Amazon Linux 2 : nerdctl, --advisory ALAS2-2025-3060 (ALAS-2025-3060)

The version of nerdctl installed on the remote host is prior to 2.1.5-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-3060 advisory. go-viper's mapstructure May Leak Sensitive Information in Logs When Processing Malformed Data CVE-2025-11065 Tenable has extracted...

Adobe InDesign Desktop 安全漏洞

Adobe InDesign Desktop is a page layout software from the American company Audobee Adobe. Adobe InDesign Desktop suffers from a heap buffer overflow vulnerability that can be exploited by an attacker to cause arbitrary code to be executed in the current user's environment...

Adobe InDesign Desktop 资源管理错误漏洞

Adobe InDesign is a set of layout and editing applications from the American company Audobee Adobe. Adobe InDesign suffers from a memory misreference vulnerability that can be exploited by an attacker to cause arbitrary code to be executed in the context of the current user...

Microsoft Windows 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Administrator Protection. An attacker could exploit this vulnerability to gain elevated privileges. The following products and version...

PT-2025-46389

Name of the Vulnerable Software and Affected Versions IntelR PROSet/Wireless WiFi Software for Windows versions prior to 23.160 Description A flaw exists in input validation within IntelR PROSet/Wireless WiFi Software for Windows. An authenticated attacker with high complexity access may be able ...

Linux Distros Unpatched Vulnerability : CVE-2025-13013

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mitigation bypass in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Firefox ESR 115.30, Thunderbird 145, and...

Amazon Linux 2 : runc, --advisory ALAS2NITRO-ENCLAVES-2025-077 (ALASNITRO-ENCLAVES-2025-077)

The version of runc installed on the remote host is prior to 1.3.3-2. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2NITRO-ENCLAVES-2025-077 advisory. Placeholder CVE. Details forthcoming CVE-2025-31133 net/url: insufficient validation of bracketed IPv6 hostnames...

EUVD-2025-44967

Malicious code in tuti-kue73-sukiwir npm...

Security update for erlang26

This update for erlang26 fixes the following issues: CVE-2025-48041: Fixed exhaustion of file handles in ssh bsc1249473 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command...

SUSE-SU-2025:4035-1 Security update for erlang26

This update for erlang26 fixes the following issues: - CVE-2025-48041: Fixed exhaustion of file handles in ssh bsc1249473...

MAL-2025-54173 Malicious code in patria-saguer20-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b63d0bcf0022c5aa08cedab7762fd43d42f007547d434b8276e0257e6eb04ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-52722 Malicious code in wibowo-keripik89-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba6a592bec973b358195544270c43b9ce60df376dfd3e0f13c0355de5d8f0a79 The package wibowo-keripik89-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-50442 Malicious code in fitri-lodeh52-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 533126ba46fcabbf7796fb5608091a29222097331cddcfd561c7dea634e7a721 The package fitri-lodeh52-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

EUVD-2025-39241

Malicious code in vida-dradag16-ruro npm...

MAL-2025-50525 Malicious code in tiara-lontong36-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93a6f08e2ad4129bacdd9ca909bbc7a6543ae49e687c883b1f8198d21e9d5ad2 The package tiara-lontong36-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

Security update for chromium (important)

openSUSE security update: security update for chromium ------------------------------------------------------------- Announcement ID: openSUSE-SU-2025-20008-1 Rating: important References: bsc1252881 Cross-References: CVE-2025-12428 CVE-2025-12429 CVE-2025-12430 CVE-2025-12431 CVE-2025-12432...

Fedora: Security Advisory (FEDORA-2025-10d2e6260b)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 9 : bind (ELSA-2025-19951)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-19951 advisory. - Prevent cache poisoning due to weak PRNG CVE-2025-40780 Tenable has extracted the preceding description block directly from the Oracle Linux securit...

CVE-2025-12352

The Gravity Forms plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the copypostimage function in all versions up to, and including, 2.9.20. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's serv...

Malicious Package

Overview SqlDbRepository is a malicious package. This package contains malicious code that injects time-delayed destructive payloads into database operations and target industrial control systems. Published under the NuGet alias shanhai666 together with 8 other malicious packages between 2023 and...