13120 matches found
MAL-2025-5065 Malicious code in voicebuilder_ui (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
CGA-V63M-XHMR-8H8M
Bulletin has no description...
CGA-X6MW-C467-JJFX
Bulletin has no description...
CGA-X9JP-9JPR-X355
Bulletin has no description...
CGA-3JW4-MH9F-J7XP
Bulletin has no description...
GHSA-7PR5-W74R-JJJ7 Mezzanine CMS has a Stored Cross-Site Scripting (XSS) vulnerability in the displayable_links_js function
Mezzanine CMS, in versions prior to 6.1.1, contains a Stored Cross-Site Scripting XSS vulnerability in the admin interface. The vulnerability exists in the "displayablelinksjs" function, which fails to properly sanitize blog post titles before including them in JSON responses served via...
CGA-MJG9-H2JR-FQRQ
Bulletin has no description...
CGA-W658-2VV8-4QMJ
Bulletin has no description...
CGA-MQCQ-4VJ8-J6R4
Bulletin has no description...
RHSA-2025:9162 Red Hat Security Advisory: gimp security update
Bulletin has no description...
RHSA-2025:9125 Red Hat Security Advisory: libvpx security update
Bulletin has no description...
RHSA-2025:9106 Red Hat Security Advisory: git-lfs security update
Bulletin has no description...
MAL-2025-5003 Malicious code in odyssee_teams_api (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9634a76d594664463c45445417dd33af9980310ff86b362704e5b0b50daed079 Any computer that has this package installed or running should be considered...
CGA-MP37-5868-VWFW
Bulletin has no description...
PYSEC-2025-64
A vulnerability classified as critical has been found in themanojdesai python-a2a up to 0.5.5. Affected is the function createworkflow of the file pythona2a/agentflow/server/api.py. The manipulation leads to path traversal. Upgrading to version 0.5.6 is able to address this issue. It is recommend...
MAL-2025-6598 Malicious code in syscachelib (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 c8aa87f03342830d082dcfd87dfce0528b19781902f9c9e56a7379046d8a1572 Importing the module starts a UAC bypass through fodhelper to run a privileged shell, and download and execute a remote file. --- Category: MALICIOUS - The...
MAL-2025-5333 Malicious code in @zyp3_/api-ecom-errors (npm)
The package contains code that makes a suspicious HTTP request to an OAST domain, suggesting data exfiltration or unauthorized tracking. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3906662b72961a45e2a5f250c4204f6ae4c310f177e6e8dfaa97db0a1566b188 Any computer tha...
ALSA-2025:9166 Important: apache-commons-beanutils security update
The Apache Commons BeanUtils library provides utility methods for accessing and modifying properties of arbitrary JavaBeans. Security Fixes: commons-beanutils: Apache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum's declaredClass property by default CVE-2025-48734 For more detai...
ALSA-2025:9145 Moderate: skopeo security update
The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. Security Fixes: net/http: Request smuggling due to acceptance of invalid chunked data in net/http CVE-2025-22871 For more details about the...