1072 matches found
EUVD-2025-36093
Malicious code in op-cli-installer npm...
Malicious Package
Overview op-cli-installer is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
MAL-2025-48776 Malicious code in op-cli-installer (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f4b3ae42ff2507fbd7e994719a2e19d362d037ccbce81544f7617a07bcf6468b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in op-frontend-commons (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-48857 Malicious code in op-frontend-commons (npm)
--- -= Per source details. Do not edit below this line.=-...
CVE-2023-53721 wifi: ath12k: Fix a NULL pointer dereference in ath12k_mac_op_hw_scan()
In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Fix a NULL pointer dereference in ath12kmacophwscan In ath12kmacophwscan, the return value of kzalloc is directly used in memcpy, which may lead to a NULL pointer dereference on failure of kzalloc. Fix this bug by...
PT-2025-42492
Name of the Vulnerable Software and Affected Versions QuickJS versions affected versions not specified Description An integer overflow exists in the QuickJS regular expression engine libregexp due to an inconsistent representation of the bytecode buffer size. The regular expression bytecode size ...
CVE-2025-39975
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix wrong index reference in smb2compoundop In smb2compoundop, the loop that processes each command's response uses wrong indices when accessing response bufferes. This incorrect indexing leads to improper handling o...
CVE-2025-39975
Concrete details available: The CVE-2025-39975 issue affects the Linux kernel SMB client, specifically smb2_compound_op() in fs/smb/client/smb2inode.c. The bug arises from incorrect indexing when processing each command’s response, causing improper handling of command results and, in some cases, ...
PT-2025-43917
Name of the Vulnerable Software and Affected Versions TOTOLINK A3300R version 17.0.0cu.557 B20221024 Description A flaw exists in TOTOLINK A3300R that could lead to a stack-based buffer overflow. The issue is located in the setOpModeCfg function within the /cgi-bin/cstecgi.cg file, specifically...
Linux Distros Unpatched Vulnerability : CVE-2025-39921
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - spi: microchip-core-qspi: stop checking viability of op-maxfreq in supportsop callback In commit 13529647743d9 spi: microchip-core-qspi: Support per spi-mem...
EUVD-2020-16329
Malware in sbrugna...
EUVD-2017-1552
Malware in sbrugna...
EUVD-2019-2028
Malware in sbrugna...
EUVD-2019-2030
Malware in sbrugna...
EUVD-2019-2034
Malware in sbrugna...
EUVD-2019-11501
Malware in sbrugna...
EUVD-2019-2032
Malware in sbrugna...