Malicious code in elf-stats-shimmering-lantern-668 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac0bf489feb2d390c8580fca8ed4a6840dd7b673f7b427c7644e0004854dd8d3 The package elf-stats-shimmering-lantern-668 was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-191982 Malicious code in elf-stats-ginger-hammer-326 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b381aa5a37f1282740de384eeff72f5f4d3e57918e530d486989909249b8c821 The package elf-stats-ginger-hammer-326 was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in elf-stats-frosty-candy-393 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9995d6c66e999d598020c6fa5202b69c01b763a586129b2190e99153e479047 The package elf-stats-frosty-candy-393 was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in elf-stats-sparkly-garland-970 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c51b40bdf891b2ad849d25f291b27e11a9c8dcae571ad90c75ee7d7f0696e248 The package elf-stats-sparkly-garland-970 was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in elf-stats-nutmeg-chimney-245 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f39faacdb6a0a95dc4e8db69c27bc4a0e06a7b11ac0f6c48bf35d1667cfa1cf The package elf-stats-nutmeg-chimney-245 was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-191983 Malicious code in elf-stats-nutmeg-chimney-245 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f39faacdb6a0a95dc4e8db69c27bc4a0e06a7b11ac0f6c48bf35d1667cfa1cf The package elf-stats-nutmeg-chimney-245 was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-191976 Malicious code in elf-stats-sleighing-bow-514 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ffb75cc156e871168a4a171f65cea2e9a8b2290b2151c079594efdd92945f64 The package elf-stats-sleighing-bow-514 was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in elf-stats-fuzzy-fir-973 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 215a95aefa023baa8138a02bd7d68bbdd09b9f0bdff4595f45cdd42a2997255e The package elf-stats-fuzzy-fir-973 was found to contain malicious code. Source: ghsa-malware...

Malicious code in karemm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdd5f17df1d0a4a9093ad436f4dafa59a288c2c650f7f1dff5cd36af67b5e98f The package karemm2 was found to contain malicious code. Source: ossf-package-analysis 4b8bdcb09150b560d85e5ddba2a0f76f1f26e6a330c437c93d4cd8b7560a2d...

MAL-2025-191947 Malicious code in karemz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0210683c3480535deb828dc6e3f758815b2a57ae4a50c37dca6443ad61623aa4 The package karemz was found to contain malicious code. Source: ossf-package-analysis 0ea2cd139758da9c9339894a56f0250a834c2fb01f4b25c9e398daef8c61c99...

Malicious code in kkkarem (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5221f3ec4ce8c314da6ded901d34c1ef2a0f7822bbec42d09a218885c47b41b2 The package kkkarem was found to contain malicious code. Source: ossf-package-analysis 85f2f16bc0953b5738e5248e16c823f06c7e3e9805d0e85726a59b9d72a4f3...

Socomec DIRIS Digiware M-70 Denial of Service Vulnerability (CNVD-2025-30457)

The Socomec DIRIS Digiware M-70 is a communication gateway device that serves as an access point for the DIRIS Digiware system, which combines 24VDC power and communication functions in a single unit. A denial of service vulnerability exists in the Socomec DIRIS Digiware M-70, which stems from...

RHEL 8 : firefox (RHSA-2025:22367)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2025:22367 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox:...

CVE-2025-65842

The Aquarius HelperTool 1.0.003 privileged XPC service on macOS contains multiple flaws that allow local privilege escalation. The service accepts XPC connections from any local process without validating the client's identity, and its authorization logic incorrectly calls AuthorizationCopyRights...

EUVD-2025-200312

Inappropriate implementation in WebRTC in Google Chrome prior to 143.0.7499.41 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. Chromium security severity: Low...

CVE-2025-13639

Inappropriate implementation in WebRTC in Google Chrome prior to 143.0.7499.41 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. Chromium security severity: Low...

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, Inc USA. A security vulnerability exists in Google Chrome prior to version 143.0.7499.41, which stems from an improper implementation of WebRTC and could allow a remote attacker to arbitrarily read or write through specially crafted HTML pages...

firefox: thunderbird: Use-after-free in the WebRTC: Audio/Video component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the WebRTC: Audio/Video component...

CVE-2025-54850

Socomec DIRIS Digiware M-70 (firmware 1.6.9) exposes a DoS vulnerability in its Modbus TCP and Modbus RTU over TCP services. An unauthenticated attacker can send a crafted sequence of Modbus RTU over TCP messages to port 503 that uses the Write Single Register function (code 6) to modify register...

CVE-2025-41739 CODESYS Control - Linux/QNX SysSocket flaw

An unauthenticated remote attacker, who beats a race condition, can exploit a flaw in the communication servers of the CODESYS Control runtime system on Linux and QNX to trigger an out-of-bounds read via crafted socket communication, potentially causing a denial of service...