CVE-2025-52668

Revive Adserver is affected by CVE-2025-52668 due to improper input neutralization in stats-conversions.php, enabling stored XSS. The vulnerability arises from unsafely echoed tracker-related fields (trackername, campaignid, campaignname) sourced from advertiser input, which admins view on the co...

CVE-2025-52668: Improper Neutralization of Input During Web Page Generation

Improper input neutralization in the stats-conversions.php script in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes potential information disclosure and session hijacking via a stored XSS attack...

Revive Adserver 安全漏洞

Revive Adserver is an open source ad serving system that allows advertisers, publishers, and networks to place ads on multiple platforms e.g., websites, apps, video players and supports ad effectiveness tracking, campaign management, and placement rule definition. Revive Adserver suffers from a...

PT-2025-47618

Improper input neutralization in the stats-conversions.php script in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes potential information disclosure and session hijacking via a stored XSS attack...

TencentOS Server 4: kernel (TSSA-2025:0046)

"The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0046 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilitie...

PT-2025-53008

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw where an invalid memory access can occur following fault injection in the update effective progs function. This issue arises when fault injection causes...

Siemens SIMATIC S7-1500 Improper Input Validation (CVE-2025-21712)

md/md-bitmap: vulnerability caused by bitmapgetstats can be called even if the bitmap is destroyed or not fully initialized, leading to a kernel crash, which is fixed by synchronizing bitmapgetstats with bitmapinfo.mutex. This plugin only works with Tenable.ot. Please visit...

kernel: powerpc/papr_scm: don't requests stats with '0' sized stats buffer

In the Linux kernel, the following vulnerability has been resolved: powerpc/paprscm: don't requests stats with '0' sized stats buffer Sachin reported 1 that on a POWER-10 lpar he is seeing a kernel panic being reported with vPMEM when paprscm probe is being called. The panic is of the form below...

Malicious code in elf-stats-bright-garland-287 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f43e2c1a4a6278acedcc2c8220afe0c9c45f86ccbd11873c58edcb086213fe3c The package elf-stats-bright-garland-287 was found to contain malicious code...

EUVD-2025-56098

Malicious code in elf-stats-bright-garland-287 npm...

MAL-2025-62739 Malicious code in elf-stats-bright-garland-287 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f43e2c1a4a6278acedcc2c8220afe0c9c45f86ccbd11873c58edcb086213fe3c The package elf-stats-bright-garland-287 was found to contain malicious code...

Malicious code in elf-stats-cranberry-workbench-671 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd12babcc90fff2e7c924d294201cab8cbcce44c36120fe75a552325c361c0be The package elf-stats-cranberry-workbench-671 was found to contain malicious code...

Malicious code in elf-stats-whimsical-train-322 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2284c76f7ccad9a8edfac541f2dc26bacf1308d5e358dfb7f050f70696ca0d59 The package elf-stats-whimsical-train-322 was found to contain malicious code...

Malicious code in elf-stats-storybook-cookiejar-880 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41a568cb0be6c18f5ce4e4ab81bd7dfe0b1026ba19749c2fee13f5ba70a586b4 The package elf-stats-storybook-cookiejar-880 was found to contain malicious code...

EUVD-2025-38562

Malicious code in elf-stats-cranberry-workbench-671 npm...

EUVD-2025-38561

Malicious code in elf-stats-storybook-cookiejar-880 npm...

EUVD-2025-38560

Malicious code in elf-stats-whimsical-train-322 npm...

MAL-2025-49460 Malicious code in elf-stats-whimsical-train-322 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2284c76f7ccad9a8edfac541f2dc26bacf1308d5e358dfb7f050f70696ca0d59 The package elf-stats-whimsical-train-322 was found to contain malicious code...

MAL-2025-49459 Malicious code in elf-stats-storybook-cookiejar-880 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41a568cb0be6c18f5ce4e4ab81bd7dfe0b1026ba19749c2fee13f5ba70a586b4 The package elf-stats-storybook-cookiejar-880 was found to contain malicious code...

MAL-2025-49458 Malicious code in elf-stats-cranberry-workbench-671 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd12babcc90fff2e7c924d294201cab8cbcce44c36120fe75a552325c361c0be The package elf-stats-cranberry-workbench-671 was found to contain malicious code...