Malicious code in @hongfangze/calc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 62ce8da37d7e1e8677cceb4a5db36f031470df22a7996162be8d54154076796a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3034 Malicious code in @hongfangze/calc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 62ce8da37d7e1e8677cceb4a5db36f031470df22a7996162be8d54154076796a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-28891

Cross-Site Request Forgery CSRF vulnerability in jazzigor price-calc price-calc allows Stored XSS.This issue affects price-calc: from n/a through = 0.6.3...

WordPress price-calc plugin <= 0.6.3 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by Abdi Pranata in WordPress Plugin price-calc versions = 0.6.3...

CVE-2025-28891

Cross-Site Request Forgery CSRF vulnerability in jazzigor price-calc price-calc allows Stored XSS.This issue affects price-calc: from n/a through = 0.6.3...

CVE-2025-28891

CVE-2025-28891 affects the WordPress price-calc plugin (versions

CVE-2025-28891 WordPress price-calc plugin <= 0.6.3 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in jazzigor price-calc price-calc allows Stored XSS.This issue affects price-calc: from n/a through = 0.6.3...

CVE-2025-28891: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in jazzigor price-calc price-calc allows Stored XSS.This issue affects price-calc: from n/a through = 0.6.3...

WordPress plugin price-calc 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request...

Astra Linux – Vulnerability in LibreOffice

LibreOffice Calc compiles cell formulas when opening a spreadsheet. A heap buffer overflow occurred when compiling a very long formula consisting of many opening tokens. The array that tracks nesting depth was allocated with one element too small in the worst-case scenario; as a result, such a...

Astra Linux – Vulnerability in LibreOffice

LibreOffice Calc can import tracked changes from a spreadsheet document. There was a heap buffer overflow issue when a document reused the same change identifier for two different types of changes. The importer treated one change object as a different, larger type and exceeded the allocated memor...

DEBIAN-CVE-2024-50233

In the Linux kernel, the following vulnerability has been resolved: staging: iio: frequency: ad9832: fix division by zero in ad9832calcfreqreg In the ad9832writefrequency function, clkgetrate might return 0. This can lead to a division by zero when calling ad9832calcfreqreg. The check if fout...

The vulnerability of the `coarsestscale` variable in the `calc()` and `ocl_calc()` functions of the `dis_flow.cpp` component of the OpenCV library, which is used for computer vision, image processing, and general numerical algorithms. This vulnerability relates to reading data beyond the allowed buffer limits, allowing an attacker to access confidential data and cause service interruptions.

The vulnerability of the coarsestscale parameter in functions calc and oclcalc in the disflow.cpp component of the OpenCV library, which is used for computer vision, image processing, and general numerical algorithms, relates to reading data beyond the allowed buffer size. Exploiting this...

mm/mglru: fix div-by-zero in vmpressure_calc_level()

...

PT-2024-33701

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.58 Description: A null pointer dereference issue has been identified in the Linux kernel, specifically in the handling of malformed BPF CORE TYPE ID LOCAL relocation records. This occurs when a relocation...

PT-2024-29864

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.50 Description A vulnerability has been resolved in the Linux kernel, specifically in the mm/mglru module, where a div-by-zero error could occur in the vmpressure calc level function. This issue arises when t...

Exploit for OS Command Injection in Php

Incident Response Walkthrough: Mitigating a Zero-Day Attack...

Oracle Linux 9 : libreoffice (ELSA-2024-3835)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-3835 advisory. - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Resolves: rhbz2210193 CVE-2023-0950 Array Index...

RHEL 5 : openoffice.org (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libreoffice: Bookmarks in DOC documents are insufficiently checked causing memory corruption CVE-2015-521...

libreoffice security fix update

1:5.3.6.1-26.0.1 - adjust color palette to match Redwood style. - Replaced RedHat colors with Oracle colors, and the filename redhat.soc with oracle.soc in specfile - Build with --with-vendor='Oracle America, Inc.' 1:5.3.6.1-26 - Fix CVE-2022-38745 Empty entry in Java class path - Fix CVE-2023-09...