PT-2025-36040

Name of the Vulnerable Software and Affected Versions: LocalBluetoothLeBroadcast.java affected versions not specified Description: An issue exists in the generateRandomPassword function of LocalBluetoothLeBroadcast.java that may allow interception of the Auracast audio stream due to an insecure...

CVE-2025-9696 Use of Hard-coded Credentials in SunPower PVS6

The SunPower PVS6's BluetoothLE interface is vulnerable due to its use of hardcoded encryption parameters and publicly accessible protocol details. An attacker within Bluetooth range could exploit this vulnerability to gain full access to the device's servicing interface. This access allows the...

WordPress Magazine Saga Theme <= 1.2.7 - Local File Inclusion Vulnerability

Local File Inclusion Vulnerability discovered by Le Ngoc Anh in WordPress Theme Magazine Saga versions = 1.2.7...

WordPress Glamer Theme <= 1.0.2 - Local File Inclusion Vulnerability

Local File Inclusion Vulnerability discovered by Le Ngoc Anh in WordPress Theme Glamer versions = 1.0.2...

WordPress Magazine Theme <= 1.2.2 - Local File Inclusion Vulnerability

Local File Inclusion Vulnerability discovered by Le Ngoc Anh in WordPress Theme Magazine versions = 1.2.2...

WordPress BlogMarks Theme <= 1.0.8 - Local File Inclusion Vulnerability

Local File Inclusion Vulnerability discovered by Le Ngoc Anh in WordPress Theme BlogMarks versions = 1.0.8...

Security update for the Linux Kernel (Live Patch 38 for SLE 15 SP4)

This update for the Linux Kernel 5.14.21-15040024158 fixes several issues. The following security issues were fixed: CVE-2025-38494: HID: core: do not bypass hidhwrawrequest bsc1247350. CVE-2025-38495: HID: core: ensure the allocated report buffer can contain the reserved report ID bsc1247351...

Malicious code in availab-le-alb-um-zip-aw-cmon-7vtid-fqzrrj (npm)

The package availab-le-alb-um-zip-aw-cmon-7vtid-fqzrrj was found to contain malicious code...

Malicious code in availab-le-alb-um-zip-26952-slain-by-yatsura-3pr31-aqtxea (npm)

The package availab-le-alb-um-zip-26952-slain-by-yatsura-3pr31-aqtxea was found to contain malicious code...

Malicious code in availab-le-alb-um-zip-19300-magic-time-1ei3b-iuzxjr (npm)

The package availab-le-alb-um-zip-19300-magic-time-1ei3b-iuzxjr was found to contain malicious code...

MAL-2025-10180 Malicious code in @zalastax/nolb-_le (npm)

The package @zalastax/nolb-le was found to contain malicious code...

Malicious code in availab-le-alb-um-zip-47309-then-play-on-g62ow-pkbmnx (npm)

The package availab-le-alb-um-zip-47309-then-play-on-g62ow-pkbmnx was found to contain malicious code...

Malicious code in @zalastax/nolb-_le (npm)

The package @zalastax/nolb-le was found to contain malicious code...

Malicious code in availab-le-alb-um-zip-349816-when-smoke-rises-ovwzf-uadxbi (npm)

The package availab-le-alb-um-zip-349816-when-smoke-rises-ovwzf-uadxbi was found to contain malicious code...

Malicious code in availab-le-alb-um-zip-2016-50027-silent-earthling-u2tuv-kewuqp (npm)

The package availab-le-alb-um-zip-2016-50027-silent-earthling-u2tuv-kewuqp was found to contain malicious code...

Malicious code in availab-le-alb-um-zip-revolution-j9gvf-mnvayq (npm)

The package availab-le-alb-um-zip-revolution-j9gvf-mnvayq was found to contain malicious code...

Malicious code in availab-le-alb-um-zip-17375-who-else-esihf-alrnbv (npm)

The package availab-le-alb-um-zip-17375-who-else-esihf-alrnbv was found to contain malicious code...

Malicious code in availab-le-alb-um-zip-10787-electro-shock-blues-5ex8q-tklmne (npm)

The package availab-le-alb-um-zip-10787-electro-shock-blues-5ex8q-tklmne was found to contain malicious code...

MAL-2025-15159 Malicious code in availab-le-alb-um-zip-349816-when-smoke-rises-ovwzf-uadxbi (npm)

The package availab-le-alb-um-zip-349816-when-smoke-rises-ovwzf-uadxbi was found to contain malicious code...

MAL-2025-15155 Malicious code in availab-le-alb-um-zip-17375-who-else-esihf-alrnbv (npm)

The package availab-le-alb-um-zip-17375-who-else-esihf-alrnbv was found to contain malicious code...