EUVD-2025-203506

Malicious code in swissid-common npm...

EUVD-2025-203507

Malicious code in sds-swissid-common npm...

MAL-2025-192583 Malicious code in swissid-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68ce12ad99bb87750b22a3aa2c0d4bae036e647f446f6c05eb46b7fad1571d13 The package swissid-common was found to contain malicious code. Source: ghsa-malware 2657ec223bbf476c870a3f34e60928d95b1512176e7762f2c01a9aa759f75d98...

MAL-2025-192582 Malicious code in sds-swissid-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfba6a19220522fe10bbf564a1b96c3b7da5de600c03e1e683976b0c6cd36aeb The package sds-swissid-common was found to contain malicious code. Source: ghsa-malware...

SUSE SLES16: binutils / binutils-devel / bpftool / bpftool-bash-completion / etc (SUSE-SU-2025:21195-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:21195-1 advisory. Changes in binutils: - Update to current 2.45 branch at 94cb1c075 to include fix for PR33584 a problem related to LTO vs fortran...

CVE-2025-55895

creationtimestamp| type| source ---|---|--- 2025-12-15 20:59:58+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115725592045370637...

CVE-2025-13824 Micro820®, Micro850®, Micro870® – Specialized Fuzzing Vulnerabilities

A security issue exists due to improper handling of malformed CIP packets during fuzzing. The controller enters a hard fault with solid red Fault LED and becomes unresponsive. Upon power cycle, the controller will enter recoverable fault where the MS LED and Fault LED become flashing red and...

ROS-20251215-7313

A vulnerability in the cifs.upcall function of the CIFS cifs-utils network file system mount utility package is related to the provisioning of a data element for an erroneous session. Exploitation of the vulnerability could allow an attacker to disclose protected information...

PT-2025-51237

Name of the Vulnerable Software and Affected Versions Versions affected versions not specified Description A security issue arises from improper handling of malformed CIP packets during fuzzing. This causes the controller to enter a hard fault, indicated by a solid red Fault LED and...

Rockwell Automation’s various products have security vulnerabilities

The Rockwell Automation Micro820, among others, is a programmable controller from Rockwell Automation. A security vulnerability exists in several Rockwell Automation products that stems from improper handling of malformed CIP packets, which could cause the controller to enter an unrecoverable fau...

com.aizuda:snail-job-client-common (>=1.0.0-beta1, <=1.6.0-jdk8), com.aizuda:snail-job-client-job-core (>=1.0.0-beta1, <=1.6.0-jdk8) +26 more potentially affected by CVE-2025-14674 via com.aizuda:snail-job-common-core (>=1.0.0-beta1, <=1.6.0-jdk8)

com.aizuda:snail-job-common-core MAVEN version =1.0.0-beta1, =1.0.0-beta1, =1.0.0-beta1, =1.0.0-beta1, =1.0.0-beta1, =1.0.0-beta1, =1.0.0-beta1, =1.1.0-beta1, =1.2.0-beta1, =1.0.0-beta1, =1.0.0-beta1, =1.0.0-beta1, =1.0.0-beta1, =1.0.0-beta1, =1.6.0 and more Source cves: CVE-2025-14674 Source...

com.aizuda:snail-job-client-common (>=1.0.0-beta1, <=1.7.0-beta2), com.aizuda:snail-job-client-job-core (>=1.0.0-beta1, <=1.7.0-beta2) +29 more potentially affected by CVE-2025-14674 via com.aizuda:snail-job-common-core (>=1.0.0-beta1, <=1.7.0-beta2)

com.aizuda:snail-job-common-core MAVEN version =1.0.0-beta1, =1.0.0-beta1, =1.0.0-beta1, =1.0.0-beta1, =1.0.0-beta1, =1.7.0-beta1, =1.0.0-beta1, =1.0.0-beta1, =1.1.0-beta1, =1.2.0-beta1, =1.0.0-beta1, =1.0.0-beta1, =1.0.0-beta1, =1.0.0-beta1, =1.7.0-beta2 and more Source cves: CVE-2025-14674 Sour...

CVE-2025-14586

CVE-2025-14586 affects TOTOLINK X5000R 9.1.0cu.2089_B20211224. The vulnerability is in snprintf in /cgi-bin/cstecgi.cgi?action=exportOvpn&type=user, where manipulation of the User argument leads to an OS command injection. Remote exploitation is possible and has been publicly disclosed. Connected...

Insecure Deserialization

quantconnect.common is vulnerable to insecure deserialization. The vulnerability is due to insecure configuration of the TypeNameHandling property in the Json.NET library, which allows an attacker to exploit unsafe deserialization of crafted JSON payloads and potentially execute arbitrary code...

CVE-2025-14569

A vulnerability was detected in ggml-org whisper.cpp up to 1.8.2. Affected is the function readaudiodata of the file /whisper.cpp/examples/common-whisper.cpp. The manipulation results in use after free. The attack requires a local approach. The exploit is now public and may be used. The project w...

CVE-2025-14569

A vulnerability was detected in ggml-org whisper.cpp up to 1.8.2. Affected is the function readaudiodata of the file /whisper.cpp/examples/common-whisper.cpp. The manipulation results in use after free. The attack requires a local approach. The exploit is now public and may be used. The project w...

CVE-2025-63757

creationtimestamp| type| source ---|---|--- 2025-12-12 16:50:15+00:00| seen| https://gist.github.com/miora-sora/43c1c5616dd5b4f960a9d20296ef4833...

CVE-2025-13506

creationtimestamp| type| source ---|---|--- 2025-12-12 12:56:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7s56ikt5g2c...

CVE-2025-13969

creationtimestamp| type| source ---|---|--- 2025-12-12 08:23:59+00:00| seen| https://gist.github.com/Darkcrai86/265eb7c096a2c416e01abc91469fd357...

ppg-common (>=1.2.0, <=1.67.0) potentially affected by CVE-2025-67726 via tornado (4.5.0)

tornado PYPI version 4.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - ppg-common =1.2.0, =1.67.0 Source cves: CVE-2025-67726 Source advisory: OSV:PYSEC-2025-267...