5892 matches found
CVE-2025-40213
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: fix crash in setmeshsync and setmeshcomplete There is a BUG: KASAN: stack-out-of-bounds in setmeshsync due to memcpy from badly declared on-stack flexible array. Another crash is in setmeshcomplete due to double...
CVE-2025-40213 Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: fix crash in setmeshsync and setmeshcomplete There is a BUG: KASAN: stack-out-of-bounds in setmeshsync due to memcpy from badly declared on-stack flexible array. Another crash is in setmeshcomplete due to double...
The vulnerability of the sync_file_merge() function in the drivers/dma-buf/sync_file.c module of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the syncfilemerge function in the drivers/dma-buf/syncfile.c file of the Linux kernel is related to security configuration errors. Exploiting this vulnerability could allow an attacker to cause a service failure...
PT-2025-51627
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists within the timer subsystem, specifically in the timer shutdown sync function, potentially leading to a kernel warning. This occurs when the timer function pointer...
Fake calendar invites are spreading. Here’s how to remove them and prevent more
We’re seeing a surge in phishing calendar invites that users can’t delete, or that keep coming back because they sync across devices. The good news is you can remove them and block future spam by changing a few settings. Most of these unwanted calendar entries are there for phishing purposes. Mos...
CVE-2025-41115 Incorrect privilege assignment
SCIM provisioning was introduced in Grafana Enterprise and Grafana Cloud in April to improve how organizations manage users and teams in Grafana by introducing automated user lifecycle management. In Grafana versions 12.x where SCIM provisioning is enabled and configured, a vulnerability in user...
kernel: mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race
In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix hugepmdunshare vs GUP-fast race hugepmdunshare drops a reference on a page table that may have previously been shared across processes, potentially turning it into a normal page table used in another process in...
PT-2025-49087
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the mptcp pm del add timer function, which can lead to a race condition. Specifically, the function may call sk stop timer sync while another process ...
EUVD-2025-176278
Malicious code in spawn-nova-antares-sync npm...
EUVD-2025-178526
Malicious code in hexo-restart-farout-sync npm...
EUVD-2025-179594
Malicious code in configstore-quark-sync-callback npm...
EUVD-2025-178714
Malicious code in geomorphology-cressida-sync-atlas npm...
Malicious code in radiant-express-sync-tachyon (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc11ed6a8c3867ed71199224db53e25c2338a7f38da642038050bbef32d06101 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in sync-taurus-cluster-webpack (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 187342dda72bcfd9fa9b7508990e5f40d3d2fc29ab165be4e68d0524f897b5b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178231
Malicious code in jwt-sync-ora-selenium npm...
Malicious code in standard-altair-izar-sync (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7aa4728fd5bccd6fec6ad0f4459479b41c02571c837732ad3e92688a04eb9bf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179062
Malicious code in eris-sync-loglevel-dorado npm...
EUVD-2025-176087
Malicious code in sync-vega-apex-prettier-plugin-markdown npm...