18521 matches found
EUVD-2025-54803
Malicious code in double-coffee-meerkat npm...
Malicious code in double-azure-xerinae (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72c01e96f7df6e0b20d1f1aead146c6afdcc9e819cba3f5f4be447d5ca539c6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in double-crimson-bee (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b97c01e71a19d334f0e8889475e0aea8045a68d99716e3c930e2e28acb0bd2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-54801
Malicious code in double-gold-fish npm...
EUVD-2025-54800
Malicious code in double-harlequin-rattlesnake npm...
WordPress plugin Double the Donation 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin.... A cross-site...
PT-2025-52903
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.0+ 3 Description The Linux kernel contains a race condition within the macintosh/mac hid subsystem, specifically in the mac hid toggle emumouse function. This issue arises when multiple processes concurrently...
PT-2025-46368
Name of the Vulnerable Software and Affected Versions Avast/AVG Antivirus versions prior to 25.3 Description A double fetch race condition exists in the Avast/AVG kernel sandbox driver on Windows. This condition allows a local attacker to escalate privileges through a pool overflow. The issue...
Amazon Linux 2 : kernel, --advisory ALAS2-2025-3075 (ALAS-2025-3075)
The version of kernel installed on the remote host is prior to 4.14.355-280.708. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-3075 advisory. In the Linux kernel, the following vulnerability has been resolved: fs: dlm: fix invalid derefence of sblvbptr...
PT-2025-46512
Name of the Vulnerable Software and Affected Versions Microsoft Wireless Provisioning System affected versions not specified Description A double free condition exists in the Microsoft Wireless Provisioning System. This allows an authorized attacker to gain elevated privileges on a local system...
PT-2025-46455
Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A double free condition exists in Windows Smart Card. This allows an authorized attacker to gain elevated privileges on a local system. Recommendations At the moment, there is no information...
MAL-2025-60310 Malicious code in double_lizard_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3da8c0254204f1eda0fc45dd1a5981cfd83ba1b785780526bae3050b671b40a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-50357
Malicious code in doublevicunaz3n npm...
EUVD-2025-50359
Malicious code in doublelizardz3n npm...
PT-2025-46241
Name of the Vulnerable Software and Affected Versions Double the Donation – A workplace giving tool to help your fundraising efforts plugin for WordPress versions prior to 2.0.1 Description The Double the Donation plugin for WordPress is susceptible to Stored Cross-Site Scripting through admin...
Security update for the Linux Kernel (Live Patch 61 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-15030059218 fixes several issues. The following security issues were fixed: CVE-2022-50248: wifi: iwlwifi: mvm: fix double free on tx path bsc1249841. CVE-2025-38664: ice: Fix a null pointer dereference in icecopyandinitpkg bsc1248631. CVE-2022-50252: igb: ...
SUSE-SU-2025:4004-1 Security update for the Linux Kernel (Live Patch 61 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-15030059218 fixes several issues. The following security issues were fixed: - CVE-2022-50248: wifi: iwlwifi: mvm: fix double free on tx path bsc1249841. - CVE-2025-38664: ice: Fix a null pointer dereference in icecopyandinitpkg bsc1248631. - CVE-2022-50252:...
CVE-2025-64481 Open redirect endpoint in Datasette
Datasette is an open source multi-tool for exploring and publishing data. In versions 0.65.1 and below and 1.0a0 through 1.0a19, deployed instances of Datasette include an open redirect vulnerability. Hits to the path //example.com/foo/bar/ the trailing slash is required will redirect the user to...
OESA-2025-2632 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: SUNRPC: make sure cache entry active before cacheshow The function cshow was called with protection from RCU. This only ensures that cp will not be freed...