BELL-CVE-2025-32414

Bulletin has no description...

MAL-2025-3192 Malicious code in lme4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8d886ca0d77375a13d7b0c7d522f2dae6e996f8d069f1337810a23c86e040412 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-32464

HAProxy 2.2 through 3.1.6, in certain uncommon configurations, has a sampleconvregsub heap-based buffer overflow because of mishandling of the replacement of multiple short patterns with a longer one...

2025-04 Cumulative Update for Windows 10 Version 1607 for x64-based Systems (KB5055521)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

MAL-2025-3177 Malicious code in google-youtube (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e1ecb598c9ac0e7240a341182e2f54597b4789e72942b075021ced9bf81aef35 The OpenSSF Package Analysis project identified 'google-youtube' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

RHSA-2025:3628 Red Hat Security Advisory: firefox security update

Bulletin has no description...

CVE-2025-22016 dpll: fix xa_alloc_cyclic() error handling

In the Linux kernel, the following vulnerability has been resolved: dpll: fix xaalloccyclic error handling In case of returning 1 from xaalloccyclic wrapping ERRPTR1 will be returned, which will cause ISERR to be false. Which can lead to dereference not allocated pointer pin. Fix it by checking i...

CVE-2025-3408

A vulnerability was found in Nothings stb up to f056911. It has been rated as critical. Affected by this issue is the function stbdupreplace. The manipulation leads to integer overflow. The attack may be launched remotely. Continious delivery with rolling releases is used by this product...

APSB25-30 : Security update available for Adobe Photoshop

Adobe has released an update for Photoshop for Windows and macOS. This update resolves a critical vulnerability. Successful exploitation could lead to arbitrary code execution...

inigo-rs (>=0.1.5 <=0.27.8) potentially affected by CVE-2025-32033 via apollo-router (=1.2.1)

apollo-router CARGO version =1.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on apollo-router and may be impacted: - inigo-rs =0.1.5, =0.27.8 Source cves: CVE-2025-32033 Source advisory: OSV:GHSA-84M6-5M72-45FP...

WordPress Tutor LMS plugin <= 3.4.0 - HTML Injection vulnerability

HTML Injection vulnerability discovered by Revan Arifio in WordPress Plugin Tutor LMS versions = 3.4.0...

MAL-2025-3164 Malicious code in search-benchmark-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83090fc7978d15e4a0ee6c1d633d8998d6b7ce00f6c0ec85ec1e6297d679517e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-46494

A cross-site scripting XSS vulnerability in Typecho v1.2.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into Name parameter under a comment for an Article...

CVE-2025-29087

In SQLite 3.44.0 through 3.49.0 before 3.49.1, the concatws SQL function can cause memory to be written beyond the end of a malloc-allocated buffer. If the separator argument is attacker-controlled and has a large string e.g., 2MB or more, an integer overflow occurs in calculating the size of the...

MAL-2025-3137 Malicious code in rlusd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 629e6d48825f1e58a7575a37bc976ac9d955d1e6b0a8a3782539fd168ddc570e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CGA-P866-V4RV-9M5G

Bulletin has no description...

CGA-GQHG-GPCG-WR45

Bulletin has no description...

CGA-9G6F-879G-7F7J

Bulletin has no description...

CGA-9FH3-FQ3M-52WV

Bulletin has no description...

WordPress Spider Elements – Addons for Elementor plugin <= 1.6.5 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Khalid Yusuf in WordPress Plugin Spider Elements versions = 1.6.5...