CVE-2025-10054

The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'ehcrmremoveagent' function in all versions up to, and including, 3.3.1. This makes it possible for authenticated attackers, wit...

CVE-2025-10054 ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Missing Authorization to Authenticated (Subscriber+) Role Removal

The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'ehcrmremoveagent' function in all versions up to, and including, 3.3.1. This makes it possible for authenticated attackers, wit...

DEBIAN-CVE-2025-40211

In the Linux kernel, the following vulnerability has been resolved: ACPI: video: Fix use-after-free in acpivideoswitchbrightness The switchbrightnesswork delayed work accesses device-brightness and device-backlight, freed by acpivideodevunregisterbacklight during device removal. If the work...

CVE-2025-40211 ACPI: video: Fix use-after-free in acpi_video_switch_brightness()

In the Linux kernel, the following vulnerability has been resolved: ACPI: video: Fix use-after-free in acpivideoswitchbrightness The switchbrightnesswork delayed work accesses device-brightness and device-backlight, freed by acpivideodevunregisterbacklight during device removal. If the work...

CVE-2025-40211 ACPI: video: Fix use-after-free in acpi_video_switch_brightness()

In the Linux kernel, the following vulnerability has been resolved: ACPI: video: Fix use-after-free in acpivideoswitchbrightness The switchbrightnesswork delayed work accesses device-brightness and device-backlight, freed by acpivideodevunregisterbacklight during device removal. If the work...

Malicious Package

Overview @vreden-team/baileys is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in @vreden-team/baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fed39a318dda2a4b76dc12030fb47d54a1a1b36c7a8186f2eca1ae6bd908d23 The package @vreden-team/baileys was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190581 Malicious code in com.unity.polyspatial.xr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f47a6bc79a20cf499736b6544281ecd6035fd1135b3d465ea2b7579061bfc2b The package com.unity.polyspatial.xr was found to contain malicious code. Source: ghsa-malware...

Malicious code in com.unity.polyspatial.xr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f47a6bc79a20cf499736b6544281ecd6035fd1135b3d465ea2b7579061bfc2b The package com.unity.polyspatial.xr was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190583 Malicious code in node-calculator-fa00 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4262c0c6df0bff5c948bd56a719c0cf2d00aaf9699bb1c4a7367e6054ff72844 The package node-calculator-fa00 was found to contain malicious code. Source: ghsa-malware...

Malicious code in just-a-calculator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1b3b6dacc63b42851c61ae55e5168dbd9ff40172851cbfa980f489da54826f7 The package just-a-calculator was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190571 Malicious code in react-svg-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42e399f2b08fcb5a17dce3bb49a4f5dbeec6d8c56b34dab5586e8a84c5232d08 The package react-svg-helper was found to contain malicious code. Source: ghsa-malware f872307ebcfe0abab5b4fb796f5d770fd3678292ff059768bc62144d97fe03...

Malicious code in react-svg-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42e399f2b08fcb5a17dce3bb49a4f5dbeec6d8c56b34dab5586e8a84c5232d08 The package react-svg-helper was found to contain malicious code. Source: ghsa-malware f872307ebcfe0abab5b4fb796f5d770fd3678292ff059768bc62144d97fe03...

kernel: mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race

In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix hugepmdunshare vs GUP-fast race hugepmdunshare drops a reference on a page table that may have previously been shared across processes, potentially turning it into a normal page table used in another process in...

MAL-2025-190564 Malicious code in tailwindcss-breezium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f92d0ba07d104ef809e0b5b17fe93670e80af4cceecde2f9afb14f8357febcdc The package tailwindcss-breezium was found to contain malicious code. Source: ghsa-malware...

Malicious Package

Overview @grumpycoffeecup/hello-npm-world is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...

Malicious code in @profmego/alipay-babyblue (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a640706a6ca7c325d86d9abee284d9184571e6208ddfd48190d12f62e5227e23 The package @profmego/alipay-babyblue was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190558 Malicious code in @profmego/alipay-babyblue (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a640706a6ca7c325d86d9abee284d9184571e6208ddfd48190d12f62e5227e23 The package @profmego/alipay-babyblue was found to contain malicious code. Source: ghsa-malware...

Malicious code in mongoose-odm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f96769a7d9b829c0679f6d50c1f0c7cf119eb49605c5dc6d9b7b1a05c2b655c9 The package mongoose-odm was found to contain malicious code. Source: ghsa-malware f652b1e2a0f5c99554f46ab757d97e6038f7e5cac1d2c51a2a01851b744884f2 A...

MAL-2025-190560 Malicious code in mongoose-odm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f96769a7d9b829c0679f6d50c1f0c7cf119eb49605c5dc6d9b7b1a05c2b655c9 The package mongoose-odm was found to contain malicious code. Source: ghsa-malware f652b1e2a0f5c99554f46ab757d97e6038f7e5cac1d2c51a2a01851b744884f2 A...