DLA-4142-1 libraw - security update

Bulletin has no description...

MAL-2025-4247 Malicious code in tronlix (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 007bba18e8334f8678c8256d3d77e35146758c5b14ae9861c883b6ef7fbee6ff Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...

MAL-2025-5141 Malicious code in wallettronpy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 6232d6f8e03368abc5a38f906502206757571193ce7daf078c26f2e0cd159882 Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...

CGA-XPG4-X32H-C6H7

Bulletin has no description...

CGA-JWCH-FP6C-JXGV

Bulletin has no description...

CGA-JR86-6PHC-M7WG

Bulletin has no description...

CGA-XV22-G48C-PX9C

Bulletin has no description...

GHSA-37PQ-893F-G7Q5 Apereo CAS code injection vulnerability

A vulnerability was found in Apereo CAS 5.2.6 and classified as critical. Affected by this issue is the function saveService of the file cas-5.2.6\webapp-mgmt\cas-management-webapp-support\src\main\java\org\apereo\cas\mgmt\services\web\RegisteredServiceSimpleFormController.java of the component...

MAL-2025-4205 Malicious code in alchemyrpcs (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c3de5cb8ee8e308aa3b7dbfcb71e5c3d5becf9c41b1bdfee75a00b4a29c3663a Package contains just a function to send out data. It or a package sharing the same IoCs is used in a malicious GitHub project to exfiltrate crypto currency...

MAL-2025-4259 Malicious code in walletrpcs (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 4b93b9b49f17c924bbca7ba78750257a7be53f8d48ad200a16dc5eb4e369a734 Package contains just a function to send out data. It or a package sharing the same IoCs is used in a malicious GitHub project to exfiltrate crypto currency...

CVE-2025-46675

In NASA CryptoLib before 1.3.2, the key state is not checked before use, potentially leading to spacecraft hijacking...

MAL-2025-3389 Malicious code in dowload_ebok_he_is_a_beast_t04_by_saki_aikawa_9bj30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4ae7b1f7fe219acd6c836c06592e9b86119b37abe839810b895444e5353af436 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CGA-GJC8-4JWQ-5WQV

Bulletin has no description...

WordPress Mad Mimi for WordPress plugin <= 1.5.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by 0x1ceKing Patchstack Alliance in WordPress Plugin Mad Mimi for WordPress versions = 1.5.1...

BELL-CVE-2024-58251

Bulletin has no description...

PT-2025-19703 · Opensuse +1 · Govulncheck-Vulndb

Name of the Vulnerable Software and Affected Versions: govulncheck-vulndb versions prior to 0.0.20250422T152923 govulncheck-vulndb versions prior to 0.0.20250422T181640 Description: This update addresses multiple issues in govulncheck-vulndb. The issues addressed include GO-2025-3600, GO-2025-360...

WordPress Confirm User Registration plugin <= 2.1.5 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Nabil Irawan in WordPress Plugin Confirm User Registration versions = 2.1.5...

CGA-9FWC-GMV6-444F

Bulletin has no description...

Security Bulletin: NVIDIA GPU Display Driver - April 2025

NVIDIA has released a software security update for NVIDIA GPU Display Driver to address the issues that are disclosed in this bulletin. To protect your system, download and install this software update through the NVIDIA Driver Downloads page or, for the vGPU software and Cloud Gaming updates,...

Moodle Multiple Vulnerabilities (MSA-25-0013, MSA-25-0018, MSA-25-0019, MSA-25-0020, MSA-25-0021, MSA-25-0022, MSA-25-0023, MSA-25-0024, MSA-25-0025, MSA-25-0026, MSA-25-0027, MSA-25-0028)

Moodle is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:moodle:moodle"; ifdescription...