Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

Updated ruby-rack packages fix security vulnerabilities

Possible Log Injection in Rack::CommonLogger. CVE-2025-25184 Escape Sequence Injection vulnerability in Rack lead to Possible Log Injection. CVE-2025-27111 Local File Inclusion in Rack::Static. CVE-2025-27610...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

EUVD-2025-198601

Malicious code in cbre-flow-common npm...

Malicious code in cbre-flow-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 947d73050012f020f6fdd2335ac7c8602c707fb84fb141fbfdd1e88a30ca3650 The package cbre-flow-common was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-190623 Malicious code in cbre-flow-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 947d73050012f020f6fdd2335ac7c8602c707fb84fb141fbfdd1e88a30ca3650 The package cbre-flow-common was found to contain malicious code. Source: ossf-package-analysis...

LLM-CSEC: Empirical Evaluation of Security in C/C++ Code Generated by Large Language Models

The security of code generated by large language models LLMs is a significant concern, as studies indicate that such code often contains vulnerabilities and lacks essential defensive programming constructs. This work focuses on examining and evaluating the security of LLM-generated code,...

arch/x86/kernel/cpu/common.c Heap Buffer Overflow DoS

The vulnerability of the setupsmap function in the arch/x86/kernel/cpu/common.c module on the x86 kernel of the Linux operating system is related to an uncontrolled and exploitable condition. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected...

OpenSCAP Libraries 1.4.3

The openscap project is a set of open source libraries that support the SCAP Security Content Automation Protocol set of standards from NIST. It supports CPE, CCE, CVE, CVSS, OVAL, and XCCDF...

CVE-2025-13136

creationtimestamp| type| source ---|---|--- 2025-11-22 09:19:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m67hqdgiui2k...

CVE-2025-11936

Improper input validation in the TLS 1.3 KeyShareEntry parsing in wolfSSL v5.8.2 on multiple platforms allows a remote unauthenticated attacker to cause a denial-of-service by sending a crafted ClientHello message containing duplicate KeyShareEntry values for the same supported group, leading to...

delve and golang security update

An update is available for golang, delve. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The Go Programming Language. Security Fixes: golang: archive/tar:...

JLSEC-2025-212 An issue was discovered in Mbed TLS before 2.24.0

An issue was discovered in Mbed TLS before 2.24.0. The verification of X.509 certificates when matching the expected common name the cn argument of mbedtlsx509crtverify with the actual certificate name is mishandled: when the subjecAltName extension is present, the expected name is compared to an...

AZL-70660 CVE-2025-40210 affecting package kernel for versions less than 6.6.112-1

In the Linux kernel, the following vulnerability has been resolved: Revert "NFSD: Remove the cap on number of operations per NFSv4 COMPOUND" I've found that pynfs COMP6 now leaves the connection or lease in a strange state, which causes CLOSE9 to hang indefinitely. I've dug into it a little, but ...

CVE-2025-12135

creationtimestamp| type| source ---|---|--- 2025-11-21 10:25:17+00:00| seen| https://gist.github.com/Darkcrai86/ed1fb6823be559a18a6bb36e28b17111...

PT-2026-37453

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A device leak occurs in the mtk-smi component during the common probe process. The issue arises when the reference taken while looking up the SMI device is not properly dropped during la...

CVE-2025-64524 CUPS rastertopclx Filter Vulnerable to Heap Buffer Overflow Leading to Potential Arbitrary Code Execution

cups-filters contains backends, filters, and other software required to get the cups printing service working on operating systems other than macos. In versions 2.0.1 and prior, a heap-buffer-overflow vulnerability in the rastertopclx filter causes the program to crash with a segmentation fault...

CVE-2025-64984

creationtimestamp| type| source ---|---|--- 2025-11-20 11:24:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m62ntbb3hw2j...

CVE-2025-64767

creationtimestamp| type| source ---|---|--- 2025-11-19 22:23:43+00:00| published-proof-of-concept| https://github.com/dajiaji/hpke-js/security/advisories/GHSA-73g8-5h73-26h4 2025-11-21 19:52:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m662o4dcbv2q 2025-11-22 01:34:02+00:00|...