RockyLinux 10 : kernel (RLSA-2025:20095)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:20095 advisory. kernel: xen: Xen hypercall page unsafe against speculative attacks Xen Security Advisory 466 CVE-2024-53241 kernel: exfat: fix out-of-bounds access of...

CLSA-2025-1764688338 gstreamer1-plugins-good: Fix of CVE-2024-47537

CVE-2024-47537: qtdemux: fix integer overflow when allocating the samples table for fragmented MP4...

phpIPAM 1.5.1 - SQL Injection

Exploit Title: phpIPAM 1.5.1 - SQL Injection Date: 2025-11-25 Exploit Author: CodeSecLab Vendor Homepage: https://github.com/phpipam/phpipam/ Software Link: https://github.com/phpipam/phpipam/ Version: 1.5.1 Tested on: Windows CVE : CVE-2023-1211 Proof Of Concept POST...

Exploit for OS Command Injection in Postgresql

usage: CVE-2019-9193.py -h -i IP -p PORT -d DATABASE...

PT-2025-51676

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel’s ksmbd module contains a use-after-free issue within the ipc msg send request function. Specifically, the function waits for a generic netlink reply using an ipc msg...

SUSE-SU-2025:4301-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 RT kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-38008: mm/pagealloc: fix race condition in unaccepted memory handling bsc1244939. - CVE-2025-38539: trace/fgraph: Fix the warning caused by missing unregister...

Cross-Site Scripting (XSS)

qwc2 is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to improper handling of user-supplied input in the attribute table, which allows an authorized attacker to inject and execute arbitrary JavaScript code...

CVE-2025-56401

ZIRA Group WBRM 7.0 is vulnerable to SQL Injection in referenceLookupsByTableNameAndColumnName...

Malicious code in @lessondesk/react-table-context (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20317dcad4fb59dc30bb24ed5e1305a81ca00e753ffb0432f71dd107636d0516 The package @lessondesk/react-table-context was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-199174

Malicious code in @lessondesk/react-table-context npm...

MAL-2025-191031 Malicious code in @lessondesk/react-table-context (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20317dcad4fb59dc30bb24ed5e1305a81ca00e753ffb0432f71dd107636d0516 The package @lessondesk/react-table-context was found to contain malicious code. Source: ghsa-malware...

Malware in @lessondesk/react-table-context

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

CVE-2025-12800

The WP Shortcodes Plugin — Shortcodes Ultimate plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 7.4.5 via the sushortcodecsvtable function. This makes it possible for authenticated attackers, with Administrator-level access and above, to make...

EUVD-2025-199056

Malicious code in prime-one-table npm...

Malware in prime-one-table

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in prime-one-table (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 686403bdb86cae7a644dd5bb861eacb91b0437d25b0cf1c367e04ab8a411cebe The package prime-one-table was found to contain malicious code. Source: ghsa-malware 637ced514205a8512ba9f365d6f93fbcbd2d45e2144a5cc076c4d14187da317...

Malicious code in tanstack-shadcn-table (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd82454ff234aa46b67b1813010ca3e7c45defc2172690c8c94fc74e2e09f6dc The package tanstack-shadcn-table was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-199025

Malicious code in tanstack-shadcn-table npm...

MAL-2025-191018 Malicious code in tanstack-shadcn-table (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd82454ff234aa46b67b1813010ca3e7c45defc2172690c8c94fc74e2e09f6dc The package tanstack-shadcn-table was found to contain malicious code. Source: ghsa-malware...

Malware in tanstack-shadcn-table

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...