CVE-2018-5951

CVE-2018-5951: MikroTik RouterOS Denial of Service Vulnerability Vulnerability Summary A vulnerability in MikroTik RouterOS allows an unauthenticated remote attacker to force a router to reboot. This is done by sending a packet of the size of 1 byte to RouterOS's IPv6 address using IP proto 97. A...

Astra Linux – Vulnerability in Firefox and Thunderbird

Mozilla developers Paul Adenot and the Mozilla Fuzzing Team reported memory safety bugs in Firefox 96 and Firefox ESR 91.5. Some of these bugs exhibited signs of memory corruption, and we assume that with sufficient effort, some of these bugs could have been exploited to execute arbitrary code...

Astra Linux – Vulnerability in Chromium

A heap buffer overflow in the Task Manager of Google Chrome prior to version 97.0.4692.99 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption through a crafted HTML page...

Astra Linux – Vulnerability in Chromium

Before version 97.0.4692.71, using the "After Free" feature in Google Chrome allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page...

Astra Linux – Vulnerability in Chromium

Before version 97.0.4692.99, using free after Vulkan in Google Chrome allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page...

Astra Linux – Vulnerability in Chromium

A heap buffer overflow in ANGLE in Google Chrome prior to version 97.0.4692.71 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page...

Malicious code in icha-97 (npm)

Source: amazon-inspector 2f95145935b006419aa320ab92ec1fd80c8de9186d0fe5d5197d7e677a3ab05d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in hariyono-97 (npm)

Source: amazon-inspector 5a8a550238eb43b6eb18328070fcf39ca71f7dbd8aa6b8b745d6dcfb0930c84c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in developing_constrictor_rose-97 (npm)

Source: amazon-inspector 97baf9f8bc7dc3d11d00ef20cc558abd7c98dfce66e298e783b12141dc9082af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in cinta-97 (npm)

Source: amazon-inspector dc322839eddf83cc6238ca5f5c4434326a1f07a041b8259a23085b354fad9978 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in asleep_beetle_cyan-97 (npm)

Source: amazon-inspector 3e59681bb9df2f05776471df5ed2b6fc39512af3b8289df84d4ef32ede945a7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

RHEL 8 : kpatch-patch-4_18_0-477_107_1, kpatch-patch-4_18_0-477_120_1, kpatch-patch-4_18_0-477_124_1, kpatch-patch-4_18_0-477_130_1, kpatch-patch-4_18_0-477_89_1, and kpatch-patch-4_18_0-477_97_1 (RHSA-2026:16210)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:16210 advisory. This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a running kernel. This patch module ...

@microsoft/kiota-http-fetchlibrary: Bearer token and Cookie leak across origin on redirect due to case-mismatched scrub in fetchRequestAdapter

Summary @microsoft/kiota-http-fetchlibrary's RedirectHandler is documented as stripping Authorization and Cookie from cross-origin redirect targets, but the default scrubSensitiveHeaders callback in RedirectHandlerOptions uses case-sensitive property deletion delete headers.Authorization, delete...

CVE-2026-29778

pyLoad is a free and open-source download manager written in Python. From version 0.5.0b3.dev13 to 0.5.0b3.dev96, the editpackage function implements insufficient sanitization for the packfolder parameter. The current protection relies on a single-pass string replacement of "../", which can be...

MiracleLinux 3 : ghostscript-8.70-6.6.0.1.AXS3 (AXSA:2012-97:01)

The remote MiracleLinux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2012-97:01 advisory. Ghostscript is a set of software that provides a PostScript interpreter, a set of C procedures the Ghostscript library, which implements the graphics...

Malicious code in billa-97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a260442344a79e904bce89ca6f59d9febd6e9f41ff94eca0041cbac948bebbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rita-97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1113ff87d8b246375c2f26bfcfebba0ebf286eccf6b65bebf895141e13c181d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cinta-97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc322839eddf83cc6238ca5f5c4434326a1f07a041b8259a23085b354fad9978 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155705 Malicious code in hariyono-97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a8a550238eb43b6eb18328070fcf39ca71f7dbd8aa6b8b745d6dcfb0930c84c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154132 Malicious code in cinta-97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc322839eddf83cc6238ca5f5c4434326a1f07a041b8259a23085b354fad9978 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...