13073 matches found
BELL-CVE-2025-38257
Bulletin has no description...
BIT-GIT-2025-48385 Git alllows arbitrary file writes via bundle-uri parameter injection
Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. When cloning a repository Git knows to optionally fetch a bundle advertised by the remote server, which allows the server-side to...
MAL-2025-5745 Malicious code in @nomicsfoundation/hardhat-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 47ee3c366ab380260bf1b14296eaac2bfe3c76b726ea2c18b271e9e2af4b8f7a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CGA-Q648-PMCM-8RC2
Bulletin has no description...
WordPress Custom Post Carousels with Owl plugin < 1.4.12 - Contributor+ Stored XSS vulnerability
Contributor+ Stored XSS vulnerability discovered by Pierre Rudloff in WordPress Plugin Custom Post Carousels with Owl versions 1.4.12...
GHSA-M248-72RH-CPX4 Jenkins Dead Man's Snitch Plugin vulnerability does not mask tokens
Jenkins Dead Man's Snitch Plugin 0.1 does not mask Dead Man's Snitch tokens displayed on the job configuration form, increasing the potential for attackers to observe and capture them...
CGA-WGV9-XR5P-XPJG
Bulletin has no description...
CGA-96HV-VR95-3GF7
Bulletin has no description...
CGA-WPG8-JQM9-JQ8X
Bulletin has no description...
CVE-2025-38255 lib/group_cpus: fix NULL pointer dereference from group_cpus_evenly()
In the Linux kernel, the following vulnerability has been resolved: lib/groupcpus: fix NULL pointer dereference from groupcpusevenly While testing nullblk with configfs, echo 0 pollqueues will trigger following panic: BUG: kernel NULL pointer dereference, address: 0000000000000010 Oops: Oops: 000...
RHSA-2025:10673 Red Hat Security Advisory: kernel security update
Bulletin has no description...
RHSA-2025:10620 Red Hat Security Advisory: jq security update
Bulletin has no description...
MAL-2025-5750 Malicious code in houimlogs22 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c17d30387b6d0c43cbc6b39b5be60746ceb7ef2a5a6f82469ef4f40f7e46f0c0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
BELL-CVE-2025-38236
Bulletin has no description...
MAL-2025-5664 Malicious code in ai-guide (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 344da047769642e93f7d727b850c547fe9be2272daef99e44ef3f7c9b0f4bc77 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-5827 Malicious code in textlocal-messenger (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 977a0980a8abb08f4b44cafb9b81f7b9450f2323d84939a31cd020608e7ee41c Any computer that has this package installed or running should be considered...
CVE-2025-49714
Trust boundary violation in Visual Studio Code - Python extension allows an unauthorized attacker to execute code locally...
CGA-CFF4-QQ7G-Q7CR
Bulletin has no description...