USN-7856-1: Linux kernel (HWE) vulnerabilities

Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Boris Köpf, Stavros Volos, and Flavien Solt discovered that some AMD processors may allow an attacker to infer data from previous stores, potentially resulting in the leakage of privileged information. A local attacker could possibly use this to...

Exploit for Deserialization of Untrusted Data in Vmware Spring_Framework

Reporte de Vulnerabilidad - Java Store Application Resumen...

CVE-2025-8383

The Depicter plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions less than, or equal to, 4.0.4. This is due to missing or incorrect nonce validation on the depicter-document-rules-store function. This makes it possible for unauthenticated attackers to modify document rule...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: fbcon: Ensure that the modelist parameter is not set for unregistered consoles. It appears that attempts to write to the “storemodes” sysfs node will encounter unregistered consoles. UBSAN: Array index out of bounds in...

Astra Linux – Vulnerability in curl

When performing TLS-related transfers using reused easy or multi-handles, and altering the CURLSSLOPTNOPARTIALCHAIN option, libcurl may accidentally reuse a CA store cached in memory, where the partial chain option is reversed. This goes against the user’s wishes and expectations. As a result,...

[SECURITY] Fedora 41 Update: openbao-2.4.3-1.fc41

Openbao secures, stores, and tightly controls access to tokens, passwords, certificates, API keys, and other secrets in modern computing. Openbao handles leasing, key revocation, key rolling, and auditing. Through a unified API, us ers can access an encrypted Key/Value store and network...

Restaurant Brands International assistant platform multiple vulnerabilities

RISK EVALUATION Restaurant Brands International assistant platform is used to manage restaurants owned by RBI. Multiple vulnerabilities were found in the assistant platform. The most severe vulnerabilities chained together could allow a remote, unauthenticated attacker to create an account and...

[SECURITY] Fedora 43 Update: openbao-2.4.3-1.fc43

Openbao secures, stores, and tightly controls access to tokens, passwords, certificates, API keys, and other secrets in modern computing. Openbao handles leasing, key revocation, key rolling, and auditing. Through a unified API, us ers can access an encrypted Key/Value store and network...

PT-2025-44593

Name of the Vulnerable Software and Affected Versions The Depicter plugin for WordPress versions prior to 4.0.5 Description The Depicter plugin for WordPress is susceptible to Cross-Site Request Forgery CSRF due to missing or incorrect nonce validation within the depicter-document-rules-store...

CVE-2025-64104

LangGraph SQLite Checkpoint is an implementation of LangGraph CheckpointSaver that uses SQLite DB both sync and async, via aiosqlite. Prior to 2.0.11, LangGraph's SQLite store implementation contains SQL injection vulnerabilities using direct string concatenation without proper parameterization,...

EUVD-2025-37154

Malicious code in epic-diesel-store npm...

Malicious code in store-std (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61d331f4d0ceded686ff7dab5f2329693385f0e0381a8c236d44c9234e24083a The package store-std was found to contain malicious code...

EUVD-2025-37053

Malicious code in store-std npm...

MAL-2025-49139 Malicious code in epic-diesel-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e78b8aba13bb757aeef3ad568a9abbf70b9237c97848f389d9fba463fe1b1f8a The package epic-diesel-store was found to contain malicious code...

EUVD-2025-37054

Malicious code in store-service-worker npm...

EUVD-2025-37052

Malicious code in store-webpack-config npm...

Malicious code in store-service-worker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96644928dc5cfc92d966ad6cbd2a16820b0ad6951971e35c226f31e2e594f687 The package store-service-worker was found to contain malicious code...

Malicious code in epic-diesel-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e78b8aba13bb757aeef3ad568a9abbf70b9237c97848f389d9fba463fe1b1f8a The package epic-diesel-store was found to contain malicious code...

Malicious code in store-webpack-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13f10add046b94b627520507423f73982964e7be0734c7b4909acee5710f1e7e The package store-webpack-config was found to contain malicious code...

MAL-2025-49241 Malicious code in store-webpack-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13f10add046b94b627520507423f73982964e7be0734c7b4909acee5710f1e7e The package store-webpack-config was found to contain malicious code...