Unity Linux 20.1070e Security Update: libpq (UTSA-2025-987409)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987409 advisory. PostgreSQL optimizer statistics allow a user to read sampled data within a view that the user cannot access. Separately, statistics allow a user to read sampled data...

EUVD-2022-47874

Malicious code in bioql PyPI...

EUVD-2023-49659

Malicious code in bioql PyPI...

EUVD-2023-43142

Malicious code in bioql PyPI...

EUVD-2024-33374

Malicious code in bioql PyPI...

EUVD-2022-2222

Malicious code in bioql PyPI...

EUVD-2023-33940

Malicious code in bioql PyPI...

EUVD-2025-16474

Malicious code in bioql PyPI...

EUVD-2022-49574

Malicious code in bioql PyPI...

EUVD-2023-26958

Malicious code in bioql PyPI...

EUVD-2025-29686

Malicious code in bioql PyPI...

EUVD-2025-16441

Malicious code in bioql PyPI...

EUVD-2025-24811

Malicious code in bioql PyPI...

CVE-2020-36852

The WordPress plugin Custom Searchable Data Entry System (versions ≤ 1.7.1) is vulnerable to unauthenticated database wiping due to a missing capability check and inadequate validation in ghazale_sds_delete_entries_table_row(). This allows unauthenticated attackers to wipe tables (e.g., wp_users)...

DRAM Related Side Channel Attacks

Summary Researchers have provided AMD with a paper titled “Quo VADIS DDR5? Verifying Addressing of DRAM In Software.” In this paper, the authors present an approach to verifying DRAM addressing functions from software using the DRAM row conflict side channel. The authors claim that the presented...

CVE-2025-10125

The Memberlite Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugins's 'row' shortcode in all versions up to, and including, 1.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

WordPress Memberlite Shortcodes plugin cross-site scripting vulnerability

WordPress Memberlite Shortcodes plugin is a plugin used to extend the functionality of the theme, mainly used to add additional features to the WordPress theme, such as content display controls, layout tools, etc., while allowing users to use specific features without completely replacing the...

CVE-2025-10125

The Memberlite Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugins's 'row' shortcode in all versions up to, and including, 1.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

CVE-2025-10125 Memberlite Shortcodes <= 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Memberlite Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugins's 'row' shortcode in all versions up to, and including, 1.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

CVE-2025-10125

The CVE-2025-10125 issue affects the WordPress plugin Memberlite Shortcodes (versions prior to or up to 1.4). The vulnerability is a Stored Cross‑Site Scripting flaw in the grid/“row” shortcode caused by insufficient input sanitization and output escaping on user-supplied attributes. Impact: auth...