MAL-2025-44699 Malicious code in ini-envconfig-less-loader-hadron (npm)

The package ini-envconfig-less-loader-hadron was found to contain malicious code...

MAL-2025-46140 Malicious code in start-less-loader-got-sirius (npm)

The package start-less-loader-got-sirius was found to contain malicious code...

MAL-2025-45730 Malicious code in query-less-loader-passport-rest (npm)

The package query-less-loader-passport-rest was found to contain malicious code...

Malicious code in pipe-less-loader-fornax-regulus (npm)

The package pipe-less-loader-fornax-regulus was found to contain malicious code...

Malicious code in start-less-loader-got-sirius (npm)

The package start-less-loader-got-sirius was found to contain malicious code...

MAL-2025-44756 Malicious code in janus-react-bootstrap-less-loader-biomimicry (npm)

The package janus-react-bootstrap-less-loader-biomimicry was found to contain malicious code...

MAL-2025-43528 Malicious code in astrobiology-less-loader-plutology-nightwatch (npm)

The package astrobiology-less-loader-plutology-nightwatch was found to contain malicious code...

Malicious code in less-loader-ablation-frontend-transport (npm)

The package less-loader-ablation-frontend-transport was found to contain malicious code...

Malicious code in less-loader-quasar-spectroscopy-astrobiology (npm)

The package less-loader-quasar-spectroscopy-astrobiology was found to contain malicious code...

Malicious code in astrobiology-less-loader-plutology-nightwatch (npm)

The package astrobiology-less-loader-plutology-nightwatch was found to contain malicious code...

MAL-2025-45564 Malicious code in pipe-less-loader-fornax-regulus (npm)

The package pipe-less-loader-fornax-regulus was found to contain malicious code...

MAL-2025-43416 Malicious code in aether-venus-lacerta-less-loader (npm)

The package aether-venus-lacerta-less-loader was found to contain malicious code...

MAL-2025-46439 Malicious code in ultra-less-ethology-string (npm)

The package ultra-less-ethology-string was found to contain malicious code...

MAL-2025-46478 Malicious code in ursa-nestjs-less-loader-sails (npm)

The package ursa-nestjs-less-loader-sails was found to contain malicious code...

CVE-2025-48964 affecting package iputils for versions less than 20240117-2

CVE-2025-48964 affecting package iputils for versions less than 20240117-2. A patched version of the package is available...

WordPress Clanora theme < 1.3.1 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Clanora versions 1.3.1...

CVE-2025-8194 affecting package python3 for versions less than 3.12.9-4

CVE-2025-8194 affecting package python3 for versions less than 3.12.9-4. A patched version of the package is available...

Linux Distros Unpatched Vulnerability : CVE-2017-6820

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rcubeutils.php in Roundcube before 1.1.8 and 1.2.x before 1.2.4 is susceptible to a cross-site scripting vulnerability via a crafted Cascading Style Sheets CSS...

Multiple vulnerabilities in Movable Type

Overview Movable Type provided by Six Apart Ltd. contains multiple vulnerabilities listed below. Use of less trusted source CWE-348 - CVE-2025-53522 Open redirect CWE-601 - CVE-2025-55706 Six Apart Ltd. reported these vulnerabilities to JPCERT/CC to notify users of the solutions through JVN...

CVE-2025-53522

CVE-2025-53522 affects Movable Type and related editions, caused by use of a less trusted source (CWE-348). A remote unauthenticated attacker could trigger a tampered password-reset email. Documented impact: password reset email may be forged by exploiting the trusted source weakness. Public disc...