MAL-2025-106739 Malicious code in opal-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3460e36d9f25cb51487dd18663ed170d0c4b88157d54d9f76708f3f418f31417 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990454)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990454 advisory. In the Linux kernel, the following vulnerability has been resolved: powerpc/xics: fix refcount leak in icpopalinit The offindcompatiblenode function returns a node...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989620)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989620 advisory. In the Linux kernel, the following vulnerability has been resolved: powerpc/xics: fix refcount leak in icpopalinit The offindcompatiblenode function returns a node...

CVE-2025-62913

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpopal Opal Service opal-service allows Stored XSS.This issue affects Opal Service: from n/a through = 1.9.1...

EUVD-2025-36026

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpopal Opal Service opal-service allows Stored XSS.This issue affects Opal Service: from n/a through = 1.9.1...

CVE-2025-62913

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpopal Opal Service opal-service allows Stored XSS.This issue affects Opal Service: from n/a through = 1.9.1...

CVE-2025-62913

CVE-2025-62913 refers to a stored XSS in the WordPress Opal Service (opal-service) plugin, attributed to “Improper Neutralization of Input During Web Page Generation.” Red Hat, NVD, and PatchStack entries consistently describe the vulnerability as affecting Opal Service versions from n/a through ...

CVE-2025-62913 WordPress Opal Service plugin <= 1.9.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpopal Opal Service opal-service allows Stored XSS.This issue affects Opal Service: from n/a through = 1.9.1...

CVE-2025-62913 WordPress Opal Service plugin <= 1.9.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpopal Opal Service opal-service allows Stored XSS.This issue affects Opal Service: from n/a through = 1.9.1...

WordPress plugin Opal Service 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

PT-2025-43791

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpopal Opal Service opal-service allows Stored XSS.This issue affects Opal Service: from n/a through = 1.9.1...

EUVD-2012-5507

Malware in sbrugna...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-419776)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-419776 advisory. In the Linux kernel, the following vulnerability has been resolved: powerpc/powernv: Add a null pointer check in opalpowercapinit kasprintf returns a pointer to...

Exploit for CVE-2025-6934

WP-CVE-2025-6934 | Opal Estate Pro = 1.7.5 - Unauthenticat...

EUVD-2025-9266

Malicious code in bioql PyPI...

EUVD-2024-31365

Malicious code in bioql PyPI...

EUVD-2025-7807

Malicious code in bioql PyPI...

EUVD-2024-48536

Malicious code in bioql PyPI...

EUVD-2025-28093

Malicious code in bioql PyPI...

EUVD-2024-32241

Malicious code in bioql PyPI...