MAL-2025-6683 Malicious code in 7702-eoa-implementation (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-6699 Malicious code in blanl-pkg (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-6755 Malicious code in react-native-gainsight-px (npm)

The package communicates with a domain associated with malicious activity...

CVE-2025-53111

GLPI is a Free Asset and IT Management Software package. In versions 0.80 through 10.0.18, a lack of permission checks can result in unauthorized access to some resources. This is fixed in version 10.0.19...

CGA-VX37-RWM7-FPF2

Bulletin has no description...

CGA-7F4Q-7GWF-75FM

Bulletin has no description...

CGA-WRJQ-VQJQ-VVVX

Bulletin has no description...

CGA-HPQP-HV27-5W45

Bulletin has no description...

CGA-44PM-GG7C-86QH

Bulletin has no description...

CVE-2025-6918

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Ncvav Virtual PBX Software allows SQL Injection. This issue affects Virtual PBX Software: before 09.07.2025...

CGA-P769-WCV6-R8PM

Bulletin has no description...

CGA-87JQ-3XQ3-88MR

Bulletin has no description...

RHSA-2025:12083 Red Hat Security Advisory: icu security update

Bulletin has no description...

RHBA-2025:6314 Red Hat Bug Fix Advisory: openssl bug fix and enhancement update

Bulletin has no description...

CGA-P6F3-HJCR-55XQ

Bulletin has no description...

MINI-XXR6-P4R3-9CGP

Bulletin has no description...

BELL-CVE-2025-38376

Bulletin has no description...

BELL-CVE-2025-38426

Bulletin has no description...

CVE-2025-54126 WebAssembly Micro Runtime's `--addr-pool` option allows all IPv4 addresses when subnet mask is not specified

The WebAssembly Micro Runtime's WAMR iwasm package is the executable binary built with WAMR VMcore which supports WebAssembly System Interface WASI and command line interface. In versions 2.4.0 and below, iwasm uses --addr-pool with an IPv4 address that lacks a subnet mask, allowing the system to...

GO-2025-3828 Unexpected command execution in untrusted VCS repositories in cmd/go

The go command may execute unexpected commands when operating in untrusted VCS repositories. This occurs when possibly dangerous VCS configuration is present in repositories. This can happen when a repository was fetched via one VCS e.g. Git, but contains metadata for another VCS e.g. Mercurial...