-2025-30352 · WordPress · Ebook Store

Name of the Vulnerable Software and Affected Versions: The Ebook Store plugin for WordPress versions prior to 5.8012 Description: The Ebook Store plugin for WordPress is susceptible to Stored Cross-Site Scripting via the Order Details. Insufficient input sanitization and output escaping allows...

PT-2025-43747

Name of the Vulnerable Software and Affected Versions langgraph-checkpoint-sqlite version 2.0.10 Description A SQL injection vulnerability exists in the LangGraph's SQLite store implementation within the langchain-ai/langgraph repository. The issue stems from improper handling of filter operators...

ALSA-2025:11401 Important: valkey security update

Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing s...

WordPress Plugin EBook Store Cross-Site Script Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference via the mbedtlsasn1storenameddata function. An attacker can cause a crash and denial of service by providing input that results in a NULL pointer with a non-zero length value. Note: This only affects application...

ALPINE-CVE-2025-48965

Mbed TLS before 3.6.4 has a NULL pointer dereference because mbedtlsasn1storenameddata can trigger conflicting data with val.p of NULL but val.len greater than zero...

DEBIAN-CVE-2025-48965

Mbed TLS before 3.6.4 has a NULL pointer dereference because mbedtlsasn1storenameddata can trigger conflicting data with val.p of NULL but val.len greater than zero...

UBUNTU-CVE-2025-48965

Mbed TLS before 3.6.4 has a NULL pointer dereference because mbedtlsasn1storenameddata can trigger conflicting data with val.p of NULL but val.len greater than zero...

Minor update(2) for Vivaldi iOS Browser 7.5

Head to the App Store and download the browser. Your rating for our browser matters. ⭐️ ⭐️ ⭐️ ⭐️ ⭐️ Enjoy! Changelog The following is a list of changes since the first 7.5 minor update: Crash Translate panel crashes for certain languages VIB-1332 Chromium Update to 138.0.7204.162: includes fix for...

New Konfety Malware Variant Evades Detection by Manipulating APKs and Dynamic Code

Cybersecurity researchers have discovered a new, sophisticated variant of a known Android malware referred to as Konfety that leverages the evil twin technique to enable ad fraud. The sneaky approach essentially involves a scenario wherein two variants of an application share the same package nam...

WordPress Store Exporter plugin <= 2.7.6 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by LVT-tholv2k in WordPress Plugin Store Exporter versions = 2.7.6...

WordPress WooCommerce Store Toolkit plugin <= 2.4.3 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by LVT-tholv2k in WordPress Plugin WooCommerce Store Toolkit versions = 2.4.3...

CVE-2025-31267

An authentication issue was addressed with improved state management. This issue is fixed in App Store Connect 3.0. An attacker with physical access to an unlocked device may be able to view sensitive user information...

CVE-2025-7411

A vulnerability was found in code-projects LifeStyle Store 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /success.php. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has...

CVE-2025-7410

A vulnerability was found in code-projects LifeStyle Store 1.0. It has been classified as critical. Affected is an unknown function of the file /cartremove.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed...

net: ibmveth: make veth_pool_store stop hanging

...

com.nimbusds:oauth2-oidc-sdk (>=4.6, <=4.7), com.nimbusds:oidc-session-store (1.2) potentially affected by CVE-2025-53864 via com.nimbusds:nimbus-jose-jwt (3.2.1)

com.nimbusds:nimbus-jose-jwt MAVEN version 3.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.nimbusds:nimbus-jose-jwt and may be impacted: - com.nimbusds:oauth2-oidc-sdk =4.6, =4.7 - com.nimbusds:oidc-session-store 1.2 Source cves: CVE-2025-538...

com.nimbusds:oauth2-oidc-sdk (4.8), com.nimbusds:oidc-session-store (>=1.2.2, <=1.3.1) potentially affected by CVE-2025-53864 via com.nimbusds:nimbus-jose-jwt (3.4)

com.nimbusds:nimbus-jose-jwt MAVEN version 3.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.nimbusds:nimbus-jose-jwt and may be impacted: - com.nimbusds:oauth2-oidc-sdk 4.8 - com.nimbusds:oidc-session-store =1.2.2, =1.3.1 Source cves:...

CVE-2025-7211

A vulnerability was found in code-projects LifeStyle Store 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /cartadd.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to t...

CVE-2025-31267

An authentication issue was addressed with improved state management. This issue is fixed in App Store Connect 3.0. An attacker with physical access to an unlocked device may be able to view sensitive user information...