MAL-2025-4150 Malicious code in @dailyapy-rn/rn-push-provisioning (npm)

--- -= Per source details. Do not edit below this line.=-...

BELL-CVE-2025-37926

Bulletin has no description...

MAL-2025-5124 Malicious code in pyfiglets (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 66caa962e9fedf67dff7c9da840c4a4dcdca71f237d2e36f332f5b5bd32750bc Malicious clone of pyfiglet. Importing the package starts a series of downloading and executing of obfuscated malicious scripts, partially identified by AVs. -...

The vulnerability of Qualcomm’s security microprogramming software, related to unvalidated array indexing, allows attackers to influence the integrity, accessibility, and confidentiality of protected information.

The vulnerability of Qualcomm’s security microprogramming software relates to unverified array indexing. Exploiting this vulnerability could allow attackers to influence the integrity, accessibility, and confidentiality of the protected information...

BELL-CVE-2023-53092

Bulletin has no description...

Google Reports 75 Zero-Days Exploited in 2024 — 44% Targeted Enterprise Security Products

Google has revealed that it observed 75 zero-day vulnerabilities exploited in the wild in 2024, down from 98 in 2023 but an increase from 63 the year before. Of the 75 zero-days, 44% of them targeted enterprise products. As many as 20 flaws were identified in security software and appliances...

MAL-2025-6609 Malicious code in tronlid (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 387ea56c726485890b55cce5a96c6381e248be3c8eba22c22ead08e4b30db3b1 Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...

WordPress Site Search 360 plugin <= 2.1.8 - Cross Site Request Forgery (CSRF) to stored XSS vulnerability

Cross Site Request Forgery CSRF to stored XSS vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Site Search 360 versions = 2.1.8...

CVE-2025-30728

...

CVE-2025-30699

CVE-2025-30699 affects Oracle MySQL Server, component: Server: Stored Procedure. Affected versions: 8.0.0–8.0.41, 8.4.0–8.4.4, 9.0.0–9.2.0. An attacker with high privileges and network access via multiple protocols can exploit this to cause a hang or a complete denial of service on MySQL Server. ...

CVE-2025-30696

CVE-2025-30696 affects Oracle MySQL Server (component: Server: PS). Affected versions are 8.0.0–8.0.41, 8.4.0–8.4.4 and 9.0.0–9.2.0. The vulnerability can be exploited remotely over multiple protocols by a high-privilege attacker to cause a hang or a frequently repeatable crash (Denial of Service...

CVE-2025-32036 DNN allows the possibility of bypassing Captcha

DNN formerly DotNetNuke is an open-source web content management platform CMS in the Microsoft ecosystem. The algorithm used to generate the captcha image shows the least complexity of the desired image. For this reason, the created image can be easily read by OCR tools, and the intruder can send...

CGA-PHHC-5PH5-WHJ8

Bulletin has no description...

CGA-8W9G-4337-7W2R

Bulletin has no description...

BELL-CVE-2023-53001

Bulletin has no description...

BELL-CVE-2023-53007

Bulletin has no description...

BELL-CVE-2023-52993

Bulletin has no description...

MAL-2025-2553 Malicious code in @shanye3501/curvess (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 53e18457ae0b04b57176a0e8d4a09d0646e05493edd1224fb1ceda27eafe97c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

1 in 10 people do nothing to stay secure and private on vacation

This year, Spring Break vacationers are packing more than their flip-flops, bucket hats, and sunglasses—they’re also packing a few cybersecurity anxieties for the trip. According to new research from Malwarebytes, 52% of people said they “worry about being scammed while traveling,” while another...

RHSA-2025:2784 Red Hat Security Advisory: grub2 security update

Bulletin has no description...