EUVD-2025-176089

Malicious code in sync-taurus-cluster-webpack npm...

EUVD-2025-177345

Malicious code in paleontology-sedna-enif-sync npm...

EUVD-2023-60056

Ozeki SMS Gateway versions up to and including 10.3.208 contain a path traversal vulnerability. Successful exploitation allows an unauthenticated attacker to use URL-encoded traversal sequences to read arbitrary files from the underlying filesystem with the privileges of the gateway service,...

ROS-20251113-01

A vulnerability in the Omnibox component of the Google Chrome and Microsoft Edge browsers is related to writing outside the boundaries of the buffer. Exploitation of the vulnerability could allow an attacker acting remotely to escalate their privileges A vulnerability in the Safe Browsing compone...

DEBIAN-CVE-2025-40196

In the Linux kernel, the following vulnerability has been resolved: fs: quota: create dedicated workqueue for quotareleasework There is a kernel panic due to WARNONCE when paniconwarn is set. This issue occurs when writeback is triggered due to sync call for an opened fileie, writeback reason is...

CVE-2025-40196

In the Linux kernel, the following vulnerability has been resolved: fs: quota: create dedicated workqueue for quotareleasework There is a kernel panic due to WARNONCE when paniconwarn is set. This issue occurs when writeback is triggered due to sync call for an opened fileie, writeback reason is...

Active Directory Under Siege: Why Critical Infrastructure Needs Stronger Security

Active Directory remains the authentication backbone for over 90% of Fortune 1000 companies. AD's importance has grown as companies adopt hybrid and cloud infrastructure, but so has its complexity. Every application, user, and device traces back to AD for authentication and authorization, making ...

CVE-2025-40140 net: usb: Remove disruptive netif_wake_queue in rtl8150_set_multicast

In the Linux kernel, the following vulnerability has been resolved: net: usb: Remove disruptive netifwakequeue in rtl8150setmulticast syzbot reported WARNING in rtl8150startxmit/usbsubmiturb. This is the sequence of events that leads to the warning: rtl8150startxmit netifstopqueue;...

EUVD-2025-111624

Malicious code in local-odin-sync-public npm...

EUVD-2025-123371

Malicious code in process-fornax-local-sync npm...

EUVD-2025-121505

Malicious code in sync-envconfig-apollo-postcss npm...

MAL-2025-144467 Malicious code in lint-staged-sync-global-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b9f543858dd41d5c201e3ced1a84ac7806a02565e07ef4cca4bd240aa85d04a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121495

Malicious code in sync-sedna-titan-neptune npm...

EUVD-2025-123402

Malicious code in prettier-stylelint-sync-install-loopback npm...

EUVD-2025-121499

Malicious code in sync-pulsar-child-process-gridsome npm...

EUVD-2025-121493

Malicious code in sync-transport-resolvers-quantum npm...

EUVD-2025-113125

Malicious code in got-sadr-mocha-sync npm...

EUVD-2025-122440

Malicious code in rocket-sync-jovian-charon npm...

Malicious code in start-mongoose-scripts-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9c8881d3331a199f19842e80240df5da41adea1181cadde5924c73d69f70e38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polaris-sync-procyon-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1434d4b6bbcde4dcf7e4fa46ea40212da7acbc15f97dd7d0c59b9c7366c8048a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...