EUVD-2025-1571

Malicious code in bioql PyPI...

EUVD-2024-17188

Malicious code in bioql PyPI...

EUVD-2025-22612

Malicious code in bioql PyPI...

Bolt before 3.6.10 has XSS via an image's alt or title field.

...

CVE-2025-59150 Suricata: Keyword tls.subjectaltname can lead to NULL-ptr deref

Suricata is a network IDS, IPS and NSM engine developed by the OISF Open Information Security Foundation and the Suricata community. Version 8.0.0's usage of the tls.subjectaltname keyword can lead to a segmentation fault when the decoded subjectaltname contains a NULL byte. This issue is fixed i...

CLSA-2025-1758020272 Update of alt-php

Bump ABI 5.4.0-221...

CLSA-2025-1758011363 Update of alt-php

Bump ABI 4.15.0-251...

CLSA-2025-1758010124 Update of alt-php

Bump ABI 4.4.0-278...

An issue was discovered in Mbed TLS before 2.24.0. The verification of X.509 certificates when matching the expected common name (the cn argument of mbedtls_x509_crt_verify) with the actual certificate name is mishandled: when the subjecAltName extension is present, the expected name is compared to any name in that extension regardless of its type. This means that an attacker could impersonate a 4-byte or 16-byte domain by getting a certificate for the corresponding IPv4 or IPv6 address (this would require the attacker to control that IP address, though).

...

WordPress Ai Image Alt Text Generator for WP Plugin <= 1.1.5 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by Bao BlueRock in WordPress Plugin Ai Image Alt Text Generator for WP versions = 1.1.5...

Malicious code in ug-deep-alt (npm)

The package ug-deep-alt was found to contain malicious code...

MAL-2025-9758 Malicious code in @zalastax/nolb-_alt (npm)

The package @zalastax/nolb-alt was found to contain malicious code...

MAL-2025-37515 Malicious code in ug-deep-alt (npm)

The package ug-deep-alt was found to contain malicious code...

Linux Distros Unpatched Vulnerability : CVE-2025-38391

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: typec: altmodes/displayport: do not index invalid pinassignments A poorly implemented DisplayPort Alt Mode port partner can indicate that its pin assignmen...

Linux Distros Unpatched Vulnerability : CVE-2021-29946

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ports that were written as an integer overflow above the bounds of a 16-bit integer could have bypassed port blocking restrictions when used in the Alt-Svc...

CLSA-2025-1754037921 Update of alt-php

Bump ABI 4.15.0-250...

CLSA-2025-1754037378 Update of alt-php

Bump ABI 4.4.0-277...

Malicious code in pr0tobuff-loaders-alt (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-6649 Malicious code in pr0tobuff-loaders-alt (npm)

--- -= Per source details. Do not edit below this line.=-...

SUSE CVE-2025-38391

In the Linux kernel, the following vulnerability has been resolved: usb: typec: altmodes/displayport: do not index invalid pinassignments A poorly implemented DisplayPort Alt Mode port partner can indicate that its pin assignment capabilities are greater than the maximum value, DPPINASSIGNF. In...