13357 matches found
Malicious code in @kahoot-frontend/builder-common (npm)
The package @kahoot-frontend/builder-common was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f53ccdf6a282cfb91d99e8cccd2eea71cc0e2af65b1838e33733b3b872cec92e Any computer that has this package installed or running should be...
Malicious Package
Overview @kahoot-frontend/builder-common is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and th...
MAL-2025-47524 Malicious code in @kahoot-frontend/builder-common (npm)
The package @kahoot-frontend/builder-common was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f53ccdf6a282cfb91d99e8cccd2eea71cc0e2af65b1838e33733b3b872cec92e Any computer that has this package installed or running should be...
Ensure That a Common User Cannot Use pkexec for Privilege Escalation
The pkexec command enables a common user to have the permissions of the superuser or other users. After the authentication is successful, the common user runs the corresponding program with the permissions of the superuser. The pkexec command provides a convenient way for users to change their...
MAL-2025-47516 Malicious code in vault-hux-common (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f0e642811b789c4f724d3169822154751db4b210ded1f45f3eda9396725cb30e The OpenSSF Package Analysis project identified 'vault-hux-common' @ 9000.0.0 npm as malicious. It is considered malicious because: - The packag...
Malicious code in vault-hux-common (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f0e642811b789c4f724d3169822154751db4b210ded1f45f3eda9396725cb30e The OpenSSF Package Analysis project identified 'vault-hux-common' @ 9000.0.0 npm as malicious. It is considered malicious because: - The packag...
CVE-2025-21484
creationtimestamp| type| source ---|---|--- 2025-09-24 15:53:07+00:00| seen| Telegram/j2l8d6qe1QrgVFL7uh2A01P1R1oUKtw8we6Q5j5mnTiQWU...
Important: Red Hat Security Advisory: kpatch-patch-4_18_0-477_67_1, kpatch-patch-4_18_0-477_81_1, kpatch-patch-4_18_0-477_89_1, and kpatch-patch-4_18_0-477_97_1 security update
An update for multiple packages is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...
CVE-2025-9031
creationtimestamp| type| source ---|---|--- 2025-09-24 08:51:38+00:00| seen| Telegram/2Q6hg8sCOLJnllunR2uxdjJCbVbi4ToecJ5LYI9GrXIFYc...
CVE-2025-7414
creationtimestamp| type| source ---|---|--- 2025-09-24 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-09-24 2025-10-01 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-10-01 2025-10-02 00:00:00+00:00| seen| The Shadowserver...
Security update for frr
This update for frr fixes the following issues: CVE-2024-55553: excessive resource consumption may lead to denial of service due to repeated RIB revalidation when processing several RPKI updates bsc1235237. Patch Instructions: To install this SUSE update use the SUSE recommended installation...
PT-2025-39074
🔵 Ammonia, Mutation XSS, CVE-2025-42581 Low https://t.co/YUWArRZLdF...
GHSA-GWRF-JF3H-W649 vulnerabilities
Vulnerabilities for packages: newrelic-fluent-bit-output, sftpgo-plugin-pubsub, confluent-common-docker, blobfuse2, hivemind, sftpgo-plugin-geoipfilter, kserve-rest-proxy, kube-vip-cloud-provider, kubeflow-katib, nats, vault-k8s, docker-credential-ecr-login, container-object-storage-interface,...
CVE-2025-47906 vulnerabilities
Vulnerabilities for packages: newrelic-fluent-bit-output, sftpgo-plugin-pubsub, confluent-common-docker, blobfuse2, hivemind, sftpgo-plugin-geoipfilter, kserve-rest-proxy, kube-vip-cloud-provider, kubeflow-katib, nats, vault-k8s, docker-credential-ecr-login, container-object-storage-interface,...
GHSA-GWRF-JF3H-W649 vulnerabilities
Vulnerabilities for packages: checksec, apm-server-fips, terraform-provider-time, php-fpmexporter, secrets-store-csi-driver-provider-aws, docker-credential-ecr-login, azurefile-csi-fips, karpenter-fips, mattmoor-chainit, terraform-provider-tls-fips, azuredisk-csi-fips, nvidia-nsight-compute-12.9,...
BELL-CVE-2025-39842
Bulletin has no description...
SUSE CVE-2025-50100
unknown...
CVE-2025-26516
StorageGRID formerly StorageGRID Webscale versions prior to 11.8.0.15 and 11.9.0.8 are susceptible to a Denial of Service vulnerability. Successful exploit could allow an unauthenticated attacker to cause a Denial of Service on the Admin node...
CVE-2025-39838 cifs: prevent NULL pointer dereference in UTF16 conversion
In the Linux kernel, the following vulnerability has been resolved: cifs: prevent NULL pointer dereference in UTF16 conversion There can be a NULL pointer dereference bug here. NULL is passed to cifssfumakenode without checks, which passes it unchecked to cifsstrnduptoutf16, which in turn passes ...