CVE-2022-50614

In the Linux kernel, the following vulnerability has been resolved: misc: pciendpointtest: Fix pciendpointtestcopy,write,read panic The dmamapsingle doesn't permit zero length mapping. It causes a follow panic. A panic was reported on arm64: 60.137988 ------------ cut here ------------ 60.142630...

USN-7909-4 linux-gcp, linux-gke, linux-gkeop vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - MIPS architecture; - PowerPC architecture; - RISC-V architecture; - S39...

go-toolset:rhel8 security update

delve 1.25.2-1.0.1 - Disable DWARF compression which has issues Alex Burmashev 1.25.2-1 - Update to Delve 1.25.2 Sync from CentOS Stream 9 - Related: RHEL-121223 golang 1.25.3-1 - Update to Go 1.25.3 sync from CentOS Stream 9 - Build go-toolset as a subpackage - Preserve GOAMD64=v1 for RHEL 8 -...

UBUNTU-CVE-2025-65637

A denial-of-service vulnerability exists in github.com/sirupsen/logrus when using Entry.Writer to log a single-line payload larger than 64KB without newline characters. Due to limitations in the internal bufio.Scanner, the read fails with "token too long" and the writer pipe is closed, leaving...

USN-7909-1: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - MIPS architecture; - PowerPC architecture; - RISC-V architecture; - S39...

CVE-2025-11782

Stack-based buffer overflow vulnerability in Circutor SGE-PLC1000/SGE-PLC50 v9.0.2. The 'ShowDownload' function uses “sprintf” to format a string that includes the user-controlled input of 'GetParametermeter' in the fixed-size buffer 'acStack4c' 64 bytes without checking the length. An attacker c...

postman-cli (>=1.16.0-canary.1 <=1.24.2) potentially affected by unknown CVE via @postman/pm-bin-windows-x64 (>=1.16.0-canary.1 <=1.24.2)

@postman/pm-bin-windows-x64 NPM version =1.16.0-canary.1, =1.16.0-canary.1, =1.24.2 Source cves: unknown CVE Source advisory: SNYK:JS-POSTMANPMBINWINDOWSX64-14103295...

CVE-2025-12382

Improper Limitation of a Pathname 'Path Traversal' vulnerability in Algosec Firewall Analyzer on Linux, 64 bit allows an authenticated user to upload files to a restricted directory leading to code injection. This issue affects Algosec Firewall Analyzer: A33.0 up to build 320, A33.10 up to build...

Malicious code in icha-64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc35f2383c035c4b940bb9dcde087229331e5668ceafa9b2db2d2387e2b9f1f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aril-64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b07ea5f194f8dcce18cc7ad427c76159e71ef0d8c155077a29fc4ea5e5cab0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cinta-64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4344a0258a7bcb4dece17311152b5d214fe2aeb5d7ebe3ea997f7bd77d661984 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152866 Malicious code in aril-64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b07ea5f194f8dcce18cc7ad427c76159e71ef0d8c155077a29fc4ea5e5cab0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154096 Malicious code in cinta-64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4344a0258a7bcb4dece17311152b5d214fe2aeb5d7ebe3ea997f7bd77d661984 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in billa-64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2542c3363f4be2de5910b6b96ba9266ccb0701416eb19cff39e1c39be5fc66e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bitha-64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86e75457450d6fc8e4119e06008b46b6265fec2d37b7f2d3d5334283441a92a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152506 Malicious code in alvira-64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f51780790129c1e3d89ff3195748cea52c13c5f644cc08003d358359209d6f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153863 Malicious code in bitha-64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86e75457450d6fc8e4119e06008b46b6265fec2d37b7f2d3d5334283441a92a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kentung-64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8dcaa4b5438d26c69de4057260e4bc92dbd95c9ef607045fd0bab4aa438beb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157547 Malicious code in kentung-64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8dcaa4b5438d26c69de4057260e4bc92dbd95c9ef607045fd0bab4aa438beb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intan-64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5983d2bd23b933b52fb560df8c92a0014d3d1a301e58a14dec3571dd49117057 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...