CVE-2025-66112 WordPress Accessibility Toolkit by WebYes plugin <= 2.0.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in WebToffee Accessibility Toolkit by WebYes accessibility-plus allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Accessibility Toolkit by WebYes: from n/a through = 2.0.4...

PT-2025-47774

Missing Authorization vulnerability in WebToffee Accessibility Toolkit by WebYes accessibility-plus allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Accessibility Toolkit by WebYes: from n/a through = 2.0.4...

WordPress plugin Accessibility Toolkit by WebYes 安全漏洞

WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. A security vulnerability exists in the WordPress plugin Accessibility Toolkit by WebYes, which...

Budget Samsung phones shipped with unremovable spyware, say researchers

A controversy over data-gathering software secretly installed on Samsung phones has erupted again after a new accusatory post appeared on X last week. In the post on the social media site, cybersecurity newsletter International Cyber Digest warned about a secretive application called AppCloud tha...

Exploit for Improper Handling of Length Parameter Inconsistency in Nvidia Cuda_Toolkit

CVE-2025-23247 Epic Collab with @reubensammut : as alaways :...

[SECURITY] Fedora 43 Update: docker-buildkit-0.25.2-1.fc43

Concurrent, cache-efficient, and Dockerfile-agnostic builder toolkit...

[SECURITY] Fedora 41 Update: docker-buildkit-0.25.2-1.fc41

Concurrent, cache-efficient, and Dockerfile-agnostic builder toolkit...

[SECURITY] Fedora 42 Update: docker-buildkit-0.25.2-1.fc42

Concurrent, cache-efficient, and Dockerfile-agnostic builder toolkit...

Zip Slip Vulnerability in NLTK Downloader Leading to Remote Code Execution

The NLTK downloader component contains a critical vulnerability where the unzipiter function uses zipfile.extractall without path validation or security checks. This allows malicious zip packages to achieve arbitrary code execution when extracted and loaded by NLTK. The vulnerability exists becau...

ROS-20251112-06

A vulnerability in the NVIDIA CUDA GPU parallel computing software toolkit is related to boundary conditions in cuobjdump and nvdisasm. Toolkit is related to boundary conditions in cuobjdump and nvdisasm. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

[SECURITY] Fedora 41 Update: webkitgtk-2.50.1-1.fc41

WebKitGTK is the port of the WebKit web rendering engine to the GTK platform...

EUVD-2025-77349

Malicious code in chillylion-toolteadev npm...

EUVD-2025-75292

Malicious code in variousporpoise-toolteadev npm...

Intel® MPI Library Software Advisory

Summary: A potential security vulnerability in some Intel® MPI Library software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-35972 Description: Uncontrolled search path for the Intel MPI...

Intel® VTune™ Profiler Software Advisory

Summary: A potential security vulnerability for some Intel® VTune™ Profiler software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-20056 Description: Improper input validation for some Intel...

ITT API Software Advisory

Summary: A potential security vulnerability in some Instrumentation and Tracing Technology API ITT API software may allow escalation of privilage. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-31931 Description: Uncontrolled...

ROS-20251111-02

A vulnerability in the NVIDIA CUDA parallel computing software toolkit for NVIDIA CUDA GPUs Toolkit is related to null pointer dereferencing error in cuobjdump and nvdisasm. Exploitation The vulnerability could allow an attacker to cause a denial of service...

Malicious code in resulting_wildfowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 980169b90185c7b8889087abbb2abc78d17d3c19a4a77324b5e3a1a96c891caa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-41743

Malicious code in react-icons-toolkit npm...

Malicious code in react-icons-toolkit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 224e1d5b1a2b01321da822c843e2013f28320e4b9d4d74487daef59c812557f6 The package react-icons-toolkit was found to contain malicious code. Source: ghsa-malware...