12907 matches found
UBUNTU-CVE-2025-38416
In the Linux kernel, the following vulnerability has been resolved: NFC: nci: uart: Set tty-discdata only in success path Setting tty-discdata before opening the NCI device means we need to clean it up on error paths. This also opens some short window if device starts sending data, even before...
Malicious code in @googlesitekit/assets (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 24f7823f5a513a40959c5bd9912593b27c89fb7f0d627ed9a66417d0f0707472 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-6238 Malicious code in @googlesitekit/assets (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 24f7823f5a513a40959c5bd9912593b27c89fb7f0d627ed9a66417d0f0707472 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in bufbuild-core (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ea2a6d8f75509bff2876bce466f00b9c7c810394f46e6479c6e2d8b19acc9557 The OpenSSF Package Analysis project identified 'bufbuild-core' @ 1.0...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a premature setting of tty-discdata in the NFC nci uart module, which could lead to a race condition...
On the Security of a Code-Based PIR Scheme
Private Information Retrieval PIR schemes allow clients to retrieve files from a database without disclosing the requested file's identity to the server. In the pursuit of post-quantum security, most recent PIR schemes rely on hard lattice problems. In contrast, the so called CB-cPIR scheme stand...
CVE-2025-53940 Quiet uses insecure, inconsistent verification on local backend token
Quiet is an alternative to team chat apps like Slack, Discord, and Element that does not require trusting a central server or running one's own. In versions 6.1.0-alpha.4 and below, Quiet's API for backend/frontend communication was using an insecure, not constant-time comparison function for tok...
CVE-2025-53940 Quiet uses insecure, inconsistent verification on local backend token
Quiet is an alternative to team chat apps like Slack, Discord, and Element that does not require trusting a central server or running one's own. In versions 6.1.0-alpha.4 and below, Quiet's API for backend/frontend communication was using an insecure, not constant-time comparison function for tok...
Malicious code in dctk (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-6288 Malicious code in jquery-tools (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in runtime-dom (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in hackerone-internal (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b8ddab95d549d0170f1470cafc839ea1bc22e62f6f41cb1c269d107682378db1 The OpenSSF Package Analysis project identified 'hackerone-internal' ...
Malicious code in plide (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in app-wheelify (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in player-component (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in terraform-cloud-action (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in askama (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6276 Malicious code in askama (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6221 Malicious code in creditorwatch (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8e512b66a32adafac8cde5bf65b57c17c80568658cec0a3a723b1cf9f5a46e2 Any computer that has this package installed or running should be considered...