SUSE-SU-2025:20853-1 Security update for open-vm-tools

This update for open-vm-tools fixes the following issues: Update to open-vm-tools 13.0.5 based on build 24915695. bsc1250692: Please refer to the Release Notes at https://github.com/vmware/open-vm-tools/blob/stable-13.0.5/ReleaseNotes.md. The granular changes that have gone into the open-vm-tools...

Mozilla Firefox Spoofing Vulnerability (CNVD-2025-24624)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox suffers from a spoofing vulnerability, which is caused due to an error in the Customization tab. An attacker can exploit this vulnerability to conduct spoofing attacks...

WordPress Customify plugin cross-site request forgery vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. A cross-site request forgery vulnerability exists in the WordPress Customify plugin, which stems from missing or incorrect random number validation in the resetcustomizesection...

EUVD-2014-9736

Malware in sbrugna...

EUVD-2021-12269

Malware in sbrugna...

EUVD-2014-1637

Malware in sbrugna...

EUVD-2020-1416

Malware in sbrugna...

EUVD-2014-3406

Malware in sbrugna...

EUVD-2020-27073

Malware in sbrugna...

EUVD-2024-52551

Malicious code in bioql PyPI...

EUVD-2024-38202

Malicious code in bioql PyPI...

EUVD-2021-8909

Malicious code in bioql PyPI...

EUVD-2022-27404

Malicious code in bioql PyPI...

EUVD-2022-52907

Malicious code in bioql PyPI...

EUVD-2024-51047

Malicious code in bioql PyPI...

EUVD-2024-41425

Malicious code in bioql PyPI...

EUVD-2023-50260

Malicious code in bioql PyPI...

EUVD-2024-52715

Malicious code in bioql PyPI...

WordPress plugin Customify 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. A cross-site request forgery vulnerability exists in the WordPress Customify plugin, which stems from missing or incorrect random number validation in the resetcustomizesection...

CVE-2025-8669: Cross-Site Request Forgery (CSRF)

The Customify theme for WordPress is vulnerable to Cross-Site Request Forgery in version 0.4.11. This is due to missing or incorrect nonce validation on the resetcustomizesection function. This makes it possible for unauthenticated attackers to reset theme customization settings via a forged...