EUVD-2025-36781

Malicious code in airbnb-base-typescript-prettier npm...

EUVD-2025-36782

Malicious code in airbnb-base-hf npm...

Malicious Package

Overview airbnb-base-hf is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2025-48976 Malicious code in airbnb-base-hf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8f8ad4bb6eac712ed5b01efbb7a4e455306cdf4f9114c6d604fa49af1f3c1875 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-40064

In the Linux kernel, the following vulnerability has been resolved: smc: Fix use-after-free in pnetfindbasendev. syzbot reported use-after-free of netdevice in pnetfindbasendev, which was called during connect. 0 smcpnetfindismresource fetches skdstgetsk-dev and passes down to pnetfindbasendev,...

Gitbook

Personal Pentesting Knowledge Base 👋 Welcome! This reposit...

UBUNTU-CVE-2025-40064

In the Linux kernel, the following vulnerability has been resolved: smc: Fix use-after-free in pnetfindbasendev. syzbot reported use-after-free of netdevice in pnetfindbasendev, which was called during connect. 0 smcpnetfindismresource fetches skdstgetsk-dev and passes down to pnetfindbasendev,...

CVE-2025-40064 smc: Fix use-after-free in __pnet_find_base_ndev().

In the Linux kernel, the following vulnerability has been resolved: smc: Fix use-after-free in pnetfindbasendev. syzbot reported use-after-free of netdevice in pnetfindbasendev, which was called during connect. 0 smcpnetfindismresource fetches skdstgetsk-dev and passes down to pnetfindbasendev,...

CVE-2025-40064 smc: Fix use-after-free in __pnet_find_base_ndev().

In the Linux kernel, the following vulnerability has been resolved: smc: Fix use-after-free in pnetfindbasendev. syzbot reported use-after-free of netdevice in pnetfindbasendev, which was called during connect. 0 smcpnetfindismresource fetches skdstgetsk-dev and passes down to pnetfindbasendev,...

CVE-2025-40064

CVE-2025-40064 (kernel): The Linux kernel smc subsystem had a use-after-free in __pnet_find_base_ndev() triggered during connect() via sk_dst_get(dst)->dev. The root cause was not holding the device’s refcount before calling smc_pnet_find_ism_resource() (and smc_pnet_find_roce_resource()). The...

[SECURITY] Fedora 41 Update: qt5-qtbase-5.15.17-2.fc41

Qt is a software toolkit for developing applications. This package contains base tools, like string, xml, and network handling...

Malicious Package

Overview sreadmin-base is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

EUVD-2025-36422

Malicious code in sreadmin-base npm...

Linux Distros Unpatched Vulnerability : CVE-2025-40064

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smc: Fix use-after-free in pnetfindbasendev. syzbot reported use-after-free of netdevice in pnetfindbasendev, which was called during connect. 0...

Fedora: Security Advisory (FEDORA-2025-551aed076e)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Malicious code in sreadmin-base (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b2b51756599b7bbc43536b940ffec7c6c41643e17ababeb1e976c191e166a0b The package sreadmin-base was found to contain malicious code. Source: ghsa-malware 14efd7a15525321ad3633779f0074512b8ca809312a5093e4d1be2e33a5219bb...

MAL-2025-48913 Malicious code in sreadmin-base (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b2b51756599b7bbc43536b940ffec7c6c41643e17ababeb1e976c191e166a0b The package sreadmin-base was found to contain malicious code. Source: ghsa-malware 14efd7a15525321ad3633779f0074512b8ca809312a5093e4d1be2e33a5219bb...

First Wap: A Surveillance Computer You’ve Never Heard Of

Mother Jones has a long article on surveillance arms manufacturers, their wares, and how they avoid export control laws: Operating from their base in Jakarta, where permissive export laws have allowed their surveillance business to flourish, First Wap's European founders and executives have quiet...

CVE-2025-12245 chatwoot Widget IFrameHelper.js initPostMessageCommunication origin validation

A vulnerability was identified in chatwoot up to 4.7.0. This vulnerability affects the function initPostMessageCommunication of the file app/javascript/sdk/IFrameHelper.js of the component Widget. The manipulation of the argument baseUrl leads to origin validation error. Remote exploitation of th...

Siemens SIMATIC Devices NULL Pointer Dereference (CVE-2024-36008)

In the Linux kernel, the following vulnerability has been resolved: ipv4: check for NULL idev in iprouteusehint syzbot was able to trigger a NULL deref in fibvalidatesource in an old tree. It appears the bug exists in latest trees. This plugin only works with Tenable.ot. Please visit...