PT-2025-8390 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.18.0-rc5-syzkaller-01392-g01f4685797a5 Description: A vulnerability in the Linux kernel has been resolved. The issue was related to the removal of the rcu read lock in the bond ethtool get ts info function,...

MAL-2025-1381 Malicious code in ts-plugin-file-path-support (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a29c99a3decf55fe58b9d10ce858b903ae55f7d999f98549a8416b4c12352e65 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

@sap/adp-abap (1.1.37), @sap/adp-cf (1.1.37) +8 more potentially affected by CVE-2025-24876 via @sap/approuter (>=2.6.1, <=15.0.0)

@sap/approuter NPM version =2.6.1, =1.1.36, =1.9.6, =3.4.0, =0.1.0, =3.3.11 Source cves: CVE-2025-24876 Source advisory: MEND:CVE-2025-24876...

CVE-2025-22345

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in tsinf TS Comfort DB ts-comfort-database allows Reflected XSS.This issue affects TS Comfort DB: from n/a through = 2.0.7...

CVE-2022-24802

deepmerge-ts is a typescript library providing functionality to deep merging of javascript objects. deepmerge-ts is vulnerable to Prototype Pollution via file deepmerge.ts, function defaultMergeRecords. This issue has been patched in version 4.0.2. There are no known workarounds for this issue...

COMPOP security vulnerability

COMPOP is an all-in-one point-of-sale POS software from COMPOP, Inc. A security vulnerability exists in COMPOP that can be exploited to execute arbitrary code by manipulating the rid, tid, et, and ts parameters...

CVE-2024-48445: Improper Authentication

An issue in compop.ca ONLINE MALL v.3.5.3 allows a remote attacker to execute arbitrary code via the rid, tid, et, and ts parameters...

Malicious code in bloomr-ts (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 76cdde3ae6c9937d627a631cbc983d91ed46038b8b046d70da1b3cb38b20e723 Any computer that has this package installed or running should be considered...

MAL-2025-1024 Malicious code in bloomr-ts (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 76cdde3ae6c9937d627a631cbc983d91ed46038b8b046d70da1b3cb38b20e723 Any computer that has this package installed or running should be considered...

MAL-2025-878 Malicious code in ts-parsec-repo (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in gateway-eth-ts (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b62b42384dda97a32401608b1d3852453885ac3bdcec2ecf4bc6a09299b4d8c7 Any computer that has this package installed or running should be considered...

UBUNTU-CVE-2024-57184

An issue was discovered in GPAC v0.8.0, as demonstrated by MP4Box. It contains a heap-based buffer overflow in gfm2tsprocesspmt in mediatools/mpegts.c:2163 that can cause a denial of service DOS via a crafted MP4 file...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the at91tsregister function that under certain circumstances may call inputfreedevice when iiodev is not...

WordPress ts-tree plugin <= 0.1.1 - Arbitrary Content Deletion vulnerability

Arbitrary Content Deletion vulnerability discovered by Mika in WordPress Plugin ts-tree versions = 0.1.1...

DEBIAN-CVE-2024-57659

An issue in the sqlgparalleltsseq component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

UBUNTU-CVE-2024-57659

An issue in the sqlgparalleltsseq component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

CVE-2025-22345

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in tsinf TS Comfort DB ts-comfort-database allows Reflected XSS.This issue affects TS Comfort DB: from n/a through = 2.0.7...

CVE-2025-22345 WordPress TS Comfort DB plugin <= 2.0.7 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in tsinf TS Comfort DB ts-comfort-database allows Reflected XSS.This issue affects TS Comfort DB: from n/a through = 2.0.7...

CVE-2025-22345

CVE-2025-22345 pertains to the TS Comfort DB WordPress plugin. The connected CIRCL entry documents a Reflected Cross-Site Scripting (XSS) vulnerability in TS Comfort DB versions up to and including 2.0.7, arising from improper input neutralization during web page generation. The Red Hat advisory ...

CVE-2025-22345 WordPress TS Comfort DB plugin <= 2.0.7 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in tsinf TS Comfort DB ts-comfort-database allows Reflected XSS.This issue affects TS Comfort DB: from n/a through = 2.0.7...