Linux Distros Unpatched Vulnerability : CVE-2025-37885

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: x86: Reset IRTE to host control if new route isn't postable Restore an IRTE back to host control remapped or posted MSI mode if the new GSI route prevents...

Linux Distros Unpatched Vulnerability : CVE-2025-4439

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab CE/EE affecting all versions from 15.10 before 18.0.5, 18.1 before 18.1.3, and 18.2 before 18.2.1 that could have allowed...

Malicious code in leadconduit-email-delivery (npm)

The package leadconduit-email-delivery was found to contain malicious code...

MAL-2025-18192 Malicious code in delivery_kit (npm)

The package deliverykit was found to contain malicious code...

MAL-2025-23351 Malicious code in iq_delivery_recommendations (npm)

The package iqdeliveryrecommendations was found to contain malicious code...

Malicious code in react-airbnb-prettier (npm)

The package react-airbnb-prettier was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 8dfaae080b90705a47740e1ced1edacf0110db947f0f26fdd35e2805a2886d37 This package installs a dependency hosted on a custom domain that...

Malicious code in delivery_kit (npm)

The package deliverykit was found to contain malicious code...

MAL-2025-25021 Malicious code in leadconduit-email-delivery (npm)

The package leadconduit-email-delivery was found to contain malicious code...

MAL-2025-14196 Malicious code in airbnb-relaxed (npm)

The package airbnb-relaxed was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 1b6a5e736a13af63369b9867066a010eb0cb881853407342fe42c472c919dd3c This package installs a dependency hosted on a custom domain that runs an...

CVE-2025-8310

Missing authorization in the admin console of Ivanti Virtual Application Delivery Controller before version 22.9 allows a remote authenticated attacker to take over admin accounts by resetting the password...

Improper Access Control

umbraco.cms.api.delivery is vulnerable to improper access control. The vulnerability is due to output caching not varying by the API key authorization header, which allows an attacker to access cached API responses without a valid key if they were previously requested by an authorized user...

CVE-2025-8310

Missing authorization in the admin console of Ivanti Virtual Application Delivery Controller before version 22.9 allows a remote authenticated attacker to take over admin accounts by resetting the password...

CVE-2025-8310

Missing authorization in the admin console of Ivanti Virtual Application Delivery Controller before version 22.9 allows a remote authenticated attacker to take over admin accounts by resetting the password...

Ivanti Virtual Application Delivery Controller 安全漏洞

Ivanti Virtual Application Delivery Controller is a software-defined application delivery controller from Ivanti, USA. A security vulnerability exists in Ivanti Virtual Application Delivery Controller versions prior to 22.9 that stems from a lack of authorization in the management console and cou...

Microsoft Office Excel Remote Code Execution Vulnerability

Microsoft Office Excel contains a remote code execution vulnerability that can be exploited when a specially crafted Excel file is opened. This malicious file could be delivered as an email attachment or hosted on a malicious website. An attacker could leverage this vulnerability by creating a...

PT-2025-32677 · Ivanti · Ivanti Virtual Application Delivery Controller

Name of the Vulnerable Software and Affected Versions: Ivanti Virtual Application Delivery Controller versions prior to 22.9 Description: The admin console of the software lacks proper authorization checks. This allows a remote, authenticated attacker to compromise admin accounts by resetting the...

Exploit for Out-of-bounds Read in Citrix Netscaler_Application_Delivery_Controller

CVE-2025-5777 – Citrix NetScaler Memory Leak Updated PoC Th...

Dell Digital Delivery Information Disclosure Vulnerability

Dell Digital Delivery is a digital software delivery service offered by Dell that allows users to shop for and automatically download and install paid software e.g., Microsoft Office, Photoshop, etc. in tandem with the purchase of a Dell computer. An information disclosure vulnerability exists in...

CVE-2025-8752 wangzhixuan spring-shiro-training add command injection

A vulnerability was found in wangzhixuan spring-shiro-training up to 94812c1fd8f7fe796c931f4984ff1aa0671ab562. It has been declared as critical. This vulnerability affects unknown code of the file /role/add. The manipulation leads to command injection. The attack can be initiated remotely. The...

CVE-2025-8752 wangzhixuan spring-shiro-training add command injection

A vulnerability was found in wangzhixuan spring-shiro-training up to 94812c1fd8f7fe796c931f4984ff1aa0671ab562. It has been declared as critical. This vulnerability affects unknown code of the file /role/add. The manipulation leads to command injection. The attack can be initiated remotely. The...