CVE-2025-12590 YSlider <= 1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting

The YSlider plugin for WordPress is vulnerable to Cross-Site Request Forgery to Stored Cross-Site Scripting in all versions up to, and including, 1.1. This is due to missing nonce verification on the content configuration page and insufficient input sanitization and output escaping. This makes it...

Malicious code in hushed_flyingfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77f16155670228ee2982b35f397fe28ff7787aa497eaf18378c115e5cc428689 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Security-Robustness Trade-Offs in Diffusion Steganography: A Comparative Analysis of Pixel-Space and VAE-Based Architectures

Current generative steganography research mainly pursues computationally expensive mappings to perfect Gaussian priors within single diffusion model architectures. This work introduces an efficient framework based on approximate Gaussian mapping governed by a scale factor calibrated through...

EUVD-2014-1964

Malware in sbrugna...

EUVD-2007-5160

Malware in sbrugna...

EUVD-2014-1963

Malware in sbrugna...

EUVD-2020-24015

Malware in sbrugna...

EUVD-2014-7614

Malware in sbrugna...

EUVD-2013-6655

Malware in sbrugna...

EUVD-2014-3240

Malware in sbrugna...

EUVD-2014-1962

Malware in sbrugna...

EUVD-2019-19132

Malware in sbrugna...

EUVD-2023-52814

Malicious code in bioql PyPI...

EUVD-2024-40589

Malicious code in bioql PyPI...

EUVD-2024-40588

Malicious code in bioql PyPI...

EUVD-2025-6604

Malicious code in bioql PyPI...

EUVD-2023-35163

Malicious code in bioql PyPI...

EUVD-2024-30364

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2025-38207

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm: fix uprobe pte be overwritten when expanding vma Patch series Fix uprobe pte be overwritten when expanding vma. This patch of 4: We encountered a BUG alert...

SUSE-SU-2025:02817-1 Security update for libavif

This update for libavif fixes the following issues: - update to 1.3.0: - CVE-2025-48175: Fixed an integer overflows in multiplications involving rgbRowBytes, yRowBytes, uRowBytes, and vRowBytes. bsc1243270 - CVE-2025-48174: Fixed an integer overflow and resultant buffer overflow in...