OESA-2025-2756 containerd security update

containerd is an industry-standard container runtime with an emphasis on simplicity, robustness and portability. It is available as a daemon for Linux and Windows, which can manage the complete container lifecycle of its host system: image transfer and storage, container execution and supervision...

EUVD-2005-4770

Malware in sbrugna...

EUVD-2018-12066

Malware in sbrugna...

EUVD-2020-27449

Malware in sbrugna...

EUVD-2024-17673

Malicious code in bioql PyPI...

EUVD-2024-44268

Malicious code in bioql PyPI...

EUVD-2022-4428

Malicious code in bioql PyPI...

EUVD-2025-23784

Malicious code in bioql PyPI...

EUVD-2024-49748

Malicious code in bioql PyPI...

EUVD-2025-13656

Malicious code in bioql PyPI...

EUVD-2022-34344

Malicious code in bioql PyPI...

EUVD-2024-51667

Malicious code in bioql PyPI...

CVE-2025-3227

Mattermost versions 10.5.x = 10.5.5, 9.11.x = 9.11.15, 10.8.x = 10.8.0, 10.7.x = 10.7.2, 10.6.x = 10.6.5 fail to properly enforce channel member management permissions in playbook runs, allowing authenticated users without the 'Manage Channel Members' permission to add or remove users from public...

CVE-2024-1172

The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Accordion widget in all versions up to, and including, 5.9.8 due to insufficient input sanitization and output...

CVE-2023-2759

A hidden API exists in TapHome's core platform before version 2023.2 that allows an authenticated, low privileged user to change passwords of other users without any prior knowledge. The attacker may gain full access to the device by using this vulnerability...

CVE-2022-41732

IBM Maximo Mobile 8.7 and 8.8 stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 237407...

PT-2025-24437 · Unknown · Laravel Translation Manager

Name of the Vulnerable Software and Affected Versions: Laravel Translation Manager versions prior to 0.6.8 Description: The application is vulnerable to Cross-Site Scripting XSS attacks due to incorrect input validation and sanitization of user-input data. An attacker can inject arbitrary HTML...

IBM Security Verify Governance Cross-Site Scripting Vulnerability (CNVD-2025-09286)

IBM Security Verify Governance is an intelligent identity access platform from International Business Machines IBM, Inc. provides organizations with a platform to analyze, define and control user access and access risk. A cross-site scripting vulnerability exists in IBM Security Verify Governance...

CVE-2024-6432

The Content Blocks Custom Post Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘content’ parameter within the plugin's shortcode Content Block in all versions up to, and including, 3.3.5 due to insufficient input sanitization and output escaping. This makes it...

DEBIAN-CVE-2023-22497

Netdata is an open source option for real-time infrastructure monitoring and troubleshooting. Each Netdata Agent has an automatically generated MACHINE GUID. It is generated when the agent first starts and it is saved to disk, so that it will persist across restarts and reboots. Anyone who has...