MAL-2025-155069 Malicious code in fauzi-8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29b46be4f8f691632fe61e7132dc9845f79ee72875cf39e53da9b65b86ec0682 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-146212

Malicious code in yuda-8 npm...

Malicious code in yuda-8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adc65ae54958919ac7c3ac10371714a0e16b3b8ce06a9aa167219ab1543740ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bitha-8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae3f124fc5d45699f8c17e05ce23a37b01f47864ecd931fcccb2cf68fd28343c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-74735

Malicious code in distantottercoral-8 npm...

Malicious code in distant_otter_coral-8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2295eda69cd0899c97a7edc71bc87579fe1c90b57c24d15914651bd62b38a7b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-77541

Malicious code in professionalquokkablush-8 npm...

Oracle Linux 8 : bind (ELSA-2025-19835)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-19835 advisory. - Address various spoofing attacks CVE-2025-40778 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...

CVE-2025-12829

An uninitialized stack read issue exists in Amazon Ion-C versions v1.1.4 that may allow a threat actor to craft data and serialize it to Ion text in such a way that sensitive data in memory could be exposed through UTF-8 escape sequences. To mitigate this issue, users should upgrade to version...

CVE-2025-12829

An uninitialized stack read issue exists in Amazon Ion-C versions v1.1.4 that may allow a threat actor to craft data and serialize it to Ion text in such a way that sensitive data in memory could be exposed through UTF-8 escape sequences. To mitigate this issue, users should upgrade to version...

CVE-2025-12829

An uninitialized stack read issue exists in Amazon Ion-C versions v1.1.4 that may allow a threat actor to craft data and serialize it to Ion text in such a way that sensitive data in memory could be exposed through UTF-8 escape sequences. To mitigate this issue, users should upgrade to version...

xorg-x11-server-Xwayland security update

An update is available for xorg-x11-server-Xwayland. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Xwayland is an X server for running X clients under Wayland...

bind security update

An update is available for bind. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The Berkeley Internet Name Domain BIND is an implementation of the Domain Name...

[SECURITY] Fedora 43 Update: mupen64plus-2.6.0-8.fc43

Mupen64plus is a Nintendo 64 Emulator. This package includes all the plug-ins...

AlmaLinux 8 : mingw-libtiff (ALSA-2025:19906)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:19906 advisory. libtiff: LibTIFF Use-After-Free Vulnerability CVE-2025-8176 libtiff: Libtiff Write-What-Where CVE-2025-9900 Tenable has extracted the preceding descripti...

Oracle Linux 8 : linux-firmware (ELSA-2025-25743)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-25743 advisory. 20251030-999.44.1.gite9292517.el8 - Include AMD ucode fix Orabug: 38523856 CVE-2025-62626 Tenable has extracted the preceding description block directly from t...

Oracle Linux 8 : sssd (ELSA-2025-19610)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-19610 advisory. - Resolves: RHEL-120292 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems rhel-8.10.z Tenable h...

RHEL 8 : sssd (RHSA-2025:19610)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:19610 advisory. The System Security Services Daemon SSSD service provides a set of daemons to manage access to remote directories and authentication mechanisms. It...

Oracle Linux 8 : xorg-x11-server-Xwayland (ELSA-2025-19432)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2025-19432 advisory. 21.1.3-19 - CVE fix for: CVE-2025-62229 RHEL-119967, CVE-2025-62230 RHEL-120015, CVE-2025-62231 RHEL-125007 Tenable has extracted the preceding...

libtiff security update

An update is available for libtiff. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The libtiff packages contain a library of functions for manipulating Tagged...