GHSA-JHRQ-QVRM-QR36

creationtimestamp| type| source ---|---|--- 2025-09-12 00:52:40+00:00| seen| https://bsky.app/profile/silverpill.mitra.social.ap.brid.gy/post/3lym2ckpmwpy2...

CVE-2025-58180

OctoPrint provides a web interface for controlling consumer 3D printers. OctoPrint versions up until and including 1.11.2 contain a vulnerability that allows an authenticated attacker to upload a file under a specially crafted filename that will allow arbitrary command execution if said filename...

CVE-2025-5005

A vulnerability was detected in Shanghai Lingdang Information Technology Lingdang CRM up to 8.6.5.4. This affects an unknown function of the file crm/WeiXinApp/dingtalk/indexevent.php. The manipulation of the argument corpurl results in server-side request forgery. The attack can be launched...

CVE-2025-39790

In the Linux kernel, the following vulnerability has been resolved: bus: mhi: host: Detect events pointing to unexpected TREs When a remote device sends a completion event to the host, it contains a pointer to the consumed TRE. The host uses this pointer to process all of the TREs between it and...

DEBIAN-CVE-2025-39790

In the Linux kernel, the following vulnerability has been resolved: bus: mhi: host: Detect events pointing to unexpected TREs When a remote device sends a completion event to the host, it contains a pointer to the consumed TRE. The host uses this pointer to process all of the TREs between it and...

UBUNTU-CVE-2025-39790

In the Linux kernel, the following vulnerability has been resolved: bus: mhi: host: Detect events pointing to unexpected TREs When a remote device sends a completion event to the host, it contains a pointer to the consumed TRE. The host uses this pointer to process all of the TREs between it and...

CVE-2025-39790 bus: mhi: host: Detect events pointing to unexpected TREs

In the Linux kernel, the following vulnerability has been resolved: bus: mhi: host: Detect events pointing to unexpected TREs When a remote device sends a completion event to the host, it contains a pointer to the consumed TRE. The host uses this pointer to process all of the TREs between it and...

CVE-2025-39790 bus: mhi: host: Detect events pointing to unexpected TREs

In the Linux kernel, the following vulnerability has been resolved: bus: mhi: host: Detect events pointing to unexpected TREs When a remote device sends a completion event to the host, it contains a pointer to the consumed TRE. The host uses this pointer to process all of the TREs between it and...

CVE-2025-40693

creationtimestamp| type| source ---|---|--- 2025-09-11 12:36:06+00:00| seen| Telegram/F5GZhJ-vKcq0AUrAOVyaCjTEbmMzgvcM3dHCPuKqjNjOic...

CVE-2025-9860

creationtimestamp| type| source ---|---|--- 2025-09-11 11:22:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lykn2jeofz2a...

CVE-2025-58321

creationtimestamp| type| source ---|---|--- 2025-09-11 09:01:32+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lykf6bx73t2d 2025-09-16 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-259-07 2025-09-16 20:04:10+00:00| seen|...

CVE-2025-9850

The Evenium plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'eveniumsingleevent' shortcode in all versions up to, and including, 1.3.11 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticat...

CVE-2025-8398

creationtimestamp| type| source ---|---|--- 2025-09-11 07:36:49+00:00| seen| Telegram/89AsF9jACXW2-Eur35B82Pf9PBNawla7hC8QKTokGBrdjc...

CVE-2025-9850 Evenium <= 1.3.11 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Evenium plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'eveniumsingleevent' shortcode in all versions up to, and including, 1.3.11 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticat...

CVE-2025-9850

The Evenium WordPress plugin (versions

CVE-2025-9910

creationtimestamp| type| source ---|---|--- 2025-09-11 07:06:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyk6qb3roj2t...

Malicious Package

Overview @team-event/services is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview @team-event/v2 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview @team-event/models is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2025-47051 Malicious code in @team-event/v2 (npm)

The package @team-event/v2 was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cc9d7a4f41e5d6a4af9a15c05d4e0023f5f141a75b5c62d116bb229a1ea7541d Any computer that has this package installed or running should be considered fully...