2050 matches found
SUSE CVE-2025-21967
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in ksmbdfreeworkstruct -interimentry of ksmbdwork could be deleted after oplock is freed. We don't need to manage it with linked list. The interim request could be immediately sent whenever a oplock brea...
MAL-2025-3099 Malicious code in fivethirtyeight (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d85a317f633c161ef61f2ffd3d0cda992cf670bd7532a2ce875261ba067a39d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-3089 Malicious code in accessible-textbook-demo (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32e7a797f9a6dff7e1c114b0da31a73df0a0cda2dc4590c5512d243f32dc90b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-3127 Malicious code in windowsreveal (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 45eb7752fa24f9edaffa6707ee8ec4e0b1684a637d4d1cc1f6a003d040039332 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
WordPress Botnet Attack Blocker plugin <= 2.0.0 - Stored Cross Site Scripting (XSS) vulnerability
Stored Cross Site Scripting XSS vulnerability discovered by SOPROBRO in WordPress Plugin Botnet Attack Blocker versions = 2.0.0...
WordPress Tiger Theme <= 2.0 is vulnerable to Cross Site Scripting (XSS)
Software Tiger Type Theme Vulnerable versions = 2.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2025-31407 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 7418cf31bc7a Credits Mika Required privilege Subscriber Published 2...
PT-2025-14424 · Rsvpmaker · Rsvpmaker
Name of the Vulnerable Software and Affected Versions: RSVPMarker versions n/a through 11.4.8 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. Recommendations: For...
MAL-2025-2787 Malicious code in smart-file-renamer (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28b650ad09355a36c0fcdb91255b1bcb59984a12295de8a0a88ac5735c29f7f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-2673 Malicious code in gaimes-fun (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fa65f4433275ee9c01057f21b5c3be7d3f23b729e2525a56cbaf26e3d564838f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-2574 Malicious code in migu-lib (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ecb336887faf02039935f114ebb2564586a99bfe58a39d4ab59b3899818e1dc9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-3143 Malicious code in arnotest (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 64475736790097a8b2e30db87aa02796673e4a50b3af8e0d633eb261ec376983 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-2394 Malicious code in newland-digitization-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 35b5f032125648b5b2cad6fb57b4fcf1c6ab755e93b9ca9640fc85e041bed665 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-2393 Malicious code in newland-component-test (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a4a9b55a483b5ec495bb5e9c06c5285932e3ff8eb091beee14345f52431123f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-2395 Malicious code in nicegirl (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 05d61fc6a090b764666270f91b100bc166fbb85c0227ac947e1bdc876bc8e6a4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-2418 Malicious code in superdope (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9abd6ad5a2ad3503841de7c5ecf7e733d3b98b26b025f093b39f0424bc78fab4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-2284 Malicious code in valentinesgiftt (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c3e9e88211b3e2b0dfd9993c04491f26b66cdaece41f1d39f419686829270fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-2280 Malicious code in simple-export-map (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d44defb42445d3a7511f32616401e72a003e6eee8f3e47cd2ca1f41b4026f65b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-2185 Malicious code in node-unzip (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cd99263d19f7c6599d64abff02934e9d436d39de9b4b3c4f1d3984ccb85956f1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Linux Distros Unpatched Vulnerability : CVE-2023-52775
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net/smc: avoid data corruption caused by decline We found a data corruption issue during...