MAL-2025-47512 Malicious code in across-toolkit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9dcdfc6a9dc7db63bf70744266f75c8200349bb4332b36dbc8319caa1df15e31 The OpenSSF Package Analysis project identified 'across-toolkit' @ 9.0.1 npm as malicious. It is considered malicious because: - The package...

Security Bulletin: NVIDIA CUDA Toolkit - September 2025

NVIDIA has released a software update for NVIDIA® CUDA® Toolkit. To protect your system, download and install the latest release from the CUDA Toolkit Downloads page. Go to NVIDIA Product Security...

PT-2025-39117

Name of the Vulnerable Software and Affected Versions Asterisk toolkit affected versions not specified Description A local privilege escalation issue exists in the safe asterisk script. When Asterisk starts using this script, it executes all .sh files in the /etc/asterisk/startup.d/ directory as...

CVE-2025-57988

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Uncanny Owl Uncanny Toolkit for LearnDash uncanny-learndash-toolkit allows Stored XSS.This issue affects Uncanny Toolkit for LearnDash: from n/a through = 3.7.0.3...

WordPress Uncanny Toolkit for LearnDash Plugin <= 3.7.0.3 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by zaim in WordPress Plugin Uncanny Toolkit for LearnDash versions = 3.7.0.3...

CVE-2025-57988

CVE-2025-57988 relates to the Uncanny Toolkit for LearnDash. The vulnerability is a stored cross-site scripting flaw caused by improper neutralization of input during web page generation in the plugin. Affected software ranges to include Uncanny Toolkit for LearnDash versions up to 3.7.x (as refl...

CVE-2025-57988 WordPress Uncanny Toolkit for LearnDash Plugin <= 3.7.0.3 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Uncanny Owl Uncanny Toolkit for LearnDash uncanny-learndash-toolkit allows Stored XSS.This issue affects Uncanny Toolkit for LearnDash: from n/a through = 3.7.0.3...

CVE-2025-57988 WordPress Uncanny Toolkit for LearnDash Plugin <= 3.7.0.3 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Uncanny Owl Uncanny Toolkit for LearnDash uncanny-learndash-toolkit allows Stored XSS.This issue affects Uncanny Toolkit for LearnDash: from n/a through = 3.7.0.3...

PT-2025-39250

Name of the Vulnerable Software and Affected Versions NVIDIA CUDA Toolkit affected versions not specified Description The NVIDIA CUDA Toolkit contains a flaw within the nvdisasm binary. A user can trigger an out-of-bounds read condition by providing a specially crafted ELF file to the nvdisasm...

WordPress plugin Uncanny Toolkit for LearnDash 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

PT-2025-39248

Name of the Vulnerable Software and Affected Versions NVIDIA CUDA Toolkit affected versions not specified Description The NVIDIA CUDA Toolkit contains an issue in the nvdisasm binary. A user can trigger an out-of-bounds read by providing a specially crafted ELF file to nvdisasm. Exploitation of...

PT-2025-39256

Name of the Vulnerable Software and Affected Versions NVIDIA CUDA Toolkit affected versions not specified Description The NVIDIA CUDA Toolkit contains an issue in the nvdisasm component. A user could trigger an out-of-bounds write by running nvdisasm on a specially crafted ELF file. Exploitation...

PT-2025-39257

Name of the Vulnerable Software and Affected Versions NVIDIA CUDA Toolkit affected versions not specified Description The NVIDIA CUDA Toolkit contains an issue in the cuobjdump utility. An attacker can trigger a stack-based buffer overflow by causing a user to run cuobjdump on a specially crafted...

PT-2025-39258

Name of the Vulnerable Software and Affected Versions NVIDIA CUDA Toolkit affected versions not specified Description The NVIDIA CUDA Toolkit contains an issue within the nvdisasm binary. A user can potentially trigger an out-of-bounds read by providing a specially crafted ELF file to nvdisasm...

PT-2025-38838

Name of the Vulnerable Software and Affected Versions Uncanny Owl Uncanny Toolkit for LearnDash versions through 3.0.7.3 Description The software contains a flaw related to improper input handling during web page generation, which allows for Stored Cross-site Scripting XSS. This issue could...

WAFTest

This repository is an offensive tool for testing web application firewalls WAFs. It contains a collection of test cases and scripts to evaluate the effectiveness of WAFs against various types of attacks. The tool includes test cases for common web application vulnerabilities such as: Command...

Acacium-PostEx-Toolkit

Acacium Automated Post-Exploitation & Lateral Movement Toolkit...

SUSE CVE-2025-58767

REXML is an XML toolkit for Ruby. The REXML gems from 3.3.3 to 3.4.1 has a DoS vulnerability when parsing XML containing multiple XML declarations. If you need to parse untrusted XMLs, you may be impacted to these vulnerabilities. The REXML gem 3.4.2 or later include the patches to fix these...

CVE-2025-22872 affecting package nvidia-container-toolkit for versions less than 1.17.8-2

CVE-2025-22872 affecting package nvidia-container-toolkit for versions less than 1.17.8-2. A patched version of the package is available...

Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')

Overview rexml is an An XML toolkit for Ruby. Affected versions of this package are vulnerable to Improper Restriction of Recursive Entity References in DTDs 'XML Entity Expansion' due to parsing XML. An attacker can cause excessive resource consumption and disrupt service availability by...