WordPress plugin Gtbabel 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

CVE-2025-21842

creationtimestamp| type| source ---|---|--- 2025-03-07 10:15:45+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114120624260487340 2025-03-07 12:04:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljrxr4vhzt22 2025-03-07 12:25:47+00:00| seen| https://t.me/cvedetector/19...

CVE-2024-58086

In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Stop active perfmon if it is being destroyed If the active performance monitor v3d-activeperfmon is being destroyed, stop it first. Currently, the active perfmon is not stopped during destruction, leaving the...

IBM Cognos Controller Weak Password Vulnerability

IBM Cognos Controller is a corporate performance management CPM software for financial consolidation, reporting and analysis. A weak password vulnerability exists in IBM Cognos Controller versions 11.0.0 through 11.1.0, which stems from the fact that the system does not require users to set stron...

MAL-2025-2211 Malicious code in realityspiral (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 750c382ff53ef751feeedfaf955cf5b12ff8fd6f91a1087c0616eddbab203913 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Who is Responsible and Does it Matter?

Welcome to this week's edition of the Threat Source newsletter. At Talos we bat on behalf of our customers, protecting them against all manner of cyber threats that may affect them. The nature of the threat actor and their origin or affiliation makes no difference; if they are attacking or planni...

MAL-2025-2219 Malicious code in sendbird-chat-sample-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5ed64b926ca67eeb78b98e8ba6fdaec0bc57f79fc486f9d178d69da4b0b92f7d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2206 Malicious code in @domons/test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b3fb4b8817484cd6bd07e6b222ab6a29f0b7ec9655b273a41638c382e54aafb5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2205 Malicious code in wrap.scrt.network (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb46cf4f945ffd141ee169ecf371a571f2692a3287c77efe8a9ea92c4811acb4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2220 Malicious code in testsdvsdfsdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 92ea47bd0fd5d9fb7ce2355ae009d0d93f6136d1bdfb44814286c1a434683492 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2222 Malicious code in userrelationship-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 522db266cc5ee9a741f9a3fde1a0f9e69cd84419296d3011e1e89833d068d06c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Linux Distros Unpatched Vulnerability : CVE-2025-21775

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: can: ctucanfd: handle skb allocation failure If skb allocation fails, the pointer to struct...

Linux Distros Unpatched Vulnerability : CVE-2024-57795

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/rxe: Remove the direct link to netdevice The similar patch in siw is in the link: https://git.kernel.org/rdma/rdma/c/16b87037b48889 This problem also...

Linux Distros Unpatched Vulnerability : CVE-2025-21715

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net: davicom: fix UAF in dm9000drvremove dm is netdev private data and it cannot be used aft...

GitLab Enterprise Edition 安全漏洞

GitLab Enterprise Edition EE is a content management system from GitLab, Inc. in the United States. A security vulnerability exists in GitLab Enterprise Edition that stems from improper privilege control and could lead to user access to sensitive project analysis data...

Linux Distros Unpatched Vulnerability : CVE-2024-50021

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ice: Fix improper handling of refcount in icedpllinitrclkpins This patch addresses a referen...

Linux Distros Unpatched Vulnerability : CVE-2024-56700

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: wl128x: Fix atomicity violation in fmcsendcmd Atomicity violation occurs when the fmcsendcmd function is executed simultaneously with the modification of...

Malicious code in tommyboytesting (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 264f52ff2f35da38715922f14fbd4a8a2fb8ea31fd56fdbffd735b410b7bfc2f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2156 Malicious code in tommyboytesting (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 264f52ff2f35da38715922f14fbd4a8a2fb8ea31fd56fdbffd735b410b7bfc2f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in crypto-invoicer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0ce45f4356717c34ab095570b175a0fa8bb5c8b2929e42e73d1997dc8fdec3a6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...