PT-2026-2510

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the Btrfs file system related to handling directory moves during transactions. Specifically, the system may incorrectly log inode information when...

MAL-2025-191127 Malicious code in m25-transaction-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e91218f5eaff53a78f8a4c20f4090ee4c99958d5784c54a3ee2280d00658643 The package m25-transaction-utils was found to contain malicious code. Source: ghsa-malware...

Malicious code in m25-transaction-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e91218f5eaff53a78f8a4c20f4090ee4c99958d5784c54a3ee2280d00658643 The package m25-transaction-utils was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-199123

Malicious code in m25-transaction-utils npm...

PT-2025-47529

Name of the Vulnerable Software and Affected Versions Campcodes Retro Basketball Shoes Online Store version 1.0 Description A SQL injection issue exists in Campcodes Retro Basketball Shoes Online Store version 1.0. The issue is related to the manipulation of the tid argument in the...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-42077)

ocfs2: DIO failure due to insufficient transaction credits. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504618; scriptversion"1.3";...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990919)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990919 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: adapt set backend to use GC transaction API Use the GC transaction API to...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990892)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990892 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: fix a NULL pointer dereference when failed to start a new trasacntion BUG Syzbot reported ...

CVE-2025-11271

The Easy Digital Downloads plugin for WordPress is vulnerable to Order Manipulation in all versions up to, and including, 3.5.2 due to an order verification bypass. The verification is unconditionally skipped when the POST body includes verificationoverride=1. Because this value is...

CVE-2025-11271

The Easy Digital Downloads plugin for WordPress is vulnerable to Order Manipulation in all versions up to, and including, 3.5.2 due to an order verification bypass. The verification is unconditionally skipped when the POST body includes verificationoverride=1. Because this value is...

CVE-2025-11271 Easy Digital Download <= 3.5.2 - Insufficient Verification to Order Manipulation

The Easy Digital Downloads plugin for WordPress is vulnerable to Order Manipulation in all versions up to, and including, 3.5.2 due to an order verification bypass. The verification is unconditionally skipped when the POST body includes verificationoverride=1. Because this value is...

CVE-2025-11271 Easy Digital Download <= 3.5.2 - Insufficient Verification to Order Manipulation

The Easy Digital Downloads plugin for WordPress is vulnerable to Order Manipulation in all versions up to, and including, 3.5.2 due to an order verification bypass. The verification is unconditionally skipped when the POST body includes verificationoverride=1. Because this value is...

CVE-2025-11271 Easy Digital Download <= 3.5.2 - Insufficient Verification to Order Manipulation

The Easy Digital Downloads plugin for WordPress is vulnerable to Order Manipulation in all versions up to, and including, 3.5.2 due to an order verification bypass. The verification is unconditionally skipped when the POST body includes verificationoverride=1. Because this value is...

CVE-2025-11271

The CVE-2025-11271 entry concerns WordPress Easy Digital Downloads (EDD) plugin versions up to and including 3.5.2. The vulnerability is an order verification bypass: the POST parameter verification_override=1 causes the verification check to be skipped unconditionally, enabling an attacker to su...

PT-2025-45174

Name of the Vulnerable Software and Affected Versions Easy Digital Downloads versions up to and including 3.5.2 Description The Easy Digital Downloads plugin for WordPress has a flaw that allows manipulation of orders. This is due to a bypass in order verification, which occurs when the...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990434)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990434 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire-lib: fix uninitialized flag for AV/C deferred transaction AV/C deferred transactio...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989489)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989489 advisory. In the Linux kernel, the following vulnerability has been resolved: nfc: st21nfca: fix memory leaks in EVTTRANSACTION handling Error paths do not free previously...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989201)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989201 advisory. In the Linux kernel, the following vulnerability has been resolved: i2c: mlxbf: prevent stack overflow in mlxbfi2csmbusstarttransaction memcpy is called in a loop...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989318)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989318 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: memleak flow rule from commit path Abort path release flow rule object,...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989606)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989606 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: fix deadlock between quota disable and qgroup rescan worker Quota disable ioctl starts a...