lua_CVE-2020-24370

Lua 5.3 readme blockquote, .display border: solid a0a0a0 2px ; border-radius: 8px ; padding: 1em ; margin: 0px ; .display word-spacing: 0.25em ; dl.display dd padding-bottom: 0.2em ; tt, kbd, code font-size: 12pt ; Welcome to Lua 5.3 about · installation · changes · license · reference manual Abo...

lua_CVE-2020-24370_AfterPatch

Lua 5.3 readme blockquote, .display border: solid a0a0a0 2px ; border-radius: 8px ; padding: 1em ; margin: 0px ; .display word-spacing: 0.25em ; dl.display dd padding-bottom: 0.2em ; tt, kbd, code font-size: 12pt ; Welcome to Lua 5.3 about · installation · changes · license · reference manual Abo...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: rapidio: Fix an API misuse when rioaddnet fails. rioaddnet calls deviceregister, and it fails when deviceregister does. Therefore, putdevice should be used instead of kfree. Also, add "mport-net = NULL;" to avoid a...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: rapidio: A check for rioaddnet has been added in rioscanallocnet. The return value of rioaddnet should be checked. If it fails, putdevice should be called to free the memory and release the references initialized during rioaddnet...

Astra Linux – vulnerability in linux-5.10, linux-5.15, linux

In the Linux kernel, the following vulnerability has been resolved: rapidio: rio: fix possible name leak in rioregistermport If deviceregister returns an error, the name allocated by devsetname must be freed. It should use putdevice to release the reference in the error path, so that the name can...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerabilities have been resolved: powerpc/fslrio: The refcount leak in fslriosetup has been fixed. ofparsephandle returns a node pointer with a refcount incremented; we should use ofnodeput on it when there is no longer a need for it. Add the missing ofnodeput...

Malicious code in cisco-rio-mfc (npm)

The package cisco-rio-mfc was found to contain malicious code. --- Credit: OpenSSF source...

WordPress Mobile App for WooCommerce plugin <= 0.4.62 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Phat RiO in WordPress Plugin Mobile App for WooCommerce versions = 0.4.62...

WordPress KidXtore - Kids Clothing and Toys Store Elementor WooCommerce WordPress Theme theme <= 2.7 - Local File Inclusion vulnerability

WordPress KidXtore - Kids Clothing and Toys Store Elementor WooCommerce WordPress Theme theme = 2.7 - Local File Inclusion vulnerability discovered by Phat RiO in WordPress Theme KidXtore - Kids Clothing and Toys Store Elementor WooCommerce WordPress Theme versions = 2.7...

ai.agnos:reactive-sparql_2.12 (>=0.3.0, <=0.3.1), au.csiro:elk-distribution-owlapi5 (0.5.0) +1026 more potentially affected by CVE-2026-15803 via org.eclipse.rdf4j:rdf4j-rio-api (>=1.0m1, <=5.3.1)

org.eclipse.rdf4j:rdf4j-rio-api MAVEN version =1.0m1, =0.3.0, =3.1.2, =3.1.2, =3.1.2, =3.1.2, =1.2.0, =1.3.0 - be.vlaanderen.informatievlaanderen.ldes.ldi.nifi:ldi-processors-bundle 2.12.0 - be.vlaanderen.informatievlaanderen.ldes.ldi.nifi:rdf4j-repository-sink-processor 2.12.0 -...

ai.agnos:reactive-sparql_2.12 (>=0.3.0, <=0.3.1), au.csiro:elk-distribution-owlapi5 (0.5.0) +663 more potentially affected by CVE-2026-15803 via org.eclipse.rdf4j:rdf4j-rio-rdfxml (>=1.0m1, <=5.3.1)

org.eclipse.rdf4j:rdf4j-rio-rdfxml MAVEN version =1.0m1, =0.3.0, =3.1.2, =3.1.2, =3.1.2, =3.1.2, =3.0.6, =3.0.6, =3.0.6, =2.1.2, =5.16.3, =5.16.3, =0.0.1, =3.9.0, =5.0.0 and more Source cves: CVE-2026-15803 Source advisory: MEND:CVE-2026-15803...

ai.agnos:reactive-sparql_2.12 (>=0.3.0, <=0.3.1), au.csiro:elk-distribution-owlapi5 (0.5.0) +499 more potentially affected by CVE-2026-15803 via org.eclipse.rdf4j:rdf4j-rio-trix (>=1.0m1, <=5.3.1)

org.eclipse.rdf4j:rdf4j-rio-trix MAVEN version =1.0m1, =0.3.0, =3.1.2, =3.1.2, =3.1.2, =3.1.2, =3.0.6, =3.0.6, =3.0.6, =2.1.2, =5.16.3, =5.16.3, =1.0.0, =2.0.0 - com.farao-community.farao:farao-distribution-gse 1.0.0 and more Source cves: CVE-2026-15803 Source advisory: MEND:CVE-2026-15803...

WordPress Reviewer plugin <= 3.14.2 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Phat RiO in WordPress Plugin Reviewer versions = 3.14.2...

WordPress Gillion theme <= 4.13 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Phat RiO in WordPress Theme Gillion versions = 4.13...

WordPress Photography theme <= 7.7.6 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Phat RiO in WordPress Theme Photography versions = 7.7.6...

WordPress QuickCal - Appointment Booking Calendar for WordPress plugin <= 1.0.16 - Broken Access Control vulnerability

WordPress QuickCal - Appointment Booking Calendar for WordPress plugin = 1.0.16 - Broken Access Control vulnerability discovered by Phat RiO in WordPress Plugin QuickCal - Appointment Booking Calendar for WordPress versions = 1.0.16...

WordPress Reviewer plugin <= 3.14.2 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Phat RiO in WordPress Plugin Reviewer versions = 3.14.2...

Malicious Package

Overview rio-design-tokens is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malware in rio-design-tokens

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in rio-design-tokens (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed72d8256a1831ef61f01d101c9b9de21db822516cb3b61d1fffd1ef7b3bb0c7 [email protected] is a dependency-confusion attack package. package.json declares preinstall: node index.js, so npm install auto-executes...