PT-2025-20511

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A issue in the Linux kernel has been identified where the task management thread accesses an invalid queue ID, set by the reset thread, which points to unallocated memory, causing a cras...

WordPress Woocommerce osCommerce Sync plugin <= 2.0.20 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by 0xd4rk5id3 in WordPress Plugin Woocommerce osCommerce Sync versions = 2.0.20...

CVE-2025-23216

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. A vulnerability was discovered in Argo CD that exposed secret values in error messages and the diff view when an invalid Kubernetes Secret resource was synced from a repository. The vulnerability assumes the user has write...

CVE-2025-23216: Generation of Error Message Containing Sensitive Information

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. A vulnerability was discovered in Argo CD that exposed secret values in error messages and the diff view when an invalid Kubernetes Secret resource was synced from a repository. The vulnerability assumes the user has write...

Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync

...

com.alibaba.alink:alink_connectors_hive_flink-1.10_2.11 (>=1.1.2, <=1.2.0), com.alibaba.alink:alink_connectors_hive_flink-1.11_2.11 (1.2.0) +26 more potentially affected by CVE-2024-29869 via org.apache.hive:hive-exec (2.3.4)

org.apache.hive:hive-exec MAVEN version 2.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hive:hive-exec and may be impacted: - com.alibaba.alink:alinkconnectorshiveflink-1.102.11 =1.1.2, =1.1.2, =1.3.0, =1.3.0, =1.3.1, =1.4.0,...

Malicious code in meli-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 793bfcfb95a79b8cd268833db69c5dc0bc95766ce7acef8947614e19d8e27afc The OpenSSF Package Analysis project identified 'meli-sync' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-564 Malicious code in meli-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 793bfcfb95a79b8cd268833db69c5dc0bc95766ce7acef8947614e19d8e27afc The OpenSSF Package Analysis project identified 'meli-sync' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in lyft-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bad08278af65d859072402dbc935300d4c8d6036f2f214644533c0af1b8f7b8e The OpenSSF Package Analysis project identified 'lyft-sync' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-539 Malicious code in lyft-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bad08278af65d859072402dbc935300d4c8d6036f2f214644533c0af1b8f7b8e The OpenSSF Package Analysis project identified 'lyft-sync' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in iberia-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3fa775f2b41624be8acd4b8b6be1dc827dc0012574f46c5baf62b0f4aeaa3440 The OpenSSF Package Analysis project identified 'iberia-sync' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-495 Malicious code in iberia-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3fa775f2b41624be8acd4b8b6be1dc827dc0012574f46c5baf62b0f4aeaa3440 The OpenSSF Package Analysis project identified 'iberia-sync' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in godaddy-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b27118be6531dda0274adb6114723c46d2c88efc9b6d648d2046baf78e396e9c The OpenSSF Package Analysis project identified 'godaddy-sync' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-472 Malicious code in godaddy-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b27118be6531dda0274adb6114723c46d2c88efc9b6d648d2046baf78e396e9c The OpenSSF Package Analysis project identified 'godaddy-sync' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in bookingcom-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6cc8ed36dec16e2f62b3d8b194b72fc8ae1702f19cd3f9bdb9ff1de3ab7d02b9 The OpenSSF Package Analysis project identified 'bookingcom-sync' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-407 Malicious code in bookingcom-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6cc8ed36dec16e2f62b3d8b194b72fc8ae1702f19cd3f9bdb9ff1de3ab7d02b9 The OpenSSF Package Analysis project identified 'bookingcom-sync' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in coinbase-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e6b9af30ce8eff229a63be6c3023ee9eae0d2049c07a5f214b91746c58a5865e The OpenSSF Package Analysis project identified 'coinbase-sync' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-424 Malicious code in coinbase-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e6b9af30ce8eff229a63be6c3023ee9eae0d2049c07a5f214b91746c58a5865e The OpenSSF Package Analysis project identified 'coinbase-sync' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

CVE-2025-24652: Missing Authorization

Missing Authorization vulnerability in revmakx WP Duplicate local-sync allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Duplicate: from n/a through = 1.1.6...

CVE-2025-23486

Missing Authorization vulnerability in tamlyn Database Sync database-sync allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Database Sync: from n/a through = 0.5.1...