Malicious code in hydra-consent-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb154df736a12683f5680d8355dde8927952f257d80b1355152bcf337754be96 The package hydra-consent-sdk was found to contain malicious code...

PT-2026-25914

🚨 CVE-2026-32292: GL-iNet Comet... $30 KVM boxes with zero rate limiting = instant network pivot point for anyone with Hydra and patience. KVMpwn BruteForce NetworkPivot. https://t.co/VKisqb37V7 netsec vulnerability CVE sysadmin zeroday...

GHSA-9H8M-3FM2-QJRQ vulnerabilities

Vulnerabilities for packages: flux-notification-controller-fips, metrics-server, kaniko-fips, syft-fips, cloud-provider-azure-fips, cluster-api-provider-vsphere, gogatekeeper, argo-rollouts-fips, hydra-fips, knative-net-istio-fips, keda, sftpgo-plugin-kms, cloudprober-fips, aws-ebs-csi-driver-fip...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: terraform-provider-pagerduty, vcluster, ksops, guac, crossplane-provider-aws-eks, gitaly, crossplane-provider-aws-cloudformation, atlantis, kyverno-notation-aws, gomplate, ratify, buildkitd, crossplane, gptscript, sops, crossplane-provider-aws-sns, apko, witness,...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: terraform-provider-pagerduty, vcluster, ksops, guac, crossplane-provider-aws-eks, gitaly, crossplane-provider-aws-cloudformation, atlantis, kyverno-notation-aws, gomplate, ratify, buildkitd, crossplane, gptscript, sops, crossplane-provider-aws-sns, apko, witness,...

GHSA-FW7P-63QQ-7HPR vulnerabilities

Vulnerabilities for packages: db-operator, ksops, kyverno-fips, kots, sqlexporter-fips, certificate-transparency-fips, timestamp-authority-fips, step, croc, argo-workflows-fips, gitsign, aactl, nuclei, hydra-fips, keda, nri-mysql, openbao, seaweedfs-fips, hydra, certificate-transparency, kyverno,...

GHSA-FW7P-63QQ-7HPR vulnerabilities

Vulnerabilities for packages: step, k3s, tailscale, flux-kustomize-controller, fulcio, kubeflow-pipelines, ksops, minio, spire-server, argo-workflows, temporal-server, temporal, aactl, dbmate, sftpgo-plugin-eventstore, kyverno-policy-reporter, nri-mysql, db-operator, certificate-transparency, kin...

CVE-2025-68027

Incorrect Privilege Assignment vulnerability in Themefic Hydra Booking hydra-booking allows Privilege Escalation.This issue affects Hydra Booking: from n/a through = 1.1.32...

CVE-2025-68027

Incorrect Privilege Assignment vulnerability in Themefic Hydra Booking hydra-booking allows Privilege Escalation.This issue affects Hydra Booking: from n/a through = 1.1.32...

CVE-2025-68027

CVE-2025-68027 : The Hydra Booking (Themefic Hydra Booking) WordPress plugin suffers an unauthenticated privilege escalation due to an incorrect privilege assignment in versions up to 1.1.32. The vulnerability enables elevation of privileges within Hydra Booking (hydra-booking) as described in pu...

CVE-2025-68027

Incorrect Privilege Assignment vulnerability in Themefic Hydra Booking hydra-booking allows Privilege Escalation.This issue affects Hydra Booking: from n/a through = 1.1.32...

CVE-2025-68027 WordPress Hydra Booking plugin <= 1.1.32 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in Themefic Hydra Booking hydra-booking allows Privilege Escalation.This issue affects Hydra Booking: from n/a through = 1.1.32...

CVE-2025-68027 WordPress Hydra Booking plugin <= 1.1.32 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in Themefic Hydra Booking hydra-booking allows Privilege Escalation.This issue affects Hydra Booking: from n/a through = 1.1.32...

PT-2026-4064

Name of the Vulnerable Software and Affected Versions Themefic Hydra Booking versions through 1.1.32 Description A privilege assignment issue exists in Themefic Hydra Booking hydra-booking, potentially allowing privilege escalation. The issue allows for unauthorized access or actions due to...

WordPress plugin Hydra Booking has a security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

WordPress Hydra Booking plugin <= 1.1.32 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by daroo in WordPress Plugin Hydra Booking versions = 1.1.32...

Exploit for CVE-2025-68055

CVE-2025-68055 Authenticated SQL injection in Hydra Booking...

CVE-2025-68055

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Themefic Hydra Booking hydra-booking allows SQL Injection.This issue affects Hydra Booking: from n/a through = 1.1.32...

EUVD-2025-203552

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Themefic Hydra Booking hydra-booking allows SQL Injection.This issue affects Hydra Booking: from n/a through = 1.1.32...

CVE-2025-68055

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Themefic Hydra Booking hydra-booking allows SQL Injection.This issue affects Hydra Booking: from n/a through = 1.1.32...