PT-2025-29165

Name of the Vulnerable Software and Affected Versions Tenda O3V2 version 1.0.0.123880 Description A critical issue exists in Tenda O3V2 version 1.0.0.123880. The fromNetToolGet function within the /goform/setPingInfo file of the httpd component is susceptible to operating system command injection...

openSUSE Security Advisory (SUSE-SU-2025:02168-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MAL-2025-5520 Malicious code in stylelint-recommended-conf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7140ae1a4cb350ca4bafc3879dbea50e300d52d841b5334bcb2f297713a4cc5a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5487 Malicious code in @verrylinh/discord (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4318dae373846eedd4a261b1261f3bd9b820a4a0ce74f9e3adac51d403204428 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-38088

In the Linux kernel, the following vulnerability has been resolved: powerpc/powernv/memtrace: Fix out of bounds issue in memtrace mmap memtrace mmap issue has an out of bounds issue. This patch fixes the by checking that the requested mapping region size should stay within the allocated region si...

CVE-2025-53256

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in YayCommerce YaySMTP yaysmtp allows SQL Injection.This issue affects YaySMTP: from n/a through = 2.6.6...

CLSA-2025-1751143797 sssd: Fix of CVE-2023-3758

CVE-2023-3758: fix race condition in adgpo...

SUSE SLED15 / SLES15 Security Update : xorg-x11-server (SUSE-SU-2025:01981-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:01981-1 advisory. - CVE-2025-49175: Out-of-bounds access in X Rendering extension Animated cursors bsc1244082. - CVE-2025-49176...

Ubuntu: Security Advisory (USN-7602-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MAL-2025-5472 Malicious code in utils-component (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b2915f8670a8badcf10c91c6f4495435134004b4394050fd25077ced85b2176f Any computer that has this package installed or running should be considered...

Important Photon OS Security Update - PHSA-2025-5.0-0540

Updates of 'linux-esx', 'linux' packages of Photon OS have been released...

Ubuntu 22.04 LTS : Linux kernel (Xilinx ZynqMP) vulnerabilities (USN-7602-1)

The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7602-1 advisory. Michael Randrianantenaina discovered that the Bluetooth driver in the Linux Kernel contained an improper access control vulnerability. A nearby attacker...

SUSE-SU-2025:02116-1 Security update for the Linux Kernel (Live Patch 4 for SLE 15 SP6)

This update for the Linux Kernel 6.4.0-1506002322 fixes several issues. The following security issues were fixed: - CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inetcreate bsc1235231. - CVE-2024-50279: dm cache: fix out-of-bounds access to the dirty bitset when resizing...

USN-7591-2: Linux kernel (FIPS) vulnerabilities

Michael Randrianantenaina discovered that the Bluetooth driver in the Linux Kernel contained an improper access control vulnerability. A nearby attacker could use this to connect a rougue device and possibly execute arbitrary code. CVE-2024-8805 It was discovered that the CIFS network file system...

PHPGurukul Online DJ Booking Management System 安全漏洞

Online DJ Booking Management System is an online DJ booking management system. Online DJ Booking Management System suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in odms/admin/view-user-queries.php, which can be...

CVE-2023-47297

A settings manipulation vulnerability in NCR Terminal Handler v1.5.1 allows attackers to execute arbitrary commands, including editing system security auditing configurations...

[SECURITY] Fedora 42 Update: pam-1.7.0-6.fc42

PAM Pluggable Authentication Modules is a system security tool that allows system administrators to set authentication policy without having to recompile programs that handle authentication...

MAL-2025-5200 Malicious code in postcss-layout-grid (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 462502060afb8b130fe73ec2cf8940f9cc7e7d86e3a70ad48606a6b1b4484231 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Security Bulletin: Vulnerability in jetty-server affects IBM Cloud Pak for Data System 2.0 (CPDS 2.0) [CVE-2024-6763, CVE-2024-8184]

Summary The jetty-server package is used by IBM Cloud Pak for Data System 2.0 . IBM Cloud Pak for Data System 2.0 has addressed the applicable CVEs CVE-2024-6763, CVE-2024-8184 Vulnerability Details CVEID:CVE-2024-6763 DESCRIPTION: Eclipse Jetty is a lightweight, highly scalable, Java-based web...

MAL-2025-5169 Malicious code in topomat.controls.ctrlmaster (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f70236b8a23bd596788f7726490e4ac44c5cbcacf88bda2b8adeda33486c14d7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...