PT-2025-20150 · Xylus Themes · Xylus Themes Xt Event Widget For Social Events

Name of the Vulnerable Software and Affected Versions: Xylus Themes XT Event Widget for Social Events versions 1.1.7 and earlier Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion' or PHP Loca...

SUSE CVE-2024-58094

In the Linux kernel, the following vulnerability has been resolved: jfs: add check read-only before truncation in jfstruncatenolock Added a check for "read-only" mode in the jfstruncatenolock function to avoid errors related to writing to a read-only filesystem. Call stack: blockwritebegin...

SUSE CVE-2025-21956

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Assign normalizedpixclk when color depth = 14 WHY & HOW A warning message "WARNING: CPU: 4 PID: 459 at ... /dcresource.c:3397 calculatephypixclks+0xef/0x100 amdgpu" occurs because the displaycolordepth ==...

CVE-2025-21956

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Assign normalizedpixclk when color depth = 14 WHY & HOW A warning message "WARNING: CPU: 4 PID: 459 at ... /dcresource.c:3397 calculatephypixclks+0xef/0x100 amdgpu" occurs because the displaycolordepth ==...

CVE-2025-21956

CVE-2025-21956 : In the Linux kernel, drm/amd/display incorrectly handled color depth 14, triggering a warning in amdgpu when running on Radeon RX 6600 XT. The issue is resolved by assigning the pixel clock as pix_clk * (14 * 3) / 24, aligning with other color depths, and also fixes indentation i...

CVE-2025-21956 drm/amd/display: Assign normalized_pix_clk when color depth = 14

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Assign normalizedpixclk when color depth = 14 WHY & HOW A warning message "WARNING: CPU: 4 PID: 459 at ... /dcresource.c:3397 calculatephypixclks+0xef/0x100 amdgpu" occurs because the displaycolordepth ==...

CVE-2025-21956 drm/amd/display: Assign normalized_pix_clk when color depth = 14

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Assign normalizedpixclk when color depth = 14 WHY & HOW A warning message "WARNING: CPU: 4 PID: 459 at ... /dcresource.c:3397 calculatephypixclks+0xef/0x100 amdgpu" occurs because the displaycolordepth ==...

Malicious code in xt-internal (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7fed00145b4a626337b346006d12cb2cae629e16ec57d24bb94c191ccd5823c9 Any computer that has this package install...

MAL-2025-1282 Malicious code in xt-dev (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 888d6cec6842a849e2ec069a734943936ab4dcd497fb6dd9e81760860817728e Any computer that has this package install...

MAL-2025-1283 Malicious code in xt-internal (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7fed00145b4a626337b346006d12cb2cae629e16ec57d24bb94c191ccd5823c9 Any computer that has this package install...

MAL-2025-1284 Malicious code in xt-main (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4620b4c964cef23c75cd0562eabb2ff4b07f79eaf1dc268af62da2dcf99ee307 Any computer that has this package install...

Malicious code in xt-main (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4620b4c964cef23c75cd0562eabb2ff4b07f79eaf1dc268af62da2dcf99ee307 Any computer that has this package install...

Malicious code in xt-dev (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 888d6cec6842a849e2ec069a734943936ab4dcd497fb6dd9e81760860817728e Any computer that has this package install...

PT-2024-36026 · Parasolid · Parasolid

Name of the Vulnerable Software and Affected Versions: Parasolid versions prior to V36.1.225 Parasolid versions prior to V37.0.173 Parasolid versions prior to V37.1.1 Description: A vulnerability has been identified in the affected application, which contains an out of bounds write past the end o...

CVE-2024-9178

The XT Floating Cart for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 2.8.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level...

CVE-2024-9178

The XT Floating Cart for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 2.8.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level...

CVE-2024-9178 XT Floating Cart for WooCommerce <= 2.8.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload

The XT Floating Cart for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 2.8.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level...

PT-2024-39474 · WordPress · Xt Floating Cart For Woocommerce

Name of the Vulnerable Software and Affected Versions: XT Floating Cart for WooCommerce plugin for WordPress version 2.8.2 and earlier Description: The issue is related to Stored Cross-Site Scripting via SVG File uploads due to insufficient input sanitization and output escaping. This allows...

WordPress XT Floating Cart for WooCommerce Plugin <= 2.8.2 is vulnerable to Cross Site Scripting (XSS)

Software XT Floating Cart for WooCommerce Type Plugin Vulnerable versions = 2.8.2 Fixed in 2.8.3 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-9178 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID e5cbcbd17b66 Credits Frances...

WordPress plugin XT Floating Cart for WooCommerce 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerability...