EUVD-2025-177383

Malicious code in paleobotany-commitlint-config-angular-ultra-nebula npm...

MAL-2025-190083 Malicious code in upgrade-dysonswarm-node-config-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cfb3957e784c8f64be9d84de653a91b11d80d6ffbf26fbc120b8b24133d2a07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176895

Malicious code in puppeteer-geckodriver-redshift-eslint-config npm...

EUVD-2025-176872

Malicious code in quantum-node-config-quito-cosmos npm...

EUVD-2025-176007

Malicious code in terser-sequelize-oberon-config npm...

EUVD-2025-179608

Malicious code in config-dactyl-foundation-sirius npm...

EUVD-2025-178531

Malicious code in hexo-commitlint-config-angular-nuxtjs-neptune npm...

EUVD-2025-175770

Malicious code in ursa-eslint-config-draco-kronos npm...

EUVD-2025-179654

Malicious code in command-blazar-node-config-phylogenetics npm...

EUVD-2025-178519

Malicious code in hologram-oscillation-config-nestjs npm...

EUVD-2025-177571

Malicious code in node-config-pulsar-buffer-luna npm...

Malicious code in supervisor-config-hapi-relay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 422ba3204291ed7b322002b6447d22612949989d91607e7eab0d2045e2f8adc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178803

Malicious code in futurology-unuk-config-stop npm...

EUVD-2025-177720

Malicious code in mysql-joviology-eslint-config-exoplanetology npm...

EUVD-2025-177322

Malicious code in parcel-panspermia-commitlint-config-angular-tectonophysics npm...

CVE-2025-60699

A buffer overflow vulnerability exists in the TOTOLINK A950RG Router firmware V5.9c.4592B20191022ALL within the global.so binary. The getSaveConfig function retrieves the httphost parameter from user input via websGetVar and copies it into a fixed-size stack buffer v13 using strcpy without...

PT-2025-46904

Name of the Vulnerable Software and Affected Versions Socket Firewall versions prior to 0.15.5 Description Socket Firewall is an HTTP/HTTPS proxy server designed to enforce security policies by blocking dangerous packages. Versions of Socket Firewall prior to 0.15.5 are susceptible to arbitrary...

SUSE SLES15 Security Update : podman (SUSE-SU-2025:4079-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4079-1 advisory. - CVE-2025-31133: Fixed container escape via 'masked path' abuse due to mount race conditions bsc1252376 - CVE-2025-52565: Fixed...

SUSE SLES15 Security Update : podman (SUSE-SU-2025:4080-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4080-1 advisory. - CVE-2025-31133: Fixed container escape via 'masked path' abuse due to mount race conditions bsc1252376 - CVE-2025-52565: Fixed...

📄 Logitech Streamlabs Desktop 1.19.6 CPU Exhaustion

Logitech Streamlabs Desktop version 1.19.6 has a vulnerability where importing a crafted .overlay file can cause uncontrolled CPU consumption, leading to a denial-of-service condition. The .overlay file is an archive containing a config.json configuration. By inserting an excessively large string...