CVE-2025-65637 affecting package prometheus for versions less than 2.37.9-6

CVE-2025-65637 affecting package prometheus for versions less than 2.37.9-6. A patched version of the package is available...

CVE-2025-53524 Fuji Electric Monitouch V-SFT-6 Out-of-bounds Write

Fuji Electric Monitouch V-SFT-6 is vulnerable to an out-of-bounds write while processing a specially crafted project file, which may allow an attacker to execute arbitrary code...

Mozilla Thunderbird < 140.6

The version of Thunderbird installed on the remote Windows host is prior to 140.6. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-96 advisory. - Privilege escalation in the Netmonitor component. This vulnerability affects Firefox 146, Firefox ESR 140.6,...

CVE-2025-12969 affecting package fluent-bit for versions less than 3.0.6-6

CVE-2025-12969 affecting package fluent-bit for versions less than 3.0.6-6. A patched version of the package is available...

CVE-2025-12977 affecting package fluent-bit for versions less than 3.0.6-6

CVE-2025-12977 affecting package fluent-bit for versions less than 3.0.6-6. A patched version of the package is available...

FBI Says DC Pipe Bomb Suspect Brian Cole Kept Buying Bomb Parts After January 6

The 30-year-old Virginia resident evaded capture for years after authorities discovered pipe bombs planted near buildings in Washington, DC, the day before the January 6, 2021, Capitol attack...

CVE-2025-47913 affecting package kubevirt for versions less than 1.5.0-6

CVE-2025-47913 affecting package kubevirt for versions less than 1.5.0-6. A patched version of the package is available...

AZL-71074 CVE-2025-12970 affecting package fluent-bit for versions less than 3.0.6-6

The extractname function in Fluent Bit indocker input plugin copies container names into a fixed size stack buffer without validating length. An attacker who can create containers or control container names, can supply a long name that overflows the buffer, leading to process crash or arbitrary...

AZL-71077 CVE-2025-12969 affecting package fluent-bit for versions less than 3.0.6-6

Fluent Bit inforward input plugin does not properly enforce the security.users authentication mechanism under certain configuration conditions. This allows remote attackers with network access to the Fluent Bit instance exposing the forward input to send unauthenticated data. By bypassing...

CVE-2024-25260 affecting package elfutils for versions less than 0.189-6

CVE-2024-25260 affecting package elfutils for versions less than 0.189-6. A patched version of the package is available...

AZL-70331 CVE-2025-47913 affecting package docker-compose for versions less than 2.27.0-6

SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process...

CVE-2025-46368

Dell Alienware Command Center 6.x AWCC, versions prior to 6.10.15.0, contains an Insecure Temporary File vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information tampering...

Malicious code in hokage-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c627f0a66556cfa67adfe4d471eb691402ab7964941138852313cb92a0381c25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-141278

Malicious code in ira-6 npm...

EUVD-2025-140388

Malicious code in lia-6 npm...

EUVD-2025-141488

Malicious code in hokage-6 npm...

Malicious code in billa-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b483d67d5ea61c28e23b19bf1653a65b68cfd617ea0dfb894516c7f3a53a173 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48098f2a7998a3aa7c3171502e952bd0a81c80aa3e90b671778097e850c01b4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilop-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17ecb2b77ac2a7d3f6932b83e0f435777e3e32b0ceb1de27aa007bed3886eae7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvira-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f050c863503d6c55b869ad4d9e8d12b40bb0259076398191d5c38b49feb6c2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...