CVE-2025-65570

A type confusion in jsish 2.0 allows incorrect control flow during execution of the OPNEXT opcode. When an “instanceof” expression uses an array element access as the left-hand operand inside a for-in loop, the instructions implementation leaves an additional array reference on the stack rather...

PT-2025-53725

A type confusion in jsish 2.0 allows incorrect control flow during execution of the OP NEXT opcode. When an “instanceof” expression uses an array element access as the left-hand operand inside a for-in loop, the instructions implementation leaves an additional array reference on the stack rather...

CVE-2025-65570

A type confusion in jsish 2.0 allows incorrect control flow during execution of the OPNEXT opcode. When an “instanceof” expression uses an array element access as the left-hand operand inside a for-in loop, the instructions implementation leaves an additional array reference on the stack rather...

CVE-2023-54089

CVE-2023-54089 : In the Linux kernel, the virtio_pmem path did not assign REQ_OP_WRITE for flush bios, causing submit_bio_noacct() to fail when flushing PMEM-backed devices (e.g., during mkfs.xfs). The root cause is that async_pmem_flush() allocated a flush bio without setting REQ_OP_WRITE, so th...

PT-2025-53166

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.4.0-rc7+ 154 Description The Linux kernel contains a flaw within the virtio pmem subsystem. Specifically, the submit bio noacct function requires the bio operation to be either WRITE or ZONE APPEND for flush...

CVE-2025-55893

TOTOLINK N200RE V9.3.5u.6437B20230519 is vulnerable to command Injection in setOpModeCfg via hostName...

CVE-2025-55893

TOTOLINK N200RE V9.3.5u.6437B20230519 is vulnerable to command Injection in setOpModeCfg via hostName...

CVE-2025-14672 gmg137 snap7-rs s7_micro_client.cpp opWriteArea heap-based overflow

A flaw has been found in gmg137 snap7-rs up to 1.142.1. This impacts the function TSnap7MicroClient::opWriteArea of the file s7microclient.cpp. Executing a manipulation can lead to heap-based buffer overflow. It is possible to launch the attack remotely. The exploit has been published and may be...

DEBIAN-CVE-2025-40298

In the Linux kernel, the following vulnerability has been resolved: gve: Implement settime64 with -EOPNOTSUPP ptpclocksettime assumes every ptpclock has implemented settime64. Stub it with -EOPNOTSUPP to prevent a NULL dereference...

wifi: iwlwifi: Fix error code in iwl_op_mode_dvm_start()

...

EUVD-2025-198976

Malicious code in @ensdomains/op-resolver-contracts npm...

Malicious code in @ensdomains/op-resolver-contracts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6def95ef69b4dd7da38ca7a697fb0eabff2ae2fe2eff4f31957254a207346bd0 The package @ensdomains/op-resolver-contracts was found to contain malicious code. Source: ghsa-malware...

Malicious code in rimraf-ophiuchus-supervisor-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62d161a75cd81a68198bf33a6437867de29c56abdc2d8d0f24e783ec8aa5a713 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cache-ophiuchus-node-config-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0b0d81771865bb974c560ebcce579067abe56418b4aab7d7db4414d5caf5ac0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

GHSA-FJ2X-735W-74VQ vulnerabilities

Vulnerabilities for packages: op-geth...

GHSA-FJ2X-735W-74VQ vulnerabilities

Vulnerabilities for packages: op-geth...

UBUNTU-CVE-2025-40050

In the Linux kernel, the following vulnerability has been resolved: bpf: Skip scalar adjustment for BPFNEG if dst is a pointer In checkaluop, the verifier currently calls checkregarg and adjustscalarminmaxvals unconditionally for BPFNEG operations. However, if the destination register holds a...

CVE-2025-40050

CVE-2025-40050 refers to a Linux kernel BPF verifier fix: in check_alu_op(), the code previously performed unconditional scalar adjustments for BPF_NEG; if the destination is a pointer, those scalar adjustments are unnecessary and could be incorrect. The patch adds a check to skip adjustment logi...

CVE-2025-12258

A vulnerability was detected in TOTOLINK A3300R 17.0.0cu.557B20221024. Impacted is the function setOpModeCfg of the file /cgi-bin/cstecgi.cg of the component POST Parameter Handler. The manipulation of the argument opmode results in stack-based buffer overflow. The attack may be performed from...

MAL-2025-48776 Malicious code in op-cli-installer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f4b3ae42ff2507fbd7e994719a2e19d362d037ccbce81544f7617a07bcf6468b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...