Malicious code in helper-plugin-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 637e6aa11d35ac301a88fea209827ad1ebfe949fe5c2db4ffd66509975d13ef6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Vulnerabilities fixed in Oracle Fusion Middleware

Oracle has fixed multiple vulnerabilities in several products, including the Utilities Application Framework, WebLogic Server, and Fusion Middleware. The vulnerabilities allow unauthenticated malicious actors to gain access to critical data, cause denial-of-service DoS, and in some cases even gai...

Prototype Pollution

js-object-utilities is vulnerable to Prototype Pollution. The vulnerability is due to unsanitized property assignment due to the lib.set function allowing attackers to modify the global prototype chain using crafted payloads...

Malicious code in @cat-wc/utilities (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ac8c9db89562180d78f3b248882e95e33c0c24a2bc4ffdfd76b1029506f1393d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-32664

Cross-Site Request Forgery CSRF vulnerability in ashokbasnet Nepali Date Utilities nepali-date-utilities allows Stored XSS.This issue affects Nepali Date Utilities: from n/a through = 1.0.15...

[SECURITY] Fedora 42 Update: uboot-tools-2025.04-1.fc42

This package contains a few U-Boot utilities - mkimage for creating boot imag es and fwprintenv/fwsetenv for manipulating the boot environment variables...

CVE-2025-32664

Cross-Site Request Forgery CSRF vulnerability in ashokbasnet Nepali Date Utilities nepali-date-utilities allows Stored XSS.This issue affects Nepali Date Utilities: from n/a through = 1.0.15...

CVE-2025-32664 WordPress Nepali Date Utilities plugin <= 1.0.15 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in ashokbasnet Nepali Date Utilities nepali-date-utilities allows Stored XSS.This issue affects Nepali Date Utilities: from n/a through = 1.0.15...

CVE-2025-32664 WordPress Nepali Date Utilities plugin <= 1.0.15 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in ashokbasnet Nepali Date Utilities nepali-date-utilities allows Stored XSS.This issue affects Nepali Date Utilities: from n/a through = 1.0.15...

CVE-2025-32664

CVE-2025-32664: Nepali Date Utilities (WordPress plugin) contains a CSRF-triggered Stored XSS vulnerability affecting versions up to 1.0.13. The connected Wordfence vulnerability list indicates this entry is currently Unpatched. No exploit details or mitigation steps are provided in the supplied ...

WordPress Nepali Date Utilities plugin <= 1.0.15 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by Nguyen Thi Huyen Trang - Skalucy in WordPress Plugin Nepali Date Utilities versions = 1.0.15...

WordPress plugin Nepali Date Utilities 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

js-object-utilities Vulnerable to Prototype Pollution

Vulnerability type: Prototype Pollution Affected Package: Product: js-object-utilities Version: 2.2.0 Remedy: Update package to version 2.2.1. Vulnerability Locations: js at module.exports /nodemodules/js-object-utilities/dist/set.js:16:29 Description: The latest version of js-object-utilities...

GHSA-HPQF-M68J-2PFX js-object-utilities Vulnerable to Prototype Pollution

Vulnerability type: Prototype Pollution Affected Package: Product: js-object-utilities Version: 2.2.0 Remedy: Update package to version 2.2.1. Vulnerability Locations: js at module.exports /nodemodules/js-object-utilities/dist/set.js:16:29 Description: The latest version of js-object-utilities...

Important: Red Hat Security Advisory: Red Hat Ceph Storage 8.0 security, bug fix, and enhancement updates

An update is now available for Red Hat Ceph Storage 8.0. Red Hat Ceph Storage is a scalable, open, software-defined storage platform that combines the most stable version of the Ceph storage system with a Ceph management platform, deployment utilities, and support services. These new packages...

PT-2025-19349 · Npm · Js-Object-Utilities

Vulnerability type: Prototype Pollution Affected Package: Product: js-object-utilities Version: 2.2.0 Remedy: Update package to version 2.2.1. Vulnerability Locations: js at module.exports /node modules/js-object-utilities/dist/set.js:16:29 Description: The latest version of js-object-utilities...

CVE-2025-28269

creationtimestamp| type| source ---|---|--- 2025-04-06 18:13:23+00:00| published-proof-of-concept| https://github.com/rrainn/js-object-utilities/security/advisories/GHSA-hpqf-m68j-2pfx...

[SECURITY] Fedora 41 Update: ghostscript-10.03.1-5.fc41

This package provides useful conversion utilities based on Ghostscript softwa re, for converting PS, PDF and other document formats between each other. Ghostscript is a suite of software providing an interpreter for Adobe Systems' PostScript PS and Portable Document Format PDF page description...

USN-7414-1 xz-utils vulnerability

Harri K. Koskinen discovered that XZ Utils incorrectly handled the threaded xz decoder. If a user or automated system were tricked into processing an xz file, a remote attacker could use this issue to cause XZ Utils to crash, resulting in a denial of service, or possibly execute arbitrary code...

ALPINE-CVE-2025-31115

XZ Utils provide a general-purpose data-compression library plus command-line tools. In XZ Utils 5.3.3alpha to 5.8.0, the multithreaded .xz decoder in liblzma has a bug where invalid input can at least result in a crash. The effects include heap use after free and writing to an address based on t...