108 matches found
EUVD-2025-53989
Malicious code in helpful-salmon-boar npm...
EUVD-2025-60469
Malicious code in budi-serimuka22-sluey npm...
EUVD-2025-50376
Malicious code in distantmosquitoz3n npm...
EUVD-2025-44194
Malicious code in zain-tomat100-sukiwir npm...
EUVD-2025-47642
Malicious code in fitangelfishz3n npm...
CVE-2025-64232
creationtimestamp| type| source ---|---|--- 2025-11-06 16:56:35+00:00| seen| https://gist.github.com/Darkcrai86/40e4d63e0ab50f21ff8899b561ef4c5a 2025-11-06 17:06:24+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4y2dv2xozg2 2025-11-06 17:49:10+00:00| seen|...
EUVD-2025-37772
The Visual Link Preview plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's visual-link-preview shortcode in versions up to, and including, 2.2.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
EUVD-2025-37799
The Spectra Gutenberg Blocks – Website Builder for the Block Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Custom CSS in all versions up to, and including, 2.19.14 due to insufficient input sanitization and output escaping. This makes it possible for authenticat...
EUVD-2025-37821
EUVD-2025-37821...
EUVD-2025-37594
The Simple User Capabilities plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the sucsubmitcapabilities function in all versions up to, and including, 1.0. This makes it possible for unauthenticated attackers to elevate the role of any user account t...
EUVD-2025-37673
A logging issue was addressed with improved data redaction. This issue is fixed in iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, visionOS 26.1. An attacker with physical access to an unlocked device paired with a Mac may be able to view sensitive user information in system logging...
RHEL 9 : squid (RHSA-2025:19115)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2025:19115 advisory. Squid is a high-performance proxy caching server for web clients, supporting FTP, and HTTP data objects. Security Fixes: squid-cache: Squid vulnerab...
EUVD-2025-33586
ServiceNow has addressed a reflected cross-site scripting vulnerability that was identified in the ServiceNow AI Platform. This vulnerability could result in arbitrary code being executed within the browsers of ServiceNow users who click on a specially crafted link. ServiceNow has addressed this...
CVE-2025-59297
creationtimestamp| type| source ---|---|--- 2025-10-07 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-280-01 2025-10-27 04:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-969/...
RLSA-2025:7397 Moderate: skopeo security update
The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. Security Fixes: go-jose: Go JOSE's Parsing Vulnerable to Denial of Service CVE-2025-27144 For more details about the security issues, including t...
EUVD-2025-25332
Malicious code in bioql PyPI...
EUVD-2025-31072
Malicious code in bioql PyPI...
CVE-2025-39904
In the Linux kernel, the following vulnerability has been resolved: arm64: kexec: initialize kexecbuf struct in loadothersegments Patch series "kexec: Fix invalid field access". The kexecbuf structure was previously declared without initialization. commit bf454ec31add "kexecfile: allow to place...