Malicious code in cfruitmaliciousxmlparser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e5eaaf8ade83c339f3b0892ac216af2a8acd0ff78ba33498568eae45f6cf905 The package cfruitmaliciousxmlparser was found to contain malicious code. Source: ghsa-malware...

Malicious code in ffruitmaliciousxmlparser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf46b55c70da3e5dad3896242df9922f032035d42c731e67dd91a38caf65daac The package ffruitmaliciousxmlparser was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192549 Malicious code in ffruitmaliciousxmlparser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf46b55c70da3e5dad3896242df9922f032035d42c731e67dd91a38caf65daac The package ffruitmaliciousxmlparser was found to contain malicious code. Source: ghsa-malware...

Malicious code in afruitmaliciousxmlparser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36726b904c7ec2d58c9ade48fc63b898841138faa395862ae2a28be8e6701e0a The package afruitmaliciousxmlparser was found to contain malicious code. Source: ghsa-malware...

Malicious code in gfruitmaliciousxmlparser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4813943ebd3c7e53be5309757e509dc22587aab81ded149ba9b56b37e87a4dd9 The package gfruitmaliciousxmlparser was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192545 Malicious code in bfruitmaliciousxmlparser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff72c0a1c73026b834ec6a3b7d7cb8a31e1e07346126733651319019917d1f91 The package bfruitmaliciousxmlparser was found to contain malicious code. Source: ghsa-malware...

Malicious code in bfruitmaliciousxmlparser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff72c0a1c73026b834ec6a3b7d7cb8a31e1e07346126733651319019917d1f91 The package bfruitmaliciousxmlparser was found to contain malicious code. Source: ghsa-malware...

Malicious code in fruit-malicious-xml-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c330d59c7529d320701e6ccf11a655110e1aeb7c9ad5d15c34ba10941c6343a6 The package fruit-malicious-xml-parser was found to contain malicious code. Source: ghsa-malware...

SUSE-SU-2025:4371-1 Security update for postgresql14

This update for postgresql14 fixes the following issues: Upgraded to 14.20: - CVE-2025-12817: Fixed missing check for CREATE privileges on the schema in CREATE STATISTICS bsc1253332 - CVE-2025-12818: Fixed integer overflow in allocation-size calculations within libpq bsc1253333 Other fixes: - Use...

Unity Linux 20.1050e Security Update: kernel (UTSA-2025-991160)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-991160 advisory. In the Linux kernel, the following vulnerability has been resolved: media: cx25821: Fix the warning when removing the module When removing the module, we will get th...

EUVD-2023-60185

Screen SFT DAB 1.9.3 contains a weak session management vulnerability that allows attackers to bypass authentication controls by reusing IP address-bound session identifiers. Attackers can exploit the vulnerable API by intercepting and reusing established sessions to remove user accounts without...

CVE-2023-53741

Screen SFT DAB 1.9.3 is affected by a weak session management vulnerability that allows an attacker to bypass authentication by reusing IP-address-bound session identifiers. The issue enables exploitation of the vulnerable API by intercepting and reusing established sessions to remove user accoun...

CVE-2023-53741 Screen SFT DAB 1.9.3 Authentication Bypass via IP Session Management

Screen SFT DAB 1.9.3 contains a weak session management vulnerability that allows attackers to bypass authentication controls by reusing IP address-bound session identifiers. Attackers can exploit the vulnerable API by intercepting and reusing established sessions to remove user accounts without...

MAL-2025-192422 Malicious code in real-time-tweet-streamer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 692b2a444eb479ec815e98413b99cd6cb677cf8be77edef431d8acf9d6c9e5c5 The package real-time-tweet-streamer was found to contain malicious code. Source: ghsa-malware...

Malicious code in real-time-tweet-streamer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 692b2a444eb479ec815e98413b99cd6cb677cf8be77edef431d8acf9d6c9e5c5 The package real-time-tweet-streamer was found to contain malicious code. Source: ghsa-malware...

Malicious code in near-fast-auth-signer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85ca901df252a441f9253e1a56812e262f6c7282f53587866710310fa282394c The package near-fast-auth-signer was found to contain malicious code. Source: ghsa-malware...

CVE-2023-53854

In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: mt8186: Fix use-after-free in driver remove path When devm runs function in the "remove" path for a device it runs them in the reverse order. That means that if you have parts of your driver that aren't using devm...

MAL-2025-192408 Malicious code in ddp-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b1ae70118a343c68fd301dbce7ef05fbdf587541f9d61bd1df8a5048578282a The package ddp-common was found to contain malicious code. Source: ghsa-malware afe6b2223d57e3d32fa4220c3a687d0b70fd8c0047fd4925d4b0e6766ce5420e Any...

MAL-2025-192403 Malicious code in allow-deny (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 512611dc9091a6cb708a796ffa1ff4047634ff63ee34231b092411ec45e57132 The package allow-deny was found to contain malicious code. Source: ghsa-malware eacee1962bd7ee456809cbd1fec30a8feb4fe397bf9e945ff4f42a8331cab117 Any...

MAL-2025-192414 Malicious code in mongo-decimal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d31ef468b36fa90f39d081db22602ad19c8c84bfa3416e3b471eebaaad2919bf The package mongo-decimal was found to contain malicious code. Source: ghsa-malware e32897d62825ec82598cd1de92099161013a0fc84c60add6ec1c9496320ab58d...