6203 matches found
CVE-2025-48593
In btahfclientcbinit of btahfclientmain.cc, there is a possible remote code execution due to a use after free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...
SUSE-SU-2025:4111-1 Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2022-50327: ACPI: processor: idle: Check acpifetchacpidev return value bsc1249859. - CVE-2022-50334: hugetlbfs: fix null-ptr-deref in hugetlbfsparseparam bsc1249857. ...
Cosmos: Economic DoS (Griefing) on IBC Relayers via `memo` Callback Gas Exploitation
Summary of Impact This vulnerability allows an attacker to bypass the relayer's simulation defense and force permissionless relayers to execute computationally expensive, but 'successful', transactions via the memo callback feature. This creates an asymmetric economic attack where the relayer's...
SUSE CVE-2025-40132
In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: sofsdw: Prevent jump to NULL addsidecar callback In createsdwdailink check that sofend-codecinfo-addsidecar is not NULL before calling it. The original code assumed that if includesidecar is true, the codec on that...
Malicious code in soap-callback-convict-middleware (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b4922425b583d08a372e377d0b2ee372ad8912aa2da5902301f4c5ec520af10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177060
Malicious code in primatology-callback-dactyl-telesto npm...
EUVD-2025-176623
Malicious code in robotics-callback-vulcan-html-webpack-plugin npm...
EUVD-2025-177747
Malicious code in mui-asthenosphere-callback-webdriver-manager npm...
Malicious code in warp-boson-callback-supercluster (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c95312546c36f2f246c3a72e1074b30f6d60280d986fd0cd2fc73fee683e7972 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176205
Malicious code in stop-callback-wezen-quark npm...
EUVD-2025-177707
Malicious code in native-callback-prettier-magellan npm...
EUVD-2025-178721
Malicious code in geodynamo-callback-less-eclipse npm...
EUVD-2025-178464
Malicious code in hyperion-terraforming-cli-callback npm...
EUVD-2025-179594
Malicious code in configstore-quark-sync-callback npm...
EUVD-2025-179908
Malicious code in callback-elara-hadron-jekyll npm...
EUVD-2025-179903
Malicious code in callback-saturnology-taphonomy-radiant npm...
EUVD-2025-179900
Malicious code in callback-uranology-fork-rigel npm...
Malicious code in bunyan-callback-pipe-mysql (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6c6a30fabd9762255234275520307cd432fbd98a02b188eba9e94d2334be6b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...