Malicious code in my-team-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcebd381b163f06c896e93c9023d91db384265cd9da67f09ff1c85bd04ea70ed The package my-team-tools was found to contain malicious code. Source: ghsa-malware 320c0e93b25457bec2acf55515716007170fdce9a83295b33dc1f7c017a1f18c...

MAL-2025-49316 Malicious code in my-team-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcebd381b163f06c896e93c9023d91db384265cd9da67f09ff1c85bd04ea70ed The package my-team-tools was found to contain malicious code. Source: ghsa-malware 320c0e93b25457bec2acf55515716007170fdce9a83295b33dc1f7c017a1f18c...

CVE-2025-12090: Improper Neutralization of Input During Web Page Generation

The Employee Spotlight – Team Member Showcase & Meet the Team Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Social URLs in all versions up to, and including, 5.1.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

PT-2025-44712

Name of the Vulnerable Software and Affected Versions Employee Spotlight – Team Member Showcase & Meet the Team Plugin versions prior to 5.1.3 Description The Employee Spotlight – Team Member Showcase & Meet the Team Plugin for WordPress is susceptible to Stored Cross-Site Scripting through Socia...

Ubuntu 16.04 LTS / 18.04 LTS : Linux kernel vulnerabilities (USN-7853-1)

"The remote Ubuntu 16.04 LTS / 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7853-1 advisory. Jean-Claude Graf, Sandro Regge, Ali Hajiabadi, and Kaveh Razavi discovered that the Linux kernel contained insufficient branch predictor...

USN-7853-2: Linux kernel (FIPS) vulnerabilities

Jean-Claude Graf, Sandro Rüegge, Ali Hajiabadi, and Kaveh Razavi discovered that the Linux kernel contained insufficient branch predictor isolation between a guest and a userspace hypervisor for certain processors. This flaw is known as VMSCAPE. An attacker in a guest VM could possibly use this t...

USN-7854-1: Linux kernel (KVM) vulnerabilities

Jean-Claude Graf, Sandro Rüegge, Ali Hajiabadi, and Kaveh Razavi discovered that the Linux kernel contained insufficient branch predictor isolation between a guest and a userspace hypervisor for certain processors. This flaw is known as VMSCAPE. An attacker in a guest VM could possibly use this t...

USN-7853-1: Linux kernel vulnerabilities

Jean-Claude Graf, Sandro Rüegge, Ali Hajiabadi, and Kaveh Razavi discovered that the Linux kernel contained insufficient branch predictor isolation between a guest and a userspace hypervisor for certain processors. This flaw is known as VMSCAPE. An attacker in a guest VM could possibly use this t...

USN-7853-1 linux, linux-aws, linux-aws-hwe, linux-gcp, linux-gcp-4.15, linux-hwe, linux-oracle vulnerabilities

Jean-Claude Graf, Sandro Rüegge, Ali Hajiabadi, and Kaveh Razavi discovered that the Linux kernel contained insufficient branch predictor isolation between a guest and a userspace hypervisor for certain processors. This flaw is known as VMSCAPE. An attacker in a guest VM could possibly use this t...

GO-2025-4063 Mattermost Server exposes account details to any Team Administrator in github.com/mattermost/mattermost-server

Mattermost Server exposes account details to any Team Administrator in github.com/mattermost/mattermost-server...

GO-2025-4061 Mattermost Server exposes sensitive information about team URLs via an API in github.com/mattermost/mattermost-server

Mattermost Server exposes sensitive information about team URLs via an API in github.com/mattermost/mattermost-server. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive...

CVE-2025-64219

Missing Authorization vulnerability in Strategy11 Team Business Directory business-directory-plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Business Directory: from n/a through = 6.4.18...

PT-2025-45861

Mattermost Server exposes sensitive information about team URLs via an API in github.com/mattermost/mattermost-server. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive...

PT-2025-45863

Mattermost Server exposes account details to any Team Administrator in github.com/mattermost/mattermost-server...

EUVD-2025-36617

Missing Authorization vulnerability in Strategy11 Team Business Directory business-directory-plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Business Directory: from n/a through = 6.4.18...

CVE-2025-64219

CVE-2025-64219 is a Missing Authorization / Broken Access Control vulnerability affecting the WordPress Business Directory plugin (Strategy11 Team Business Directory) versiones up to and including 6.4.18. The Red Hat and ENISA/ENISA-ENISA-aligned entries confirm a vulnerability where access contr...

CVE-2025-64219: Missing Authorization

Missing Authorization vulnerability in Strategy11 Team Business Directory business-directory-plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Business Directory: from n/a through = 6.4.18...

PT-2025-44254

Name of the Vulnerable Software and Affected Versions Business Directory versions through 6.4.18 Description A missing authorization issue exists in Strategy11 Team Business Directory business-directory-plugin. This allows exploitation due to incorrectly configured access control security levels...

Jira Align Authorization Bypass

The vulnerability of the cloud-based corporate solution for planning and managing software and IT projects like Jira Align formerly AgileCraft is related to deficiencies in the authorization process during the execution of the “Generate Team Sprints” action. Exploiting this vulnerability could...

Jira Align Authorization Bypass

The vulnerability of the cloud-based corporate solution for planning and managing software and IT projects like Jira Align formerly AgileCraft is related to deficiencies in the authorization process when performing the Team Overview action. Exploiting this vulnerability could allow a malicious...