CVE-2025-60698

A command injection vulnerability exists in the D-Link DIR-882 Router firmware version DIR882A1_FW102B02 . The issue stems from the sub_432F60 function in the prog.cgi binary, which stores user-supplied SetSysLogSettings/IPAddress values in NVRAM via nvram_safe_set. These values are subsequently ...

PT-2025-46883

Name of the Vulnerable Software and Affected Versions D-Link DIR-882 Router firmware versions prior to DIR882A1 FW102B02 Description A command injection issue exists in the D-Link DIR-882 Router firmware. The sub 4455BC function within the prog.cgi binary stores user-supplied...

PT-2025-46879

Name of the Vulnerable Software and Affected Versions D-Link DIR-823G router firmware version DIR823G V1.0.2B05 20181207.bin Description A command injection issue exists in the D-Link DIR-823G router firmware. The timelycheck and sysconf binaries process the /var/system/linux vlan reinit file. Th...

EUVD-2025-137768

Malicious code in gocay-uga-agidugafyi npm...

EUVD-2025-136810

Malicious code in imugiay-ajvog-d npm...

EUVD-2025-135015

Malicious code in unimunaf-safiiaf-cuagu npm...

EUVD-2025-142617

Malicious code in butanaih-fafisa-d npm...

EUVD-2025-138447

Malicious code in polymer-aia-affag npm...

EUVD-2025-144428

Malicious code in hereis-manic-tauwa npm...

EUVD-2025-145534

Malicious code in gracewhite npm...

Malicious code in dajouka-d-rlac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e5cba4bea4554a4914925e047446bb99538e80eed4a16d60b2a27b9b7684aa4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dajouka-d-rlfac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b361888bcd6ce510c157bc8f3960a03294f813f100fe6c0d5d1ad6bd1b419e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dajouka-d-uftac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40d2fa4762e66081471b146ba30ced6ca1b5451b772316d9278627b6c46025f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154143 Malicious code in dajouka-d-tac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a66ecdb31630c06e921a1c2a0b14f151865c03c3c958165255441eeb7db42e14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dajouka-d-lftac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cd6fa81286f3800e13e4ebf4b5ca5945ddb40be5758166051c1a6e49e665013 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152893 Malicious code in astia-al12f-d (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab512ff841eb5d21a277cedaa6671bf22d45b37be8c9d17e5c283f225336fefe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124928

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: debugfs: Fix legacy mode page table dump logic In legacy mode, SSPTPTR is ignored if TT is not 00b or 01b. SSPTPTR maybe uninitialized or zero in that case and may cause oops like: Oops: general protection fault,...

CVE-2025-40155

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: debugfs: Fix legacy mode page table dump logic In legacy mode, SSPTPTR is ignored if TT is not 00b or 01b. SSPTPTR maybe uninitialized or zero in that case and may cause oops like: Oops: general protection fault,...

UBUNTU-CVE-2025-40155

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: debugfs: Fix legacy mode page table dump logic In legacy mode, SSPTPTR is ignored if TT is not 00b or 01b. SSPTPTR maybe uninitialized or zero in that case and may cause oops like: Oops: general protection fault,...

CVE-2025-40155 iommu/vt-d: debugfs: Fix legacy mode page table dump logic

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: debugfs: Fix legacy mode page table dump logic In legacy mode, SSPTPTR is ignored if TT is not 00b or 01b. SSPTPTR maybe uninitialized or zero in that case and may cause oops like: Oops: general protection fault,...