PT-2025-35523

Name of the Vulnerable Software and Affected Versions SonarQube versions 4 through 5.3.0 Description SonarQube is a static analysis solution for continuous code quality and security inspection. A command injection issue was identified in the SonarQube Scan GitHub Action. Untrusted input arguments...

PT-2025-35655

🔴 SonarQube Scan GitHub Action, Command Injection, CVE-2025-53087 High https://t.co/18WQ4wixFA...

SonarQube Server 命令注入漏洞

SonarQube Server is a code quality and security auditing platform from Sonar UK. A command injection vulnerability exists in SonarQube Server versions 4 through 5.3.0, which stems from SonarQube Scan GitHub Action command injection and could lead to the execution of arbitrary commands...

CVE-2025-9792

creationtimestamp| type| source ---|---|--- 2025-09-01 21:29:38+00:00| seen| https://gist.github.com/Darkcrai86/0510d78a2d5f4c171f880dabcd080071 2025-09-01 22:45:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxsojnnyya2m...

Malicious code in monolith-twirp-github-repositories (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b6ab9bea194d9fa5ad57b833b09316a0c338a6beb920638e9aff880730969c89 The OpenSSF Package Analysis project identified 'monolith-twirp-github-repositories' @ 1.0.0 rubygems as malicious. It is considered malicious...

MAL-2025-46929 Malicious code in monolith-twirp-github-repositories (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b6ab9bea194d9fa5ad57b833b09316a0c338a6beb920638e9aff880730969c89 The OpenSSF Package Analysis project identified 'monolith-twirp-github-repositories' @ 1.0.0 rubygems as malicious. It is considered malicious...

Malicious code in github-proto-repositories (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ad787034378f8dfd5ad9c74128aafad9b053f1296acc980aee3f70693f23d3c3 The OpenSSF Package Analysis project identified 'github-proto-repositories' @ 1.2.11.re9f78aa rubygems as malicious. It is considered malicious...

MAL-2025-46911 Malicious code in github-proto-repositories (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ad787034378f8dfd5ad9c74128aafad9b053f1296acc980aee3f70693f23d3c3 The OpenSSF Package Analysis project identified 'github-proto-repositories' @ 1.2.11.re9f78aa rubygems as malicious. It is considered malicious...

Malicious code in github-kv (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5fcb11aea794afd6b87c58dee41958584041b8638848807223b0633a851e3ad1 The OpenSSF Package Analysis project identified 'github-kv' @ 0.0.1.rdbd1267 rubygems as malicious. It is considered malicious because: - The...

MAL-2025-46909 Malicious code in github-kv (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5fcb11aea794afd6b87c58dee41958584041b8638848807223b0633a851e3ad1 The OpenSSF Package Analysis project identified 'github-kv' @ 0.0.1.rdbd1267 rubygems as malicious. It is considered malicious because: - The...

Malicious code in github-orca (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 83776c9c0b12c59a169cd0eb6d85e38ce8ae930d21f9d837edf0acd9e2bdccf1 The OpenSSF Package Analysis project identified 'github-orca' @ 0.0.20.1626.gb0c19ef3 rubygems as malicious. It is considered malicious because:...

MAL-2025-46910 Malicious code in github-orca (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 83776c9c0b12c59a169cd0eb6d85e38ce8ae930d21f9d837edf0acd9e2bdccf1 The OpenSSF Package Analysis project identified 'github-orca' @ 0.0.20.1626.gb0c19ef3 rubygems as malicious. It is considered malicious because:...

MAL-2025-46908 Malicious code in github-kredz (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 537bf1dc9a46b4e69b596275e61de6d1b75ca3eeb2979bde507688f07458c088 The OpenSSF Package Analysis project identified 'github-kredz' @ 1.0.1.1135.gf4a4623f5 rubygems as malicious. It is considered malicious because...

Malicious code in github-kredz (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 537bf1dc9a46b4e69b596275e61de6d1b75ca3eeb2979bde507688f07458c088 The OpenSSF Package Analysis project identified 'github-kredz' @ 1.0.1.1135.gf4a4623f5 rubygems as malicious. It is considered malicious because...

CVE-2025-58161

creationtimestamp| type| source ---|---|--- 2025-08-31 02:36:04+00:00| published-proof-of-concept| https://github.com/MobSF/Mobile-Security-Framework-MobSF/security/advisories/GHSA-ccc3-fvfx-mw3v...

VULSOVER: Vulnerability Detection Via LLM-Driven Constraint Solving

Traditional vulnerability detection methods rely heavily on predefined rule matching, which often fails to capture vulnerabilities accurately. With the rise of large language models LLMs, leveraging their ability to understand code semantics has emerged as a promising direction for achieving more...

GHSA-XH9H-692F-MMG4 vulnerabilities

Vulnerabilities for packages: az, py3-knack...

Linux Distros Unpatched Vulnerability : CVE-2025-47928

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Spotipy is a Python library for the Spotify Web API. As of commit 4f5759dbfb4506c7b6280572a4db1aabc1ac778d, using pullrequesttarget on...

Linux Distros Unpatched Vulnerability : CVE-2022-0154

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab affecting all versions starting from 7.7 before 14.4.5, all versions starting from 14.5.0 before 14.5.3, all versions...

Linux Distros Unpatched Vulnerability : CVE-2022-2882

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.6 before 15.2.5, all versions starting from 15.3 before 15.3.4, all version...