MAL-2025-49083 Malicious code in esg-odf-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55bab458b0a0de6c4110ff28d0306c52de1e31805de0c76f8f188e2c823b28b7 The package esg-odf-common was found to contain malicious code. Source: ghsa-malware 610621a777be160598ba0a95213ed5f2e5645ce0806077fb9f2d1ef65fcdddfb...

EUVD-2025-36886

Malicious code in esg-odf-common npm...

Malicious code in esg-odf-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55bab458b0a0de6c4110ff28d0306c52de1e31805de0c76f8f188e2c823b28b7 The package esg-odf-common was found to contain malicious code. Source: ghsa-malware 610621a777be160598ba0a95213ed5f2e5645ce0806077fb9f2d1ef65fcdddfb...

DEBIAN-CVE-2025-58187

Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate. This affects programs which validate arbitrary certificate chains...

Malicious Package

Overview ucbuzz-web-common is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2025-49062 Malicious code in ucbuzz-web-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 822537afdb770182527cdfc92395d4fcc57ab88a98e6958ba68f93eb84f119ef The package ucbuzz-web-common was found to contain malicious code. Source: ghsa-malware...

Malicious code in ucbuzz-web-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 822537afdb770182527cdfc92395d4fcc57ab88a98e6958ba68f93eb84f119ef The package ucbuzz-web-common was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-36845

Malicious code in ucbuzz-web-common npm...

Experts Reports Sharp Increase in Automated Botnet Attacks Targeting PHP Servers and IoT Devices

Cybersecurity researchers are calling attention to a spike in automated attacks targeting PHP servers, IoT devices, and cloud gateways by various botnets such as Mirai, Gafgyt, and Mozi. "These automated campaigns exploit known CVE vulnerabilities and cloud misconfigurations to gain control over...

BELL-CVE-2025-40052

Bulletin has no description...

CVE-2025-62798

creationtimestamp| type| source ---|---|--- 2025-10-29 00:08:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4c5rqoabv2b...

CVE-2025-11705

creationtimestamp| type| source ---|---|--- 2025-10-28 17:02:54+00:00| seen| https://gist.github.com/Darkcrai86/4259b3a6416596ae48eb004f07020102 2025-10-29 05:45:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4cqmsbnhr2n 2025-10-30 06:18:05+00:00| seen|...

EUVD-2025-36515

IPFire versions prior to 2.29 Core Update 198 contain a stored cross-site scripting XSS vulnerability that allows an authenticated attacker to inject arbitrary JavaScript code through the TLSHOSTNAME parameter when adding a new DNS entry. When a user adds a DNS entry, the application issues an HT...

Around 70 countries sign new UN Cybercrime Convention—but not everyone’s on board

Around 70 countries have signed the new United Nations UN Convention against Cybercrime—the first global treaty designed to combat cybercrime through unified international rules and cooperation. The treaty needs at least 40 UN member states to ratify it before it becomes international law. Once t...

DEBIAN-CVE-2025-40064

In the Linux kernel, the following vulnerability has been resolved: smc: Fix use-after-free in pnetfindbasendev. syzbot reported use-after-free of netdevice in pnetfindbasendev, which was called during connect. 0 smcpnetfindismresource fetches skdstgetsk-dev and passes down to pnetfindbasendev,...

PT-2025-48275

Name of the Vulnerable Software and Affected Versions Mattermost versions 10.5.x through 10.5.12 Mattermost versions 10.11.x through 10.11.4 Mattermost versions 10.12.x through 10.12.1 Mattermost versions 11.0.x through 11.0.2 Description The software does not properly restrict access to team ema...

ROS-20251028-01

A vulnerability in the Webmin hosting control panel CGI request handler is associated with errors in processing input data. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code with root privileges...

Fedora: Security Advisory (FEDORA-2025-b93734b6b8)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2025-cf4f628312)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-55752

creationtimestamp| type| source ---|---|--- 2025-10-27 17:51:36+00:00| seen| https://seclists.org/oss-sec/2025/q4/75 2025-10-27 19:11:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m474q3zn6m23 2025-10-27 19:28:14+00:00| seen|...