MiracleLinux 8 : firefox-115.9.1-1.el8.ML.1 (AXSA:2024-7652:13)

The remote MiracleLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2024-7652:13 advisory. nss: timing attack against RSA decryption CVE-2023-5388 Mozilla: Crash in NSS TLS method CVE-2024-0743 Mozilla: JIT code failed to save return...

transfig security update

1:3.2.6a-5 - Detect nan in spline control values - Fix for CVE-2025-46397...

Malicious Package

Overview wac-react-dom is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in victim-package-a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63c6e07506d6bce3381b3ad191f41efdd8c5cf244efe3e5302c93a22f4a3f862 The package victim-package-a was found to contain malicious code. Source: ghsa-malware e92a76802a941997e89cb243c7f4f37405b7865b7cc8e5b90aa9accb864ced...

MAL-2026-318 Malicious code in victim-package-a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63c6e07506d6bce3381b3ad191f41efdd8c5cf244efe3e5302c93a22f4a3f862 The package victim-package-a was found to contain malicious code. Source: ghsa-malware e92a76802a941997e89cb243c7f4f37405b7865b7cc8e5b90aa9accb864ced...

EUVD-2026-3091

Malicious code in victim-package-a npm...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000610)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000610 advisory. An elevation of privilege vulnerability in the kernel sound timer. Product: Android. Versions: Android kernel. Android ID A-37240993. Tenable has extracted the...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004349)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004349 advisory. An issue was discovered in the Linux kernel before 5.6.5. There is a use-after-free in block/bfq-iosched.c related to bfqidleslicetimerbody. Tenable has extracted th...

transfig security update

1:3.2.7b-11 - Detect nan in spline control values - CVE-2025-46397...

CVE-2025-70303

A heap overflow in the uncvparseconfig function of GPAC v2.4.0 allows attackers to cause a Denial of Service DoS via a crafted MP4 file...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003133)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003133 advisory. An elevation of privilege vulnerability in the Upstream kernel bluez. Product: Android. Versions: Android kernel. Android ID: A-63527053. Tenable has extracted the...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002861)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002861 advisory. A information disclosure vulnerability in the Upstream kernel encrypted-keys. Product: Android. Versions: Android kernel. Android ID: A-70526974. Tenable has extract...

Refugee Food Management System SQL Injection Vulnerability

Refugee Food Management System is a refugee food management system. Refugee Food Management System suffers from a SQL injection vulnerability that stems from the incorrect manipulation of parameter a in the file /home/addusers.php, no details of the vulnerability are available at this time...

CVE-2026-0853

Certain NVR models developed by A-Plus Video Technologies has a Sensitive Data Exposure vulnerability, allowing unauthenticated remote attackers to access the debug page and obtain device status information...

How Microsoft builds privacy and security to work hand-in-hand

The Deputy CISO blog series is where Microsoft Deputy Chief Information Security Officers CISOs share their thoughts on what is most important in their respective domains. In this series, you will get practical advice, tactics to start and stop deploying, forward-looking commentary on where the...

Astra Linux – Vulnerability in Firefox

Use-after-free in the Audio/Video: GMP component. This vulnerability was fixed in Firefox 146 and Thunderbird 146...

CVE-2025-40977

Stored Cross-Site Scripting XSS vulnerability in WorkDo's eCommerceGo SaaS, consisting of a lack of proper validation of user input by sending a POST request to ‘/store-ticket’, using the ‘subject’ and ‘description’ parameters...

A-Plus Video多款产品 安全漏洞

The A-Plus Video AP-RM864P, among others, is a network video recorder from A-Plus Video of Taiwan, China. A security vulnerability exists in a number of A-Plus Video products. The vulnerability stems from sensitive data leakage and could allow an unauthenticated, remote attacker to access debug...

WordPress YITH WooCommerce Request A Quote plugin <= 2.46.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by PPzzAArr in WordPress Plugin YITH WooCommerce Request A Quote versions = 2.46.0...

CVE-2023-25437

An issue was discovered in vTech VCS754 version 1.1.1.A before 1.1.1.H, allows attackers to gain escalated privileges and gain sensitive information due to cleartext passwords passed in the raw HTML...