CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: redka, ctop, nvidia-container-toolkit, kubernetes-dashboard, prometheus-adapter, kapp, github-mcp-server, dask-gateway, dfc, actions-runner-controller, podinfo, spqr, db-operator, kube-vip-cloud-provider, kuberlr, k8ssandra-client, mesosphere-vsphere-csi, mkcert,...

EUVD-2025-201197

In the Linux kernel, the following vulnerability has been resolved: schedext: Fix scxenable crash on helper kthread creation failure A crash was observed when the schedext selftests runner was terminated with Ctrl+\ while test 15 was running: NIP c00000000028fa58 scxenable.constprop.0+0x358/0x12b...

WordPress Trade Runner plugin <= 3.14 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by vr0px in WordPress Plugin Trade Runner versions = 3.14...

Linux Distros Unpatched Vulnerability : CVE-2025-11702

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitLab has remediated an issue in EE affecting all versions from 17.1 before 18.3.5, 18.4 before 18.4.3, and 18.5 before 18.5.1 that could have allowed an...

Malicious code in zapier-platform-legacy-scripting-runner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e90298308f4d64cfb41746e3f65bcdbae9f4d790f7db3034608ea5d520aa73cc The package zapier-platform-legacy-scripting-runner was found to contain malicious code. Source: google-open-source-security...

EUVD-2025-198899

Malicious code in zapier-platform-legacy-scripting-runner npm...

MAL-2025-190928 Malicious code in zapier-platform-legacy-scripting-runner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e90298308f4d64cfb41746e3f65bcdbae9f4d790f7db3034608ea5d520aa73cc The package zapier-platform-legacy-scripting-runner was found to contain malicious code. Source: google-open-source-security...

GHSA-7HHV-H469-WC4Q vulnerabilities

Vulnerabilities for packages: gitlab-runner...

GHSA-9MV9-GW4X-7XW4 vulnerabilities

Vulnerabilities for packages: gitlab-runner...

GHSA-RM4R-VWVW-VJ67 vulnerabilities

Vulnerabilities for packages: gitlab-runner...

CVE-2025-12983 vulnerabilities

Vulnerabilities for packages: gitlab-runner...

CVE-2025-7736 vulnerabilities

Vulnerabilities for packages: gitlab-runner...

CVE-2025-2615 vulnerabilities

Vulnerabilities for packages: gitlab-runner...

RHEL 8 / 9 : Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update (Moderate) (RHSA-2025:21706)

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:21706 advisory. Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers ca...

EUVD-2025-103724

Malicious code in muddyroadrunnerz3n npm...

Malicious code in thundering_roadrunner_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cbe788ac61fc491a3dc9f6f1b21ae4fdffc8bf46e97532bb2428f9da3e77276 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-76767

Malicious code in geographicalroadrunner-appteadev npm...

EUVD-2025-80790

Malicious code in realisticroadrunner0xrequest npm...

MAL-2025-107771 Malicious code in realistic_roadrunner_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd0dbbda7425dd7eb166bafd1764df26f4f5a2b6ef00cf4c42009b597d1a5422 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106896 Malicious code in panicky_roadrunner_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16649e179f117d010a31750e426d939ae32c036db610d0a965a9dc49bf4e63ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...