PT-2025-19792

Name of the Vulnerable Software and Affected Versions MobSF versions up to and including 4.3.2 Description MobSF is a mobile application security testing tool used by security teams across numerous organizations, typically deployed on centralized internal or cloud-based servers. The tool provides...

PT-2025-19768

Name of the Vulnerable Software and Affected Versions Mobile Security Framework MobSF versions up to and including 4.3.2 Description A Stored Cross-Site Scripting XSS issue has been identified in MobSF. The issue arises from improper sanitization of user-supplied SVG files during the Android APK...

CVE-2023-53066

In the Linux kernel, the following vulnerability has been resolved: qed/qedsriov: guard against NULL derefs from qediovgetvfinfo We have to make sure that the info returned by the helper is valid before using it. Found by Linux Verification Center linuxtesting.org with the SVACE static analysis...

MAL-2025-3598 Malicious code in font-impact (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 404db1db5b86b6ce6ed40f2169b12625d010c431f4610548c55dc053f5d43d69 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3596 Malicious code in @ringcx/agent-mfe-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32dc26e905c6298ce020698678835f03f2e5dfb8c63366729ba9e638b98d5abc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE CVE-2023-53066

In the Linux kernel, the following vulnerability has been resolved: qed/qedsriov: guard against NULL derefs from qediovgetvfinfo We have to make sure that the info returned by the helper is valid before using it. Found by Linux Verification Center linuxtesting.org with the SVACE static analysis...

MAL-2025-3593 Malicious code in client-utility-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f3ea30b384f30ddf174344cda1da28874f1f377efed1f312b34ba56b7bedd7aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3575 Malicious code in adobe-acrobat-sign (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 17d7f8480bfb87e856460e7dedfcbc5f53a5bce7d4c34225bb231dc41507678d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-53066

In the Linux kernel, the following vulnerability has been resolved: qed/qedsriov: guard against NULL derefs from qediovgetvfinfo We have to make sure that the info returned by the helper is valid before using it. Found by Linux Verification Center linuxtesting.org with the SVACE static analysis...

UBUNTU-CVE-2023-53066

In the Linux kernel, the following vulnerability has been resolved: qed/qedsriov: guard against NULL derefs from qediovgetvfinfo We have to make sure that the info returned by the helper is valid before using it. Found by Linux Verification Center linuxtesting.org with the SVACE static analysis...

CVE-2023-53066 qed/qed_sriov: guard against NULL derefs from qed_iov_get_vf_info

In the Linux kernel, the following vulnerability has been resolved: qed/qedsriov: guard against NULL derefs from qediovgetvfinfo We have to make sure that the info returned by the helper is valid before using it. Found by Linux Verification Center linuxtesting.org with the SVACE static analysis...

CVE-2023-53066

CVE-2023-53066 affects the Linux kernel in the qed_sriov path. The vulnerability arises from potential NULL dereferences in qed_iov_get_vf_info, and the fix guards against NULL pointers by validating the helper’s returned info before use. This is a local issue with the impact characterized as hig...

CVE-2023-53066 qed/qed_sriov: guard against NULL derefs from qed_iov_get_vf_info

In the Linux kernel, the following vulnerability has been resolved: qed/qedsriov: guard against NULL derefs from qediovgetvfinfo We have to make sure that the info returned by the helper is valid before using it. Found by Linux Verification Center linuxtesting.org with the SVACE static analysis...

CVE-2025-32974

XWiki is a generic wiki platform. In versions starting from 15.9-rc-1 to before 15.10.8 and from 16.0.0-rc-1 to before 16.2.0, the required rights analysis doesn't consider TextAreas with default content type. When editing a page, XWiki warns since version 15.9 when there is content on the page...

Malicious code in aegis-contracts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 012d98d433c475ff3012368e49e74b54c587fd81749e936cc898ba80a4d8d868 The OpenSSF Package Analysis project identified 'aegis-contracts' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2025-3574 Malicious code in aegis-contracts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 012d98d433c475ff3012368e49e74b54c587fd81749e936cc898ba80a4d8d868 The OpenSSF Package Analysis project identified 'aegis-contracts' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2025-3573 Malicious code in ui-platform-business-elements (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 89f863d731ba9d0cbfada890f27b8acb5ae30e8265c71236b451812cbf863be3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-37773

In the Linux kernel, the following vulnerability has been resolved: virtiofs: add filesystem context source name check In certain scenarios, for example, during fuzz testing, the source name may be NULL, which could lead to a kernel panic. Therefore, an extra check for the source name should be...

MAL-2025-3572 Malicious code in component-modernizr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d129d7d7e1054353b2ec57d812f644c8d4fbcbc5ad054685eff845776516d1ee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-49840

In the Linux kernel, the following vulnerability has been resolved: bpf, testrun: Fix alignment problem in bpfprogtestrunskb We got a syzkaller problem because of aarch64 alignment fault if KFENCE enabled. When the size from user bpf program is an odd number, like 399, 407, etc, it will cause the...