GHSA-XWXC-RH9R-2448 vulnerabilities

Vulnerabilities for packages: openjdk-21-openj9, openjdk-26-openj9, openjdk-17-openj9, openjdk-8-openj9, openjdk-25-openj9, openjdk-11-openj9...

GHSA-9PP2-VWJ5-CWWR vulnerabilities

Vulnerabilities for packages: openjdk-21-openj9, openjdk-26-openj9, openjdk-17-openj9, openjdk-8-openj9, openjdk-25-openj9, openjdk-11-openj9...

GHSA-MFRM-W63C-3X58 vulnerabilities

Vulnerabilities for packages: openjdk-21-openj9, openjdk-26-openj9, openjdk-17-openj9, openjdk-8-openj9, openjdk-25-openj9, openjdk-11-openj9...

GHSA-36XM-WX7C-G2HQ vulnerabilities

Vulnerabilities for packages: openjdk-21-openj9, openjdk-26-openj9, openjdk-17-openj9, openjdk-8-openj9, openjdk-25-openj9, openjdk-11-openj9...

GHSA-945Q-VJ74-93VC vulnerabilities

Vulnerabilities for packages: openjdk...

GHSA-2HGR-R3C9-M9JW vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

GHSA-MV5M-P837-6XM9 vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

GHSA-95V9-HV42-PWRJ

creationtimestamp| type| source ---|---|--- 2025-08-22 20:10:27+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115074231613639255...

CVE-2025-55745

creationtimestamp| type| source ---|---|--- 2025-08-22 14:04:08+00:00| published-proof-of-concept| https://github.com/unopim/unopim/security/advisories/GHSA-74rg-6f92-g6wx...

CVE-2025-55306

GenXFX is an advance IA trading platform that will focus on forex trading. A vulnerability was identified in the GenX FX backend where API keys and authentication tokens may be exposed if environment variables are misconfigured. Unauthorized users could gain access to cloud resources Google Cloud...

GHSA-MMXM-8W33-WC4H vulnerabilities

Vulnerabilities for packages: trino, neo4j, jenkins, hadoop-fips, solr, ranger, apache-activemq-artemis, apache-nifi-registry, apache-nifi...

MAL-2025-41421 Malicious code in k7eel2-ss (PyPI)

The package downloads and executes an executable from a hardcoded URL. The executable is classifed as Trojan and confirmed by 47 top sources. The package downloads malware from https://github.com/deprosinal/legendary-funicular github repo, namely helo.exe --- -= Per source details. Do not edit...

PT-2025-51825

Name of the Vulnerable Software and Affected Versions Mattermost versions 10.11.x through 10.11.6 Mattermost GitHub plugin versions through 2.4.0 Description The software does not properly validate the identity of plugin bots when forwarding reactions. This allows attackers to misuse the GitHub...

Linux Distros Unpatched Vulnerability : CVE-2025-54956

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The gh package before 1.5.0 for R delivers an HTTP response in a data structure that includes the Authorization header from the corresponding HTTP request...

GHSA-MMXM-8W33-WC4H

creationtimestamp| type| source ---|---|--- 2025-08-20 19:47:18+00:00| seen| https://seclists.org/oss-sec/2025/q3/131...

MAL-2025-191749 Malicious code in hashstation (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c4f136247c8a57eee83a1a36ee355c982d900b5f5b570a0936dc1df68db6d5f2 When using methods from the package, it downloads an obfuscated code from Github and puts it in multiple localisation. While it appears that this code is used ...

GHSA-R4MF-MR9H-F27M

creationtimestamp| type| source ---|---|--- 2025-08-20 02:26:07+00:00| seen| https://gist.github.com/Anudeepkadambala/88c6065f1de1597be96e50a573cde56e...

GHSA-HQR4-4GFC-5P2J

creationtimestamp| type| source ---|---|--- 2025-08-19 18:39:17+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115056886214495468...

CVE-2025-55306 GenX_FX authentication bypass in JWT validation

GenXFX is an advance IA trading platform that will focus on forex trading. A vulnerability was identified in the GenX FX backend where API keys and authentication tokens may be exposed if environment variables are misconfigured. Unauthorized users could gain access to cloud resources Google Cloud...

CVE-2025-55306

GenX_FX backend vulnerability: environment-variable misconfiguration can expose API keys and authentication tokens, enabling unauthorized access to cloud resources (Google Cloud, Firebase, GitHub, etc.). Impact is high (credential exposure with potential full resource access) as reported across m...