CVE-2025-31477 Improper Scope Validation in the open Endpoint of tauri-plugin-shell

The Tauri shell plugin allows access to the system shell. Prior to 2.2.1, the Tauri shell plugin exposes functionality to execute code and open programs on the system. The open endpoint of this plugin is designed to allow open functionality with the system opener e.g. xdg-open on Linux. This was...

MAL-2025-3033 Malicious code in @hongfangze/array (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2f960dc6274e7bc128da9e089382bd14d47a6e944b250dbc6a53b2f4a17cce5d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3055 Malicious code in @hongfangze/string (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 91ee35af30acd3517cea9a097e00846a80a50fb6888854e7356c5175841b91d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

BELL-CVE-2025-21978

Bulletin has no description...

BELL-CVE-2025-21981

Bulletin has no description...

BELL-CVE-2025-21959

Bulletin has no description...

BELL-CVE-2025-21968

Bulletin has no description...

BELL-CVE-2025-21964

Bulletin has no description...

BELL-CVE-2025-21934

Bulletin has no description...

BELL-CVE-2025-21915

Bulletin has no description...

BELL-CVE-2025-21943

Bulletin has no description...

BELL-CVE-2025-21966

Bulletin has no description...

BELL-CVE-2025-21920

Bulletin has no description...

BELL-CVE-2025-21913

Bulletin has no description...

BELL-CVE-2025-21909

Bulletin has no description...

MAL-2025-3058 Malicious code in @nationalgeographicsociety/ngsui-addons-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d522cf6892b9363520f72cb2c024bbcf7d63238df065658694ca622082b1be9b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Authorization Bypass

org.springframework.security, spring-security-core is vulnerable to Authorization Bypass. The vulnerability is due to improper method security annotation detection due to issues in locating annotations on parameterized types or methods, allowing an attacker to access methods or resources without...

CGA-8598-H4CW-P482

Bulletin has no description...

Debian dla-4109 : firefox-esr - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4109 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4109-1 [email protected]...

WordPress Tainá Theme <= 0.2.2 is vulnerable to Cross Site Scripting (XSS)

Software Tainá Type Theme Vulnerable versions = 0.2.2 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2025-26919 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID a778dbe8c9a1 Credits stealthcopter Required privilege Subscriber...