12902 matches found
PT-2025-39246
Name of the Vulnerable Software and Affected Versions Magnetism Studios Endurance versions up to 3.3.0 Description A security issue exists in Magnetism Studios Endurance on macOS. The loadModuleNamed:WithReply function within the file...
Google Chrome WebRTC Post-Release Reuse Vulnerability
Google Chrome is a web browser developed by Google, known for being fast, secure and personalized, with support for multi-device synchronization and smart tool integration. Google Chrome suffers from a post-release reuse vulnerability that originates from post-release reuse in WebRTC, which can b...
Malicious code in bgrc (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-47595 Malicious code in presto-ui (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 398ff3cee5d004d3c6125bf23f331dbacde6930e8bb958186d396b20a1e2c00b Any computer that has this package installed or running should be considered...
MAL-2025-47584 Malicious code in dotenv-light (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ae938c214e61a6e70c595df567e32105d5c5eebb0cd147deae6c5f7fe91c75c5 Any computer that has this package installed or running should be considered...
Malicious code in ten99policy-node (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
Malicious code in funny-font-wow (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 476f2be479b43f09e5f3955a6404c84db43a4b9a81eee04f4916668d38f4bbfa Any computer that has this package installed or running should be considered...
Malicious code in paypal-postman-lib (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2b733a611e3d27e56f4c6ee549bbcf3d88a1c823512c13797440c4c13f2712c The package's index.js imports os, fs, and https at the top level and read...
MAL-2025-47513 Malicious code in @bgrc/kyc-theme (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 491ac58a40b45ff06a00ad44a33a15bd95394c8fde64034d150fb31433a18380 The OpenSSF Package Analysis project identified '@bgrc/kyc-theme' @ 9000.0.2 npm as malicious. It is considered malicious because: - The package...
Towards Adapting Federated and Quantum Machine Learning for Network Intrusion Detection: a Survey
This survey explores the integration of Federated Learning FL with Network Intrusion Detection Systems NIDS, with particular emphasis on deep learning and quantum machine learning approaches. FL enables collaborative model training across distributed devices while preserving data privacy-a critic...
rhel-lightspeed: Improper Access Control in Lightspeed History Management Allows Local Privilege Manipulation
A flaw was found in the Lightspeed history service. Insufficient access controls allow a local, unprivileged user to access and manipulate the chat history of another user on the same system. By abusing inter-process communication calls to the history service, an attacker can view, delete, or...
CVE-2025-5962
A flaw was found in the Lightspeed history service. Insufficient access controls allow a local, unprivileged user to access and manipulate the chat history of another user on the same system. By abusing inter-process communication calls to the history service, an attacker can view, delete, or...
CVE-2025-5962 Rhel-lightspeed: improper access control in lightspeed history management allows local privilege manipulation
A flaw was found in the Lightspeed history service. Insufficient access controls allow a local, unprivileged user to access and manipulate the chat history of another user on the same system. By abusing inter-process communication calls to the history service, an attacker can view, delete, or...
CVE-2025-5962 Rhel-lightspeed: improper access control in lightspeed history management allows local privilege manipulation
A flaw was found in the Lightspeed history service. Insufficient access controls allow a local, unprivileged user to access and manipulate the chat history of another user on the same system. By abusing inter-process communication calls to the history service, an attacker can view, delete, or...
CVE-2025-5962
CVE-2025-5962 affects Lightspeed history service. A local, unprivileged user can abuse inter-process communication with the history service to view, delete, or inject history entries, potentially manipulating another user’s chat history and enabling privilege misuse or unauthorized command execut...
CVE-2025-34189
Vasion Print formerly PrinterLogic Virtual Appliance Host versions prior to 1.0.735 and Application versions prior to 20.0.1330 macOS/Linux client deployments contain a vulnerability in the local inter-process communication IPC mechanism. The software stores IPC request and response files inside...
tipc: fix kernel warning when sending SYN message
...
nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
...
CVE-2025-34189
Vasion Print formerly PrinterLogic Virtual Appliance Host versions prior to 1.0.735 and Application versions prior to 20.0.1330 macOS/Linux client deployments contain a vulnerability in the local inter-process communication IPC mechanism. The software stores IPC request and response files inside...