Arbitrary File Upload

studio-42/elfinder is vulnerable to Arbitrary File Upload. The vulnerability is due to improper validation of uploaded files in connector.minimal.php, which allows an attacker to upload malicious files and execute arbitrary PHP code on the server...

CGA-V3QJ-42Q7-XR2R

Bulletin has no description...

BIT-ACTIVEMQ-2021-21346 XStream is vulnerable to an Arbitrary Code Execution attack

XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who follow...

Malicious code in minimal_mole_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40c4fe9412cecfa74a447020db9c6083c475b87a4327dc44135d762a74005a31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-81220

Malicious code in minimalgoat0xrequest npm...

EUVD-2025-81219

Malicious code in minimalhorsereplicateautomation npm...

Malicious code in minimal_kite_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fc0bc1f371308425152cfb174d341d726f3b5b78ee00022dabdb695000fb46f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-63068

Malicious code in minimalbuzzardz3n npm...

EUVD-2025-63065

Malicious code in minimalsalamanderz3n npm...

EUVD-2025-53249

Malicious code in minimal-jade-kiwi npm...

EUVD-2025-53248

Malicious code in minimal-scarlet-ox npm...

EUVD-2025-46350

Malicious code in minimalporpoisez3n npm...

EUVD-2025-46351

Malicious code in minimalchipmunkz3n npm...

[SECURITY] Fedora 41 Update: libnbd-1.22.5-1.fc41

NBD =E2=80=94 Network Block Device =E2=80=94 is a protocol for accessing Bloc k Devices hard disks and disk-like things over a Network. This is the NBD client library in userspace, a simple library for writing NBD clients. The key features are: Synchronous and asynchronous APIs, both for ease of...

[SECURITY] Fedora 42 Update: libnbd-1.22.5-1.fc42

NBD =E2=80=94 Network Block Device =E2=80=94 is a protocol for accessing Bloc k Devices hard disks and disk-like things over a Network. This is the NBD client library in userspace, a simple library for writing NBD clients. The key features are: Synchronous and asynchronous APIs, both for ease of...

osbuild-composer security update

132.2-3.0.1 - Switch to UEKR8 repositories for OL9.6 Orabug: 37962207 - Add support to create OpenScap images JIRA: OLDIS-35301 - Simplify repository names JIRA: OLDIS-35893 - Refactor patches to fix some naming and set a correct kernel for Oracle Linux Orabug: 37253643 - Support using OCI...

Improper Authentication

flowise is vulnerable to Improper Authentication. The vulnerability is due to minimal authentication and lack of role-based access controls RBAC, followed by the default installation operating without authentication unless explicitly configured, which allows an attacker to execute unauthorized OS...

Russian Hackers Target Ukrainian Organizations Using Stealthy Living-Off-the-Land Tactics

Organizations in Ukraine have been targeted by threat actors of Russian origin with an aim to siphon sensitive data and maintain persistent access to compromised networks. The activity, according to a new report from the Symantec and Carbon Black Threat Hunter Team, targeted a large business...

Medium: cuda-minimal-build-12-9

Issue Overview: NVIDIA nvJPEG library contains a vulnerability where an attacker can cause an out-of-bounds read by means of a specially crafted JPEG file. A successful exploit of this vulnerability might lead to information disclosure or denial of service. CVE-2025-23272 Affected Packages:...

ExPrESSO: Zero-Knowledge Backed Extensive Privacy Preserving Single Sign-On

User authentication is one of the most important aspects for secure communication between services and end-users over the Internet. Service providers leverage Single-Sign On SSO to make it easier for their users to authenticate themselves. However, standardized systems for SSO, such as OIDC, do n...