CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: nodetaint, spicedb-operator, go-md2man, velero-plugin-for-aws, dynamic-localpv-provisioner, bom, helm-docs, conjur-cli, fscrypt, minio-object-browser, vertical-pod-autoscaler, restic, kubelet-csr-approver, wave, pvc-autoresizer, atlantis, src-fingerprint,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: skopeo, grafana, runc, vt-cli, vault-csi-provider, policy-controller-fips, cilium-certgen, src-fingerprint, sriov-network-device-plugin, trivy-operator-fips, slsa-verifier, otel-cli, rancher-security-scan, yunikorn-web, nvidia-nsight-compute-13.1, consul-k8s, tfsec,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: skopeo, grafana, runc, vt-cli, vault-csi-provider, policy-controller-fips, cilium-certgen, src-fingerprint, sriov-network-device-plugin, trivy-operator-fips, slsa-verifier, otel-cli, rancher-security-scan, yunikorn-web, nvidia-nsight-compute-13.1, consul-k8s, tfsec,...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: skopeo, grafana, runc, vt-cli, vault-csi-provider, policy-controller-fips, cilium-certgen, src-fingerprint, sriov-network-device-plugin, trivy-operator-fips, slsa-verifier, otel-cli, rancher-security-scan, yunikorn-web, nvidia-nsight-compute-13.1, consul-k8s, tfsec,...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: skopeo, grafana, runc, vt-cli, vault-csi-provider, policy-controller-fips, cilium-certgen, src-fingerprint, sriov-network-device-plugin, trivy-operator-fips, slsa-verifier, otel-cli, rancher-security-scan, yunikorn-web, nvidia-nsight-compute-13.1, consul-k8s, tfsec,...

CVE-2025-61724 vulnerabilities

Vulnerabilities for packages: skopeo, grafana, runc, vt-cli, vault-csi-provider, policy-controller-fips, cilium-certgen, src-fingerprint, sriov-network-device-plugin, trivy-operator-fips, slsa-verifier, otel-cli, rancher-security-scan, yunikorn-web, nvidia-nsight-compute-13.1, consul-k8s, tfsec,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: skopeo, grafana, runc, vt-cli, vault-csi-provider, policy-controller-fips, cilium-certgen, src-fingerprint, sriov-network-device-plugin, trivy-operator-fips, slsa-verifier, otel-cli, rancher-security-scan, yunikorn-web, nvidia-nsight-compute-13.1, consul-k8s, tfsec,...

Exploit for Code Injection in Flowiseai Flowise

CVE-2025-59528.yaml Flowise is a drag & drop user interface to...

CVE-2025-12115

The WPC Name Your Price for WooCommerce plugin for WordPress is vulnerable to unauthorized price alteration in all versions up to, and including, 2.1.9. This is due to the plugin not disabling the ability to name a custom price when it has been specifically disabled for a product. This makes it...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: fixed null pointer access issues. Writing a string without delimiters ' ', '\n', '\0' to the under gpuod/fanctrl sysfs or pppowerProfileMode for the CUSTOM profile will result in a null pointer dereference...

Astra Linux – Vulnerability in Apache2

Insufficient escaping of user-supplied data in modssl in Apache HTTP Server 2.4.63 and earlier allows an untrusted SSL/TLS client to insert escape characters into log files in some configurations. In a logging configuration where CustomLog is used with "%varnamex" or "%varnamec" to log variables...

Malicious code in custom-tg-bot-plan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10cef01d344d07be2f72b365cb97f994a5cea38eef145b5b25de21f1784cd740 The package custom-tg-bot-plan was found to contain malicious code. Source: ghsa-malware...

MAL-2025-49256 Malicious code in custom-tg-bot-plan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10cef01d344d07be2f72b365cb97f994a5cea38eef145b5b25de21f1784cd740 The package custom-tg-bot-plan was found to contain malicious code. Source: ghsa-malware...

Malicious Package

Overview custom-tg-bot-plan is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

EUVD-2025-37255

Malicious code in custom-telegram-bot-api npm...

Malicious code in custom-telegram-bot-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efed332de627322e3b4c8adc27a889238eb809493e86244e15d96e7b6e45dd87 The package custom-telegram-bot-api was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-37254

Malicious code in custom-tg-bot-plan npm...

WordPress Plugin ACF Recent Posts Widget Cross-Site Scripting Vulnerability

WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in the WordPress plugin ACF Recent Posts Widget, no...

WordPress Plugin ACF to REST API Information Disclosure Vulnerability

WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. An information disclosure vulnerability exists in the WordPress plugin ACF to REST API, which c...

The 5 generative AI security threats you need to know about detailed in new e-book

Generative AI is reshaping the way security teams operate—accelerating threat detection, automating workflows, and enabling scale. But as defenders embrace AI to strengthen their posture, cyberattackers are doing the same to evolve faster than traditional defenses can adapt. Microsoft’s 2025...