RLSA-2025:7402 Moderate: nginx security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fixes: nginx: Memory corruption in the ngxhttpmp4module CVE-2022-41741 nginx: Memory disclosure in the ngxhttpmp4module CVE-2022-41742 nginx: speciall...

EUVD-2025-23779

Malicious code in bioql PyPI...

EUVD-2025-23304

Malicious code in bioql PyPI...

EUVD-2024-31345

Malicious code in bioql PyPI...

EUVD-2024-35509

Malicious code in bioql PyPI...

EUVD-2024-40049

Malicious code in bioql PyPI...

EUVD-2025-14950

Malicious code in bioql PyPI...

EUVD-2025-23316

Malicious code in bioql PyPI...

EUVD-2023-26485

Malicious code in bioql PyPI...

EUVD-2023-30887

Malicious code in bioql PyPI...

EUVD-2023-26529

Malicious code in bioql PyPI...

EUVD-2024-37570

Malicious code in bioql PyPI...

EUVD-2025-23315

Malicious code in bioql PyPI...

EUVD-2024-46001

Malicious code in bioql PyPI...

EUVD-2022-34730

Malicious code in bioql PyPI...

EUVD-2023-38652

Malicious code in bioql PyPI...

CVE-2025-60787

MotionEye v0.43.1b4 and before is vulnerable to OS Command Injection in configuration parameters such as imagefilename. Unsanitized user input is written to Motion configuration files, allowing remote authenticated attackers with admin access to achieve code execution when Motion is restarted...

CVE-2025-9992

The Ghost Kit – Page Builder Blocks, Motion Effects & Extensions plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the custom JS field in all versions up to, and including, 3.4.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticat...

CVE-2025-9992: Improper Neutralization of Input During Web Page Generation

The Ghost Kit – Page Builder Blocks, Motion Effects & Extensions plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the custom JS field in all versions up to, and including, 3.4.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticat...

Linux Distros Unpatched Vulnerability : CVE-2016-1780

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WebKit in Apple iOS before 9.3 does not prevent hidden web views from reading orientation and motion data, which allows remote attackers to obtain sensitive...