PT-2025-33672

Name of the Vulnerable Software and Affected Versions: aiven-db-migrate versions prior to 1.0.7 Description: aiven-db-migrate is a database migration tool. A privilege escalation issue exists that allows a user to elevate to superuser inside PostgreSQL databases during a migration from an untrust...

Security update for systemd

This update for systemd fixes the following issues: Remove the script used to help migrating the language and locale settings located in /etc/sysconfig/language on old systems to the systemd default locations bsc1247074 The script was introduced more than 7 years ago and all systems running TW...

SUSE-SU-2025:20597-1 Security update for systemd

This update for systemd fixes the following issues: - Remove the script used to help migrating the language and locale settings located in /etc/sysconfig/language on old systems to the systemd default locations bsc1247074 The script was introduced more than 7 years ago and all systems running TW...

Malicious code in migration-progress-announce (npm)

The package migration-progress-announce was found to contain malicious code...

Malicious code in sql-logs-migration-service (npm)

The package sql-logs-migration-service was found to contain malicious code...

Malicious code in ember-module-migration (npm)

The package ember-module-migration was found to contain malicious code...

Malicious code in zip-mp3-a-lbum-do-wnload-new-196087-migration-stories-uzynv-popfmq (npm)

The package zip-mp3-a-lbum-do-wnload-new-196087-migration-stories-uzynv-popfmq was found to contain malicious code...

Malicious code in strict-null-check-migration-tools (npm)

The package strict-null-check-migration-tools was found to contain malicious code...

MAL-2025-41000 Malicious code in zip-mp3-a-lbum-do-wnload-new-196087-migration-stories-uzynv-popfmq (npm)

The package zip-mp3-a-lbum-do-wnload-new-196087-migration-stories-uzynv-popfmq was found to contain malicious code...

MAL-2025-26314 Malicious code in migration-progress-announce (npm)

The package migration-progress-announce was found to contain malicious code...

MAL-2025-33835 Malicious code in sql-logs-migration-service (npm)

The package sql-logs-migration-service was found to contain malicious code...

MAL-2025-19563 Malicious code in ember-module-migration (npm)

The package ember-module-migration was found to contain malicious code...

Security update for systemd

This update for systemd fixes the following issues: Remove the script used to help migrating the language and locale settings located in /etc/sysconfig/language on old systems to the systemd default locations bsc1247074 The script was introduced more than 7 years ago and all systems running TW...

SUSE-SU-2025:20554-1 Security update for systemd

This update for systemd fixes the following issues: - Remove the script used to help migrating the language and locale settings located in /etc/sysconfig/language on old systems to the systemd default locations bsc1247074 The script was introduced more than 7 years ago and all systems running TW...

CVE-2025-8482

The CVE concerns the WordPress plugin Simple Local Avatars, affected in version 2.8.4. Root cause: missing capability check in migrate_from_wp_user_avatar(), enabling authenticated users with subscriber-level access and above to modify avatar metadata for all users. Impact: unauthorized data modi...

CVE-2025-8482 Simple Local Avatars <= 2.8.4 - Missing Authorization to Authenticated (Subscriber+) Avatar Migration

The Simple Local Avatars plugin for WordPress is vulnerable to unauthorized modification of data in version 2.8.4. This is due to a missing capability check on the migratefromwpuseravatar function. This makes it possible for authenticated attackers, with subscriber-level access and above, to...

CVE-2025-8482 Simple Local Avatars <= 2.8.4 - Missing Authorization to Authenticated (Subscriber+) Avatar Migration

The Simple Local Avatars plugin for WordPress is vulnerable to unauthorized modification of data in version 2.8.4. This is due to a missing capability check on the migratefromwpuseravatar function. This makes it possible for authenticated attackers, with subscriber-level access and above, to...

PT-2025-32632 · WordPress · Simple Local Avatars

Name of the Vulnerable Software and Affected Versions: Simple Local Avatars plugin for WordPress version 2.8.4 Description: The Simple Local Avatars plugin for WordPress is susceptible to unauthorized data modification due to an incomplete capability check within the migrate from wp user avatar...

SAP Landscape Transformation 代码注入漏洞

SAP Landscape Transformation is a tool for system data migration and integration from SAP, Germany. A code injection vulnerability exists in SAP Landscape Transformation SLT that originates from the ability to inject arbitrary ABAP code via RFC...

Linux Distros Unpatched Vulnerability : CVE-2016-6786

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - kernel/events/core.c in the performance subsystem in the Linux kernel before 4.0 mismanages locks during certain migrations, which allows local users to gain...