CVE-2025-8013

CVE-2025-8013 affects the Quttera Web Malware Scanner WordPress plugin and is an authenticated SSRF vulnerability via RunExternalScan in all versions up to 3.5.1.41. Exploitation requires Administrator-level access or higher and enables the attacker to trigger web requests to arbitrary locations ...

CVE-2025-8013 Quttera Web Malware Scanner <= 3.5.1.41 - Authenticated (Administrator+) Server-Side Request Forgery

The Quttera Web Malware Scanner plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 3.5.1.41 via the 'RunExternalScan' function. This makes it possible for authenticated attackers, with Administrator-level access and above, to make web requests ...

CVE-2025-8680 B Slider - Gutenberg Slider Block for WP <= 2.0.0 - Authenticated (Subscriber+) Server-Side Request Forgery

The B Slider- Gutenberg Slider Block for WP plugin for WordPress is vulnerable to Server-Side Request Forgery in version less than, or equal to, 2.0.0 via the fsapirequest function. This makes it possible for authenticated attackers, with subscriber-level access and above to make web requests to...

CVE-2025-8680

CVE-2025-8680 concerns the WordPress plugin “B Slider – Gutenberg Slider Block for WP” where the vulnerability is a Server-Side Request Forgery (SSRF) in the fs_api_request function. The flaw affects versions up to and including 2.0.0 and requires authentication with at least subscriber-level pri...

CVE-2025-8680 B Slider - Gutenberg Slider Block for WP <= 2.0.0 - Authenticated (Subscriber+) Server-Side Request Forgery

The B Slider- Gutenberg Slider Block for WP plugin for WordPress is vulnerable to Server-Side Request Forgery in version less than, or equal to, 2.0.0 via the fsapirequest function. This makes it possible for authenticated attackers, with subscriber-level access and above to make web requests to...

[SECURITY] Fedora 41 Update: mupdf-1.25.4-2.fc41

MuPDF is a lightweight PDF viewer and toolkit written in portable C. The renderer in MuPDF is tailored for high quality anti-aliased graphics. MuPDF renders text with metrics and spacing accurate to within fractions of a pixel for the highest fidelity in reproducing the look of a printed page on...

Linux Distros Unpatched Vulnerability : CVE-2024-27047

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net: phy: fix phygetinternaldelay accessing an empty array The phygetinternaldelay function...

Linux Distros Unpatched Vulnerability : CVE-2020-14196

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In PowerDNS Recursor versions up to and including 4.3.1, 4.2.2 and 4.1.16, the ACL restricting access to the internal web server is not properly enforced...

Linux Distros Unpatched Vulnerability : CVE-2025-38451

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: md/md-bitmap: fix GPF in bitmapgetstats The commit message of commit 6ec1f0239485...

Malicious code in google-internal-ui (npm)

The package google-internal-ui was found to contain malicious code...

MAL-2025-19860 Malicious code in eslint-plugin-react-internal (npm)

The package eslint-plugin-react-internal was found to contain malicious code...

Malicious code in eslint-plugin-react-internal (npm)

The package eslint-plugin-react-internal was found to contain malicious code...

MAL-2025-39046 Malicious code in webserver-internal-v2 (npm)

The package webserver-internal-v2 was found to contain malicious code...

MAL-2025-21706 Malicious code in google-internal-ui (npm)

The package google-internal-ui was found to contain malicious code...

MAL-2025-19861 Malicious code in eslint-plugin-relay-internal (npm)

The package eslint-plugin-relay-internal was found to contain malicious code...

Malicious code in ui-extensions-internal-test (npm)

The package ui-extensions-internal-test was found to contain malicious code...

Malicious code in eslint-plugin-relay-internal (npm)

The package eslint-plugin-relay-internal was found to contain malicious code...

Malicious code in webserver-internal-v2 (npm)

The package webserver-internal-v2 was found to contain malicious code...

MAL-2025-37592 Malicious code in ui-extensions-internal-test (npm)

The package ui-extensions-internal-test was found to contain malicious code...

CVE-2025-7622

During an internal security assessment, a Server-Side Request Forgery SSRF vulnerability that allowed an authenticated attacker to access internal resources on the server was discovered...