RHSA-2025:10101 Red Hat Security Advisory: microcode_ctl security update

Bulletin has no description...

MAL-2025-5543 Malicious code in checkout-off-form-validation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2794bea0563c12742ee032a227b1f44559bcabd566aa8bdd5371569bde55ad32 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

WordPress CSS3 Vertical Web Pricing Tables plugin <= 1.9 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Plugin CSS3 Vertical Web Pricing Tables versions = 1.9...

CGA-V9C8-GPV8-6X2C

Bulletin has no description...

CGA-WCGV-G3J4-XMPF

Bulletin has no description...

CVE-2025-37099

A remote code execution vulnerability exists in HPE Insight Remote Support IRS prior to v7.15.0.646...

CGA-QCHX-PC45-JQ7G

Bulletin has no description...

GHSA-XG8H-J46F-W952 Pillow vulnerability can cause write buffer overflow on BCn encoding

There is a heap buffer overflow when writing a sufficiently large 64k encoded with default settings image in the DDS format due to writing into a buffer without checking for available space. This only affects users who save untrusted data as a compressed DDS image. Unclear how large the potential...

CGA-G395-3W3W-P3PP

Bulletin has no description...

CGA-WC6J-PPHM-JGG7

Bulletin has no description...

CGA-PJJH-7Q49-584W

Bulletin has no description...

CGA-7PFG-6W4G-4739

Bulletin has no description...

BELL-CVE-2025-38088

Bulletin has no description...

BELL-CVE-2025-38087

Bulletin has no description...

BELL-CVE-2025-32462

Bulletin has no description...

BELL-CVE-2025-38090

Bulletin has no description...

BELL-CVE-2025-38089

Bulletin has no description...

MAL-2025-5524 Malicious code in velocky (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 59c90a9e49cd7bf616362e6e175865e9d59a7399ac59ad7cb8aafd9eb7b82981 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-53096 Sunshine clickjacking in the UI leads to unauthorized actions being performed

Sunshine is a self-hosted game stream host for Moonlight. Prior to version 2025.628.4510, the web UI of Sunshine lacks protection against Clickjacking attacks. This vulnerability allows an attacker to embed the Sunshine interface within a malicious website using an invisible or disguised iframe. ...

Electron vulnerable to Heap Buffer Overflow in NativeImage

Impact The nativeImage.createFromPath and nativeImage.createFromBuffer functions call a function downstream that is vulnerable to a heap buffer overflow. An Electron program that uses either of the affected functions is vulnerable to a buffer overflow if an attacker is in control of the image's...