CVE-2026-64488

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture ALSA 'aoa' component. This vulnerability arises when a specific function, sndctlnew1, fails to allocate memory and returns an invalid pointer. The kernel then attempts to use this invalid pointer, which can cause the system ...

SUSE CVE-2026-64488

In the Linux kernel, the following vulnerability has been resolved: ALSA: aoa: check sndctlnew1 return value sndctlnew1 can return NULL when memory allocation fails. In layout.c, the function does not check the return value before dereferencing ctl-id.name or passing to aoasndctladd, which can le...

CVE-2026-64488

In the Linux kernel, the following vulnerability has been resolved: ALSA: aoa: check sndctlnew1 return value sndctlnew1 can return NULL when memory allocation fails. In layout.c, the function does not check the return value before dereferencing ctl-id.name or passing to aoasndctladd, which can le...

WordPress Downloable by American Osteopathic Association plugin <= 0.1.0 - Unauthenticated SSRF vulnerability

Unauthenticated SSRF vulnerability discovered by Aly Khaled in WordPress Plugin Aoa Downloadable versions = 0.1.0...

EUVD-2017-9200

Malware in sbrugna...

UBUNTU-CVE-2022-50431

In the Linux kernel, the following vulnerability has been resolved: ALSA: aoa: i2sbus: fix possible memory leak in i2sbusadddev devsetname in soundbusaddone allocates memory for name, it need be freed when ofdeviceregister fails, call soundbusdevput to give up the reference that hold in...

Ransomware Surge Hits US Healthcare: AOA, DaVita and Bell Ambulance Breached

AOA, DaVita, and Bell Ambulance hit by ransomware in 2025. Over 245K affected as hackers steal patient data,…...

CVE-2024-13617

The aoa-downloadable WordPress plugin through 0.1.0 doesn't validate a parameter in its download function, allowing unauthenticated attackers to download arbitrary files from the server...

CVE-2024-13618

The aoa-downloadable WordPress plugin through 0.1.0 lacks authorization and authentication for requests to its download.php endpoint, allowing unauthenticated visitors to make requests to arbitrary URLs...

CVE-2024-13617 Downloable by American Osteopathic Association <= 0.1.0 - Unauthenticated Arbitrary File Download

The aoa-downloadable WordPress plugin through 0.1.0 doesn't validate a parameter in its download function, allowing unauthenticated attackers to download arbitrary files from the server...

WordPress plugin aoa-downloadable 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security...

CVE-2024-13618: Undefined Security Weakness

The aoa-downloadable WordPress plugin through 0.1.0 lacks authorization and authentication for requests to its download.php endpoint, allowing unauthenticated visitors to make requests to arbitrary URLs...

WordPress plugin aoa-downloadable 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security...

PT-2025-12756 · WordPress · Aoa-Downloadable

Name of the Vulnerable Software and Affected Versions: aoa-downloadable WordPress plugin version 0.1.0 Description: The issue concerns the aoa-downloadable WordPress plugin, which fails to validate a parameter in its download function. This allows unauthenticated attackers to download arbitrary...

PT-2025-12757 · WordPress · Aoa-Downloadable

Name of the Vulnerable Software and Affected Versions: aoa-downloadable WordPress plugin version 0.1.0 Description: The issue concerns a lack of authorization and authentication for requests to the "download.php" endpoint, allowing unauthenticated visitors to make requests to arbitrary URLs...

CVE-2024-13617: Undefined Security Weakness

The aoa-downloadable WordPress plugin through 0.1.0 doesn't validate a parameter in its download function, allowing unauthenticated attackers to download arbitrary files from the server...

Malicious code in @ikea-aoa/component-store-selector (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @ikea-aoa/component-lightbox (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @ikea-aoa/component-financial-services (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2023-1024 Malicious code in @ikea-aoa/component-text (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a7eb8663a77a76b087087ae0d7313f1e7e50f71695a76b02e73d72e08467c8c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...