CGA-P899-8W4F-7VCH

Bulletin has no description...

WordPress Litho Theme <= 3.0 is vulnerable to Arbitrary File Deletion

Software Litho Type Theme Vulnerable versions = 3.0 Fixed in 3.1 OWASP Top 10 A3: Injection Classification Arbitrary File Deletion CVE CVE-2025-49879 Patch priority High CVSS severity High 8.6 Developer Claim ownership PSID b5c6a3b3bdf8 Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity...

DLA-4230-1 xorg-server - security update

Bulletin has no description...

CGA-4P7H-XGPG-2MXX

Bulletin has no description...

CGA-XGC7-G52W-XPMH

Bulletin has no description...

CGA-WXJX-2HC8-G7PH

Bulletin has no description...

CGA-VXF8-HGQH-2JHW

Bulletin has no description...

CGA-RR9G-QR28-X676

Bulletin has no description...

CGA-RQV2-H7H6-GMVQ

Bulletin has no description...

CGA-HM8H-5XFR-98HM

Bulletin has no description...

CGA-HG66-XF22-2P94

Bulletin has no description...

CGA-GXGJ-2FQ4-VC32

Bulletin has no description...

CGA-G9MJ-RQPV-9273

Bulletin has no description...

CGA-5GF3-HJCJ-6QQ8

Bulletin has no description...

CGA-3X9F-86MM-5XP6

Bulletin has no description...

MAL-2025-5415 Malicious code in homey-web-app (npm)

The package communicates with a domain associated with malicious activity...

BIT-GITLAB-2024-7586 Insertion of Sensitive Information into Log File in GitLab

An issue was discovered in GitLab EE affecting all versions starting from 17.0 prior to 17.0.6, starting from 17.1 prior to 17.1.4, and starting from 17.2 prior to 17.2.2, where webhook deletion audit log preserved auth credentials...

MINI-JR5F-JR7Q-RHQW

Bulletin has no description...

MINI-F4G8-9M36-H596

Bulletin has no description...

CVE-2025-6430

When a file download is specified via the Content-Disposition header, that directive would be ignored if the file was included via a embed or object tag, potentially making a website vulnerable to a cross-site scripting attack. This vulnerability affects Firefox 140, Firefox ESR 128.12, Thunderbi...