MAL-2025-191591 Malicious code in szsec-infos-report-wh2sper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1878797ef2a97b1f4eb2c7e6e16f7b633625a6a60fd63fad5eb5c7acd355de51 The package szsec-infos-report-wh2sper was found to contain malicious code...

Malicious code in szsec-infos-report-wh1sper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b009d66a2dccfe829b9259191c35e451f8f0ff75d1041165f2faf49e8f5dbd16 The package szsec-infos-report-wh1sper was found to contain malicious code...

MAL-2025-191590 Malicious code in szsec-infos-report-wh1sper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b009d66a2dccfe829b9259191c35e451f8f0ff75d1041165f2faf49e8f5dbd16 The package szsec-infos-report-wh1sper was found to contain malicious code...

MAL-2025-191589 Malicious code in szsec-info-report (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6386da123439e1c1588e1432f8a8163e8acbe4363aa983265f6ddee9b9e5c8d The package szsec-info-report was found to contain malicious code...

Malicious code in szsec-info-report (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6386da123439e1c1588e1432f8a8163e8acbe4363aa983265f6ddee9b9e5c8d The package szsec-info-report was found to contain malicious code...

MAL-2025-191577 Malicious code in kyjnzu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76ec5839e1ac972ae9271550bfe712c6d00f654ebce392fdc89762ab7347a663 The package kyjnzu was found to contain malicious code...

WordPress LearnPress plugin <= 4.2.9.4 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by benzdeus in WordPress Plugin LearnPress versions = 4.2.9.4...

OSV-2025-959 Heap-buffer-overflow in re_parse_term

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=464349132 Crash type: Heap-buffer-overflow READ 2 Crash state: reparseterm reparsedisjunction reparseterm...

OSV-2025-955 Use-of-uninitialized-value in decoder_context::construct_reference_picture_lists

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=464323256 Crash type: Use-of-uninitialized-value Crash state: decodercontext::constructreferencepicturelists decodercontext::processslicesegmentheader decodercontext::readsliceNAL...

Cross-site Scripting (XSS)

librenms/librenms is vulnerable to reflected cross-site scripting XSS. The vulnerability is due to improper filtering in the reportthis function in librenms/includes/functions.php, specifically incorrect use of htmlentities in an href context, which allows an attacker to inject malicious script v...

Vulnerabilities fixed in GitLab

GitLab has fixed vulnerabilities in its Community Edition CE and Enterprise Edition EE versions. The vulnerabilities include the ability for unauthenticated users to cause Denial of Service DoS conditions by submitting malicious JSON requests. In addition, unauthenticated users could join arbitra...

WordPress Customer Reviews Collector for WooCommerce plugin <= 4.6.1 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by Jonas Benjamin Friedli in WordPress Plugin Customer Reviews Collector for WooCommerce versions = 4.6.1...

Wordfence Intelligence Weekly WordPress Vulnerability Report (November 17, 2025 to November 23, 2025)

Last week, there were 167 vulnerabilities disclosed in 152 WordPress Plugins and 2 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 69 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabilities...

kernel: ip6mr: Fix skb_under_panic in ip6mr_cache_report()

A buffer underwrite vulnerability exists in the linux kernel in the function skbunderpanic in ip6mrcachereport, leading to an attacker, via crafting a payload, could result in damage to system availability and integrity...

kernel: ip6mr: Fix skb_under_panic in ip6mr_cache_report()

A buffer underwrite vulnerability exists in the linux kernel in the function skbunderpanic in ip6mrcachereport, leading to an attacker, via crafting a payload, could result in damage to system availability and integrity...

kernel: ip6mr: Fix skb_under_panic in ip6mr_cache_report()

A buffer underwrite vulnerability exists in the linux kernel in the function skbunderpanic in ip6mrcachereport, leading to an attacker, via crafting a payload, could result in damage to system availability and integrity...

Moderate: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.6 Telecommunications Update Service. Red Hat Product Security has rated this update as...

EUVD-2025-199171

Malicious code in create-kinvey-flex-service npm...

CVE-2025-52538

creationtimestamp| type| source ---|---|--- 2025-11-24 21:37:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6frw2taqs2n...

The Future of Cloud Security: A New Act for Cyber Risk Operations

Qualys, the leader in Cyber Risk Operations, is proud to be recognized in Latio Tech’s 2025 Cloud Security Market Report as a leader in both CTEM and the Cloud Security Ecosystem. This acknowledgement by Latio Tech reinforces the strength of our strategy—anchored by the industry’s first Risk...