Malicious code in new-al-bum-av-ailable-campfire-songs-1-k7le9-wpxeon (npm)

The package new-al-bum-av-ailable-campfire-songs-1-k7le9-wpxeon was found to contain malicious code...

MAL-2025-27349 Malicious code in new-al-bum-av-ailable-532141-nothing-special-3hobm-scpavd (npm)

The package new-al-bum-av-ailable-532141-nothing-special-3hobm-scpavd was found to contain malicious code...

MAL-2025-27344 Malicious code in new-al-bum-av-ailable-17746-here-my-dear-8zdhb-bwjsfw (npm)

The package new-al-bum-av-ailable-17746-here-my-dear-8zdhb-bwjsfw was found to contain malicious code...

MAL-2025-27346 Malicious code in new-al-bum-av-ailable-23296-triumph-eb5kv-wzigao (npm)

The package new-al-bum-av-ailable-23296-triumph-eb5kv-wzigao was found to contain malicious code...

Malicious code in new-al-bum-av-ailable-progress-5zjb6-rbopge (npm)

The package new-al-bum-av-ailable-progress-5zjb6-rbopge was found to contain malicious code...

Malicious code in new-al-bum-av-ailable-greetings-from-michigan-the-great-lakes-state-7x9l5-guwkve (npm)

The package new-al-bum-av-ailable-greetings-from-michigan-the-great-lakes-state-7x9l5-guwkve was found to contain malicious code...

MAL-2025-27350 Malicious code in new-al-bum-av-ailable-american-doll-posse-hawjk-crclgb (npm)

The package new-al-bum-av-ailable-american-doll-posse-hawjk-crclgb was found to contain malicious code...

MAL-2025-27355 Malicious code in new-al-bum-av-ailable-progress-5zjb6-rbopge (npm)

The package new-al-bum-av-ailable-progress-5zjb6-rbopge was found to contain malicious code...

Malicious code in new-al-bum-av-ailable-2017-84902-three-futures-eheyb-czhdsw (npm)

The package new-al-bum-av-ailable-2017-84902-three-futures-eheyb-czhdsw was found to contain malicious code...

Malicious code in new-al-bum-av-ailable-24973-black-dialogue-hdrb2-ckuphe (npm)

The package new-al-bum-av-ailable-24973-black-dialogue-hdrb2-ckuphe was found to contain malicious code...

MAL-2025-27352 Malicious code in new-al-bum-av-ailable-curse-your-branches-9opbb-omehez (npm)

The package new-al-bum-av-ailable-curse-your-branches-9opbb-omehez was found to contain malicious code...

Driver of destruction: How a legitimate driver is being used to take down AV processes

Introduction In a recent incident response case in Brazil, we spotted intriguing new antivirus AV killer software that has been circulating in the wild since at least October 2024. This malicious artifact abuses the ThrottleStop.sys driver, delivered together with the malware, to terminate numero...

[SECURITY] Fedora 41 Update: minidlna-1.3.3-10.fc41

MiniDLNA aka ReadyDLNA is server software with the aim of being fully compliant with DLNA/UPnP-AV clients. The minidlna daemon serves media files music, pictures, and video to clients on your local network. Example clients include applications such as Totem and XBMC, and devices such as portable...

AppleAVD AV1_Syntax::Parse_Header Out-Of-Bounds Read

There is an issue in AppleAVD kernel extension with decoding AV1 video files that could potentially be used to read out-of bound data or potentially cause a kernel crash when rendering a malformed video file. The issue was observed on macOS Sonoma 14.5...

SONY XAV-AX8500 Integer Overflow Vulnerability

The SONY XAV-AX8500 is a car AV receiver with enhanced features. The SONY XAV-AX8500 suffers from an integer overflow vulnerability that originates from improper Bluetooth packet handling resulting in an integer overflow that can be exploited by an attacker to execute arbitrary code...

CVE-2022-47092

GPAC MP4box 2.1-DEV-rev574-g9d5bb184b is contains an Integer overflow vulnerability in gfhevcreadspsbsinternal function of mediatools/avparsers.c:8316...

CVE-2022-47087

GPAC MP4box 2.1-DEV-rev574-g9d5bb184b has a Buffer overflow in gfvvcreadppsbsinternal function of mediatools/avparsers.c...

CVE-2021-25904

An issue was discovered in the av-data crate before 0.3.0 for Rust. A raw pointer is dereferenced, leading to a read of an arbitrary memory address, sometimes causing a segfault...

CVE-2020-9342

The F-Secure AV parsing engine before 2020-02-05 allows virus-detection bypass via crafted Compression Method data in a GZIP archive. This affects versions before 17.0.605.474 on Linux of Cloud Protection For Salesforce, Email and Server Security, and Internet GateKeeper...

CVE-2020-9320

Avira AV Engine before 8.3.54.138 allows virus-detection bypass via a crafted ISO archive. This affects versions before 8.3.54.138 of Antivirus for Endpoint, Antivirus for Small Business, Exchange Security Gateway, Internet Security Suite for Windows, Prime, Free Security Suite for Windows, and...