MAL-2025-19087 Malicious code in easy-encode-notify-emulate-cache (npm)

The package easy-encode-notify-emulate-cache was found to contain malicious code...

MAL-2025-32628 Malicious code in sagitta-cache-flare-paleontology (npm)

The package sagitta-cache-flare-paleontology was found to contain malicious code...

MAL-2025-28042 Malicious code in object-cache-dog-test-byte (npm)

The package object-cache-dog-test-byte was found to contain malicious code...

MAL-2025-26309 Malicious code in midway-cache (npm)

The package midway-cache was found to contain malicious code...

MAL-2025-13914 Malicious code in a-simple-cache (npm)

The package a-simple-cache was found to contain malicious code...

MAL-2025-21189 Malicious code in ganymede-cache-capella-testcafe (npm)

The package ganymede-cache-capella-testcafe was found to contain malicious code...

MAL-2025-16346 Malicious code in bunker-cache (npm)

The package bunker-cache was found to contain malicious code...

MAL-2025-16423 Malicious code in cache-omega-socket-decrypt-xml (npm)

The package cache-omega-socket-decrypt-xml was found to contain malicious code...

MAL-2025-27523 Malicious code in nightwatch-halley-proxima-cache (npm)

The package nightwatch-halley-proxima-cache was found to contain malicious code...

MAL-2025-27698 Malicious code in nodules-cache (npm)

The package nodules-cache was found to contain malicious code...

CVE-2025-20109

Improper Isolation or Compartmentalization in the stream cache mechanism for some IntelR Processors may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-52716

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Acato WP REST Cache wp-rest-cache allows PHP Local File Inclusion.This issue affects WP REST Cache: from n/a through = 2025.1.0...

CVE-2025-52716 WordPress WP REST Cache <= 2025.1.0 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Acato WP REST Cache wp-rest-cache allows PHP Local File Inclusion.This issue affects WP REST Cache: from n/a through = 2025.1.0...

CVE-2025-52716 WordPress WP REST Cache <= 2025.1.0 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Acato WP REST Cache allows PHP Local File Inclusion. This issue affects WP REST Cache: from n/a through 2025.1.0...

CVE-2025-52716

CVE-2025-52716 concerns the WordPress plugin WP REST Cache prior to or up to version 2025.1.0. The vulnerability is an improper control of filenames for include/require statements, enabling local file inclusion (LFI) via the PHP runtime. Affected products are WP REST Cache (WordPress plugin); no ...

PT-2025-33206 · WordPress · Acato Wp Rest Cache

Name of the Vulnerable Software and Affected Versions: Acato WP REST Cache versions n/a through 2025.1.0 Description: Acato WP REST Cache is susceptible to a PHP Local File Inclusion due to an Improper Control of Filename for Include/Require Statement. This allows for the inclusion of local files...

Yet Another Mirage of Breaking MIRAGE: Debunking Occupancy-Based Side-Channel Attacks on Fully Associative Randomized Caches

Recent work presented at USENIX Security 2025 claims that occupancy-based attacks can recover AES keys from the MIRAGE randomized cache. In this paper, we examine these claims and find that they arise from fundamental modeling flaws. Most critically, the authors' simulation of MIRAGE uses a...

WordPress plugin WP REST Cache 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security...

USN-7692-1 request-tracker5 vulnerabilities

It was discovered that Request Tracker was susceptible to timing attacks. An attacker could possibly use this issue to access sensitive information. This issue only affected Ubuntu 22.04 LTS. CVE-2021-38562 It was discovered that Request Tracker was susceptible to cross-site scripting attacks whe...

www/varnish7 -- Denial of Service in HTTP/2

Varnish Development Team reports: A denial of service attack can be performed on Varnish Cache servers that have the HTTP/2 protocol turned on. An attacker can create a large number of streams and immediately reset them without ever reaching the maximum number of concurrent streams allowed for th...