Malicious code in @zalastax/nolb-graphql-t (npm)

The package @zalastax/nolb-graphql-t was found to contain malicious code...

Malicious code in @zalastax/nolb-lion-lib-t (npm)

The package @zalastax/nolb-lion-lib-t was found to contain malicious code...

Malicious code in @zalastax/nolb-node-t (npm)

The package @zalastax/nolb-node-t was found to contain malicious code...

MAL-2025-10087 Malicious code in @zalastax/nolb-_hyper_fun_fa-t (npm)

The package @zalastax/nolb-hyperfunfa-t was found to contain malicious code...

MAL-2025-11020 Malicious code in @zalastax/nolb-cra-template-t (npm)

The package @zalastax/nolb-cra-template-t was found to contain malicious code...

MAL-2025-13064 Malicious code in @zalastax/nolb-passport-t (npm)

The package @zalastax/nolb-passport-t was found to contain malicious code...

MAL-2025-10682 Malicious code in @zalastax/nolb-api-t (npm)

The package @zalastax/nolb-api-t was found to contain malicious code...

MAL-2025-13794 Malicious code in @zalastax/nolb-react-t (npm)

The package @zalastax/nolb-react-t was found to contain malicious code...

MAL-2025-11668 Malicious code in @zalastax/nolb-google-t (npm)

The package @zalastax/nolb-google-t was found to contain malicious code...

CVE-2025-52385

An issue in Studio 3T v.2025.1.0 and before allows a remote attacker to execute arbitrary code via a crafted payload to the childprocess module...

CVE-2025-52385

An issue in Studio 3T v.2025.1.0 and before allows a remote attacker to execute arbitrary code via a crafted payload to the childprocess module...

Linux Distros Unpatched Vulnerability : CVE-2023-2177

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A null pointer dereference issue was found in the sctp network protocol in net/sctp/streamsched.c in Linux Kernel. If streamin allocation is failed, streamout i...

Per-Element Secure Aggregation against Data Reconstruction Attacks in Federated Learning

Federated learning FL enables collaborative model training without sharing raw data, but individual model updates may still leak sensitive information. Secure aggregation SecAgg mitigates this risk by allowing the server to access only the sum of client updates, thereby concealing individual...

Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 140.1.0 ESR MFSA-RESERVE-2025-1968423 bmo1968423 JavaScript engine only wrote partial return value to stack MFSA-RESERVE-2025-1971581 bmo1971581 Large branch table could lead to truncated instruction...

Enterprise Security Incident Analysis and Countermeasures Based on the T-Mobile Data Breach

This paper presents a comprehensive analysis of T-Mobile's critical data breaches in 2021 and 2023, alongside a full-spectrum security audit targeting its systems, infrastructure, and publicly exposed endpoints. By combining case-based vulnerability assessments with active ethical hacking...

CVE-2025-44003

Missing Release of Resource after Effective Lifetime CWE-772 in the Gallagher T-Series Reader allows an attacker with physical access to the reader to perform a limited denial of service when 125 kHz Card Technology is enabled. This issue affects T-Series Readers: 9.20 prior to vCR9.20.250213a...

CVE-2025-44003

Missing Release of Resource after Effective Lifetime CWE-772 in the Gallagher T-Series Reader allows an attacker with physical access to the reader to perform a limited denial of service when 125 kHz Card Technology is enabled. This issue affects T-Series Readers: 9.20 prior to vCR9.20.250213a...

CVE-2025-44003

Missing Release of Resource after Effective Lifetime CWE-772 in the Gallagher T-Series Reader allows an attacker with physical access to the reader to perform a limited denial of service when 125 kHz Card Technology is enabled. This issue affects T-Series Readers: 9.20 prior to vCR9.20.250213a...

CVE-2025-44003

Missing Release of Resource after Effective Lifetime CWE-772 in the Gallagher T-Series Reader allows an attacker with physical access to the reader to perform a limited denial of service when 125 kHz Card Technology is enabled. This issue affects T-Series Readers: 9.20 prior to vCR9.20.250213a...

CVE-2025-44003

CVE-2025-44003 affects Gallagher T-Series Reader. A CWE-772 resource leak in the reader allows a limited denial of service when 125 kHz Card Technology is enabled, exploitable by someone with physical access. Affected versions include: prior to 9.20.250213a, prior to 9.10.250213a, prior to 9.00.2...