BIT-POSTGRESQL-2025-8714 PostgreSQL pg_dump lets superuser of origin server execute arbitrary code in psql client

Untrusted data inclusion in pgdump in PostgreSQL allows a malicious superuser of the origin server to inject arbitrary code for restore-time execution as the client operating system account running psql to restore the dump, via psql meta-commands. pgdumpall is also affected. pgrestore is affected...

Amazon Linux 2023 : nginx, nginx-all-modules, nginx-core (ALAS2023-2025-1152)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-1152 advisory. NGINX Open Source and NGINX Plus have a vulnerability in the ngxmailsmtpmodule that might allow an unauthenticated attacker to over-read NGINX SMTP authentication process memory; as a result, the serve...

CVE-2025-23296

NVIDIA Isaac-GR00T for all platforms contains a vulnerability in a Python component where an attacker could cause a code injection issue. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering...

OESA-2025-2046 glibc security update

The GNU C Library project provides the core libraries for the GNU system and GNU/Linux systems, as well as many other systems that use Linux as the kernel. These libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD, OS-specific APIs and more. These APIs include such foundational...

Linux Distros Unpatched Vulnerability : CVE-2025-8058

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Red Hat Enterprise Linux - glibc: Double free in glibc Ubuntu Linux - The regcomp function in the GNU C library version from 2.4 to 2.41 is subject to a double...

Malicious code in fontawesome-pro-all (npm)

The package fontawesome-pro-all was found to contain malicious code...

MAL-2025-27824 Malicious code in npm-all-packages (npm)

The package npm-all-packages was found to contain malicious code...

Malicious code in atg-all-in-wonder-player (npm)

The package atg-all-in-wonder-player was found to contain malicious code...

Malicious code in call-all (npm)

The package call-all was found to contain malicious code...

Malicious code in npm-all-packages (npm)

The package npm-all-packages was found to contain malicious code...

MAL-2025-16452 Malicious code in call-all (npm)

The package call-all was found to contain malicious code...

MAL-2025-20749 Malicious code in fontawesome-pro-all (npm)

The package fontawesome-pro-all was found to contain malicious code...

MAL-2025-15003 Malicious code in atg-all-in-wonder-player (npm)

The package atg-all-in-wonder-player was found to contain malicious code...

MAL-2025-18553 Malicious code in do-wnload-available-all-6s-and-7s-gwvcm-sezkzx (npm)

The package do-wnload-available-all-6s-and-7s-gwvcm-sezkzx was found to contain malicious code...

CVE-2025-20048

Uncontrolled search path for the IntelR Trace Analyzer and Collector software all verions may allow an authenticated user to potentially enable escalation of privilege via local access...

Malicious Package

Overview github.com/stripedconsu/linker is a malicious package. This package contains malicious code designed to provide attackers with on-demand remote access to a developer's system or CI/CD environment. The package and some other variants use typosquatting to imitate legitimate packages. Upon...

DEBIAN-CVE-2025-8714

Untrusted data inclusion in pgdump in PostgreSQL allows a malicious superuser of the origin server to inject arbitrary code for restore-time execution as the client operating system account running psql to restore the dump, via psql meta-commands. pgdumpall is also affected. pgrestore is affected...

Malicious Package

Overview naya-clone is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate legitimate WhatsApp libraries, there is no connection between that organization and this package...

Malicious Package

Overview node-smsk is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate legitimate WhatsApp libraries, there is no connection between that organization and this package...

CVE-2025-40770

A vulnerability has been identified in SINEC Traffic Analyzer 6GK8822-1BG01-0BA0 All versions. The affected application uses a monitoring interface that is not operating in a strictly passive mode. This could allow an attacker to interact with the interface, leading to man-in-the-middle attacks...