12906 matches found
Security update for the Linux Kernel RT (Live Patch 0 for SLE 15 SP7)
This update for the Linux Kernel 6.4.0-1507005 fixes several issues. The following security issues were fixed: CVE-2025-38087: net/sched: fix use-after-free in tapriodevnotifier bsc1245504. CVE-2025-38001: netsched: hfsc: Address reentrant enqueue adding class to eltree twice bsc1244235...
Security update for the Linux Kernel RT (Live Patch 4 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-1506001014 fixes several issues. The following security issues were fixed: CVE-2025-38087: net/sched: fix use-after-free in tapriodevnotifier bsc1245504. CVE-2025-21999: proc: fix UAF in procgetinode bsc1242579. CVE-2025-38001: netsched: hfsc: Address...
PT-2025-36492
Name of the Vulnerable Software and Affected Versions: KioSoft "Stored Value" Unattended Payment Solutions affected versions not specified Description: KioSoft "Stored Value" Unattended Payment Solutions utilize vulnerable NFC cards. An attacker could potentially modify the balance on these cards...
Malicious code in bohr-web (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1951f7ba96d2d67ff96aa97e3fb6fe00615dbf39ba8b1b9fc822b33bdac69ba0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-44251 Malicious code in field_capture (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in jfrog-alfheim (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 81aec3e5e257dac330f6d3f73c310c476b4926e6cd0040f2ac70b7a4f45005aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in my-javascript-project (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 52eefb119e001e8686a1bde4aad7885b353649df1b9e39a1e27537c7ca14a980 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in moodle-core-lockscroll (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c4593d2f53dfa6444f6bc77ab415228cf1bb76f6ffc3e62b0973033f33bf3edd Any computer that has this package installed or running should be considered...
ECOVACS robot vacuums 安全漏洞
ECOVACS robot vacuums is a line of vacuum cleaners from the Chinese company ECOVACS. A security vulnerability exists in ECOVACS robot vacuums that stems from insecure Wi-Fi communication using predictable AES encryption keys...
The vulnerability of the vmci_transport_packet() function in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the vmcitransportpacket function in the Linux operating system’s kernel is related to errors during initialization of variables. Exploiting this vulnerability can allow an attacker to cause a service failure...
VIPER_2025
VIPER 2025 VIPER 2025 is an advanced, modular penetration...
vsock/vmci: Clear the vmci transport packet properly when initializing it
...
ksmbd: validate payload size in ipc response
...
SREC: Encrypted Semantic Super-Resolution Enhanced Communication
Semantic communication SemCom, as a typical paradigm of deep integration between artificial intelligence AI and communication technology, significantly improves communication efficiency and resource utilization efficiency. However, the security issues of SemCom are becoming increasingly prominent...
Insufficient validation in cross-origin communication (postMessage) in reveal.js version 3.9.1 and earlier allow attackers to perform cross-site scripting attacks.
...
ASoC: SOF: ipc4-topology: Harden loops for looking up ALH copiers
...
Malicious code in newrelic-infrastructure (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc689df21770af17a368dc724b21526759afb6d21614e0f7eb0033ef0ce430ec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in library-website (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 152fbdb0c3259bb6ed24b96039f38d3db3bc716822511da408febc45fc2e93a6 Any computer that has this package installed or running should be considered...
MAL-2025-45310 Malicious code in ngi-core (npm)
The package communicates with a domain associated with malicious activity...
CVE-2025-44017
"Gunosy" App contains a vulnerability where sensitive information may be included in the application's outbound communication. If a user accesses a crafted URL, an attacker may obtain the JWT JSON Web Token...