CVE-2025-20050

Uncontrolled search path for some IntelR CIP software before version WINDCA2.4.0.11001 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable local code execution. This...

CVE-2025-20010

CVE-2025-20010 affects Intel\u00ae Processor Identification Utility prior to version 8.0.43. The issue arises from use of unmaintained third-party components, enabling local privilege escalation by an authenticated user with low attack complexity. Reported impacts are high for confidentiality, in...

CVE-2025-20010

Use of unmaintained third party components for some IntelR Processor Identification Utility before version 8.0.43 within Ring 3: User Applications may allow an escalation of privilege. System software adversary with an authenticated user combined with a low complexity attack may enable escalation...

CVE-2024-57695

An issue in Agnitum Outpost Security Suite 7.5.3 3942.608.1810 and 7.6 3984.693.1842 allows a local attacker to execute arbitrary code via the lock function. The manufacturer fixed the vulnerability in version 8.0 4164.652.1856 from December 17, 2012...

CVE-2025-8324

creationtimestamp| type| source ---|---|--- 2025-11-11 13:37:23+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5eaxeqpzix2 2025-11-11 13:48:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5ebo5dfn72s 2025-11-11 14:06:19+00:00| seen|...

CVE-2025-41104

Summary: CVE-2025-41104 is an HTML injection vulnerability in Fairsketch’s RISE CRM Framework v3.8.1. The issue stems from insufficient validation of user input in the POST parameter custom_field_1 at /estimate_requests/save_estimate_request, enabling HTML injection. Affected software: Fairsketch...

EUVD-2025-74400

Malicious code in optimisticcephalopodemerald-83 npm...

Malicious code in chronic_koi_lavender-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6babac4db933f86c80f65fc6738edc75578dad9b1f32c6a6a37fc3a0478fd570 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in efficient_tiger_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 351d9695c2593a196c3af78af3a1dc0ada0dbf455eebbe370726227c075e8816 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-60935

The Preload Current Images plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'complete' parameter in the 'preloadprogressbar' shortcode in all versions up to, and including, 1.3. This is due to insufficient input sanitization and output escaping on user supplied attributes...

MAL-2025-94598 Malicious code in frantic_piranha_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e386713b13a89290f1e0209416247fe29efbdd145410e2b4d7eff3ed838cf63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-11451

The Auto Amazon Links – Amazon Associates Affiliate Plugin plugin for WordPress is vulnerable to arbitrary files reads in all versions up to, and including, 5.4.3 via the '/wp-json/wp/v2/aalajaxunitloading' RST API endpoint. This makes it possible for unauthenticated attackers to read the content...

CVE-2025-12927

A security vulnerability has been detected in DedeBIZ up to 6.3.2. The impacted element is an unknown function of the file /admin/archivesadd.php. Such manipulation of the argument flags leads to sql injection. The attack can be executed remotely. The exploit has been disclosed publicly and may b...

CVE-2025-12658 Preload Current Images <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

The Preload Current Images plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'complete' parameter in the 'preloadprogressbar' shortcode in all versions up to, and including, 1.3. This is due to insufficient input sanitization and output escaping on user supplied attributes...

CVE-2025-11451 Auto Amazon Links – Amazon Associates Affiliate Plugin <= 5.4.3 - Unauthenticated Arbitrary File Read

The Auto Amazon Links – Amazon Associates Affiliate Plugin plugin for WordPress is vulnerable to arbitrary files reads in all versions up to, and including, 5.4.3 via the '/wp-json/wp/v2/aalajaxunitloading' RST API endpoint. This makes it possible for unauthenticated attackers to read the content...

CVE-2025-11451 Auto Amazon Links – Amazon Associates Affiliate Plugin <= 5.4.3 - Unauthenticated Arbitrary File Read

The Auto Amazon Links – Amazon Associates Affiliate Plugin plugin for WordPress is vulnerable to arbitrary files reads in all versions up to, and including, 5.4.3 via the '/wp-json/wp/v2/aalajaxunitloading' RST API endpoint. This makes it possible for unauthenticated attackers to read the content...

MAL-2025-75920 Malicious code in utomo-mieaceh3-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 942b85c52f1a778654bc09eaa6efb55cf86b87e92e1e6564c16779d95d29e1ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

[SECURITY] Fedora 43 Update: cef-141.0.11^chromium141.0.7390.122-1.fc43

CEF is an embeddable build of Chromium, powered by WebKit Blink...

EUVD-2025-56094

Malicious code in 3scnd npm...

PT-2025-46386

Name of the Vulnerable Software and Affected Versions IntelR CIP software versions prior to WIN DCA 2.4.0.11001 Description An improper access control issue exists in some IntelR CIP software. This may allow an information disclosure when running within Ring 3 User Applications. An unprivileged...