RHBA-2024:2518 Red Hat Bug Fix Advisory: expat bug fix and enhancement update

Bulletin has no description...

MAL-2025-4705 Malicious code in launch-darkly-provider (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6696ff99444d08a99f63e53ce846b37cf11486968604779920e29d8ca0185d08 Any computer that has this package installed or running should be considered...

PT-2025-24024 · Unknown · Arkweb V8 Module

Name of the Vulnerable Software and Affected Versions: arkweb v8 module affected versions not specified Description: The issue is related to a Wasm exception capture vulnerability in the arkweb v8 module. Successful exploitation of this vulnerability may cause the failure to capture specific Wasm...

PT-2025-24123 · Unknown · Post Author

Name of the Vulnerable Software and Affected Versions: Post Author versions n/a through 1.1.1 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web application, and also...

MINI-FJXV-8C87-FP6H

Bulletin has no description...

WordPress Forminator plugin <= 1.44.1 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via id and data-size Parameters vulnerability

Authenticated Contributor+ Stored DOM-Based Cross-Site Scripting via id and data-size Parameters vulnerability discovered by Asaf Mozes in WordPress Plugin Forminator versions = 1.44.1...

MINI-P7R3-8RJ6-5488

Bulletin has no description...

MINI-F67J-CQ2W-C7M3

Bulletin has no description...

MINI-HC56-PMHP-686V

Bulletin has no description...

BELL-CVE-2024-12718

Bulletin has no description...

MINI-RC4M-2452-VC27

Bulletin has no description...

MINI-W8CF-M39W-8M59

Bulletin has no description...

BIT-JOOMLA-2025-25226 [20250401] - Joomla Framework - SQL injection vulnerability in quoteNameStr method of Database package

Improper handling of identifiers lead to a SQL injection vulnerability in the quoteNameStr method of the database package. Please note: the affected method is a protected method. It has no usages in the original packages in neither the 2.x nor 3.x branch and therefore the vulnerability in questio...

BIT-JOOMLA-2024-40747 [20250101] - Core - XSS vectors in module chromes

Various module chromes didn't properly process inputs, leading to XSS vectors...

BIT-JOOMLA-2024-40743 [20240805] - Core - XSS vectors in Outputfilter::strip* methods

The stripImages and stripIframes methods didn't properly process inputs, leading to XSS vectors...

WordPress The Events Calendar Countdown Addon plugin <= 1.4.9 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by muhammad yudha in WordPress Plugin The Events Calendar Countdown Addon versions = 1.4.9...

WordPress Bellows Accordion Menu plugin <= 1.4.3 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by muhammad yudha in WordPress Plugin Bellows Accordion Menu versions = 1.4.3...

MINI-459H-J68X-8HP4

Bulletin has no description...

BIT-PYTORCH-2024-31584

Pytorch before v2.2.0 has an Out-of-bounds Read vulnerability via the component torch/csrc/jit/mobile/flatbufferloader.cpp...

BIT-MODSECURITY-2025-48866 ModSecurity has possible DoS vulnerability in sanitiseArg action

ModSecurity is an open source, cross platform web application firewall WAF engine for Apache, IIS and Nginx. Versions prior to 2.9.10 contain a denial of service vulnerability similar to GHSA-859r-vvv8-rm8r/CVE-2025-47947. The sanitiseArg and sanitizeArg - this is the same action but an alias is...