Lucene search
K

155 matches found

Packet Storm News
Packet Storm News
added 5 days ago1 views

NeuroLog: Reasoning You Can Audit -- Neuro-Symbolic Vulnerability Discovery Via LLM Facts, Datalog, and SMT

Vulnerability discovery on C/C++ source asks the analyst to choose between heavyweight static analysers, which need a working build before a single query runs, and free-form LLMs, which read source readily but invent details and lose track of cross-function dataflow on real codebases. We present...

9.8CVSS7.1AI score0.26747EPSS
Exploits6
AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.2 views

Astra Linux - уязвимость в ansible

A flaw was discovered in Ansible Engine. This flaw occurs in all versions of Ansible Engine from 2.7.x, 2.8.x, and 2.9.x, as of 2.7.17, 2.8.9, and 2.9.6, respectively. The issue arises when using ansiblefacts as a subkey of itself and promoting it to a variable when inject is enabled. After the...

7.9CVSS7.1AI score0.00029EPSS
Exploits0References1
RedHat Linux
RedHat Linux
added 2026/05/07 9:30 p.m.6 views

Important: Red Hat Security Advisory: A Subscription Management tool for finding and reporting Red Hat product usage

A Subscription Management tool for finding and reporting Red Hat product usage Red Hat Discovery, also known as Discovery, is an inspection and reporting tool that finds, identifies, and reports environment data, or facts, such as the number of physical and virtual systems on a network, their...

10CVSS7.1AI score0.00148EPSS
Exploits12References20
RedHat Linux
RedHat Linux
added 2026/05/07 6:0 p.m.4 views

Important: Red Hat Security Advisory: Satellite 6.16.8 Async Update

An update is now available for Red Hat Satellite 6.16 for RHEL 8 and RHEL 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

9.8CVSS7.2AI score0.00385EPSS
Exploits3References14
AstraLinux
AstraLinux
added 2026/05/03 11:59 p.m.3 views

Astra Linux - уязвимость в ansible

A flaw was discovered in Ansible, where a user’s controller is vulnerable to template injection. This issue can occur when facts used in the template do not include special template characters, especially if the user attempts to embed templates within multi-line YAML strings. This flaw allows...

7.1CVSS7AI score0.00276EPSS
Exploits0References2
GithubExploit
GithubExploit
added 2026/04/24 10:13 p.m.153 views

Exploit for CVE-2025-2304

HackTheBox — Facts Machine Writeup !HackTheBoxhttps://img...

9.4CVSS5.8AI score0.00206EPSS
Exploits15
RedHat Linux
RedHat Linux
added 2026/02/02 5:31 p.m.3 views

Important: Red Hat Security Advisory: A Subscription Management tool for finding and reporting Red Hat product usage

A Subscription Management tool for finding and reporting Red Hat product usage Red Hat Discovery, also known as Discovery, is an inspection and reporting tool that finds, identifies, and reports environment data, or facts, such as the number of physical and virtual systems on a network, their...

8.9CVSS7.1AI score0.02889EPSS
Exploits10References23
OSV
OSV
added 2025/12/10 1:58 a.m.1 views

MAL-2025-192410 Malicious code in facts-base (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fd985aa898a134a3edaeb33d9629378a215a674e8110bb88fbbdfce59c8883e The package facts-base was found to contain malicious code. Source: ghsa-malware 11ed9b0a6622d128df892c963646c0dd03c4a65ddd22b4ac0aebea5d9f4b0adc Any...

6.8AI score
Exploits0References1
Snyk
Snyk
added 2025/12/10 1:58 a.m.1 views

Malicious Package

Overview facts-base is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

9.8CVSS6.8AI score
Exploits0References2
EUVD
EUVD
added 2025/12/10 1:58 a.m.2 views

EUVD-2025-202365

Malicious code in facts-base npm...

6.6AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/12/10 1:58 a.m.3 views

Malicious code in facts-base (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fd985aa898a134a3edaeb33d9629378a215a674e8110bb88fbbdfce59c8883e The package facts-base was found to contain malicious code. Source: ghsa-malware 11ed9b0a6622d128df892c963646c0dd03c4a65ddd22b4ac0aebea5d9f4b0adc Any...

6.9AI score
Exploits0References1
EUVD
EUVD
added 2025/12/06 6:30 a.m.1 views

EUVD-2025-201524

The Canadian Nutrition Facts Label plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'percentage' field in the Nutrition Label custom post type in all versions up to, and including, 3.0 due to insufficient input sanitization and output escaping. This makes it possible for...

6.4CVSS4.7AI score0.00032EPSS
Exploits0References3
NVD
NVD
added 2025/12/06 6:15 a.m.3 views

CVE-2025-12715

The Canadian Nutrition Facts Label plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'percentage' field in the Nutrition Label custom post type in all versions up to, and including, 3.0 due to insufficient input sanitization and output escaping. This makes it possible for...

6.4CVSS0.00032EPSS
Exploits0References2
CVE
CVE
added 2025/12/06 5:49 a.m.8 views

CVE-2025-12715

CVE-2025-12715 concerns the WordPress plugin Canadian Nutrition Facts Label . It enables a Stored Cross‑Site Scripting (XSS) via the percentage field in the plugin’s Nutrition Label custom post type, affecting all versions up to 3.0. The vulnerability can be exploited by authenticated attackers w...

6.4CVSS4.8AI score0.00032EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/12/06 12:0 a.m.1 views

WordPress plugin Canadian Nutrition Facts Label 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

6.4CVSS5.7AI score0.00032EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/12/06 12:0 a.m.3 views

PT-2025-49334

The Canadian Nutrition Facts Label plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'percentage' field in the Nutrition Label custom post type in all versions up to, and including, 3.0 due to insufficient input sanitization and output escaping. This makes it possible for...

6.4CVSS5.1AI score0.00032EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2020-0003

Malware in sbrugna...

3.9CVSS6.9AI score0.00215EPSS
Exploits0References11
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2014-9382

Malware in sbrugna...

2.1CVSS6.4AI score0.00131EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2014-6830

Malware in sbrugna...

5.4CVSS6.4AI score0.00134EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.0 views

EUVD-2013-4420

Malware in sbrugna...

9.1CVSS9AI score0.00232EPSS
Exploits1References3
Rows per page
Query Builder