Linux Distros Unpatched Vulnerability : CVE-2025-32387

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Helm is a package manager for Charts for Kubernetes. A JSON Schema file within a chart can be crafted with a deeply nested chain of references, leading to parse...

Linux Distros Unpatched Vulnerability : CVE-2025-32386

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Helm is a tool for managing Charts. A chart archive file can be crafted in a manner where it expands to be significantly larger uncompressed than compressed e.g...

Linux Distros Unpatched Vulnerability : CVE-2023-0518

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.0 before 15.6.7, all versions starting from 15.7 before 15.7.6, all version...

Birth Chart Compatibility WordPress Plugin 2.0 - Full Path Disclosure

/ Exploit Title : Birth Chart Compatibility WordPress Plugin 2.0 - Full Path Disclosure Author : Byte Reaper Telegram : @ByteReaper0 CVE : CVE-2025-6082 Software Link : https://frp.wordpress.org/plugins/birth-chart-compatibility/ Description : Proof‑of‑Concept exploits the Full Path Disclosure bu...

Linux Distros Unpatched Vulnerability : CVE-2024-25620

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Helm is a tool for managing Charts. Charts are packages of pre-configured Kubernetes resources. When either the Helm client or SDK is used to save a chart whose...

Apache Superset Information Disclosure Vulnerability (CNVD-2025-19102)

Apache Superset is a data visualization and data exploration platform from the Apache USA Foundation. Apache Superset suffers from an information disclosure vulnerability that stems from the /chart/data endpoint response containing underlying query information, which can be exploited by an attack...

Security update for trivy (important)

openSUSE Security Update: Security update for trivy Announcement ID: openSUSE-SU-2025:0302-1 Rating: important References: 1232948 1235265 1246151 Cross-References: CVE-2024-45338 CVE-2024-51744 CVE-2025-53547 CVSS scores: CVE-2024-45338 SUSE: 8.2...

WordPress Birth Chart Compatibility 2.0 Path Disclosure

WordPress Birth Chart Compatibility plugin versions 2.0 and below suffer from a path disclosure vulnerability...

GHSA-MGH9-4MWP-FG55 OpenFGA Authorization Bypass

Overview OpenFGA v1.9.3 to v1.9.4 openfga-0.2.40 = Helm chart = openfga-0.2.41, v1.9.3 = docker = v.1.9.4 are vulnerable to improper policy enforcement when certain Check and ListObject calls are executed. Am I Affected? You are affected by this vulnerability if you are using OpenFGA v1.9.3 to...

BIT-SUPERSET-2025-55673 Apache Superset: Metadata exposure in embedded charts

When a guest user accesses a chart in Apache Superset, the API response from the /chart/data endpoint includes a query field in its payload. This field contains the underlying query, which improperly discloses database schema information, such as table names, to the low-privileged guest user. Thi...

BIT-SUPERSET-2025-55672 Apache Superset: Stored XSS on charts metadata

A stored Cross-Site Scripting XSS vulnerability exists in Apache Superset's chart visualization. An authenticated user with permissions to edit charts can inject a malicious payload into a column's label. The payload is not properly sanitized and gets executed in the victim's browser when they...

BIT-HELM-2025-55198 Helm May Panic Due To Incorrect YAML Content

Helm is a package manager for Charts for Kubernetes. Prior to version 3.18.5, when parsing Chart.yaml and index.yaml files, an improper validation of type error can lead to a panic. This issue has been resolved in Helm 3.18.5. A workaround involves ensuring YAML files are formatted as Helm expect...

CVE-2025-8867

The Graphina - Elementor Charts and Graphs plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple chart widget parameters in version 3.1.3 and below. This is due to insufficient input sanitization and output escaping on user supplied attributes such as chart categories,...

CVE-2025-55673

When a guest user accesses a chart in Apache Superset, the API response from the /chart/data endpoint includes a query field in its payload. This field contains the underlying query, which improperly discloses database schema information, such as table names, to the low-privileged guest user. Thi...

CVE-2025-55199 vulnerabilities

Vulnerabilities for packages: kots, helm-mapkubeapis, helm-docs, k9s, kubescape, cilium-cli, tw, pluto, zarf, helm-operator, istio, helm-set-status, linkerd2, cluster-api-helm-controller, trivy-operator, trivy, zot, nova, rancher-fleet, eksctl, headlamp, helm-push, consul-k8s, kargo, chart-testin...

CVE-2025-55198 vulnerabilities

Vulnerabilities for packages: kots, helm-mapkubeapis, helm-docs, k9s, kubescape, cilium-cli, pluto, zarf, helm-operator, istio, helm-set-status, linkerd2, cluster-api-helm-controller, trivy-operator, trivy, zot, nova, rancher-fleet, eksctl, headlamp, helm-push, consul-k8s, kargo, chart-testing,...

GHSA-F9F8-9PMF-XV68 vulnerabilities

Vulnerabilities for packages: kots, helm-mapkubeapis, helm-docs, k9s, kubescape, cilium-cli, pluto, zarf, helm-operator, istio, helm-set-status, linkerd2, cluster-api-helm-controller, trivy-operator, trivy, zot, nova, rancher-fleet, eksctl, headlamp, helm-push, consul-k8s, kargo, chart-testing,...

GHSA-9H84-QMV7-982P vulnerabilities

Vulnerabilities for packages: kots, helm-mapkubeapis, helm-docs, k9s, kubescape, cilium-cli, tw, pluto, zarf, helm-operator, istio, helm-set-status, linkerd2, cluster-api-helm-controller, trivy-operator, trivy, zot, nova, rancher-fleet, eksctl, headlamp, helm-push, consul-k8s, kargo, chart-testin...

CVE-2025-8867

The Graphina - Elementor Charts and Graphs plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple chart widget parameters in version 3.1.3 and below. This is due to insufficient input sanitization and output escaping on user supplied attributes such as chart categories,...

CVE-2025-8867 Graphina - Elementor Charts and Graphs <= 3.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Graphina - Elementor Charts and Graphs plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple chart widget parameters in version 3.1.3 and below. This is due to insufficient input sanitization and output escaping on user supplied attributes such as chart categories,...