Important: git

Issue Overview: When a user clones an untrusted repository and runs Gitk without additional command arguments, any writable file can be created and truncated. The option "Support per-file encoding" must have been enabled. The operation "Show origin of this line" is affected as well, regardless of...

Linux Distros Unpatched Vulnerability : CVE-2025-38131

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - coresight: prevent deactivate active config while enabling the config While enable active config via cscfgcsdevenableactiveconfig, active config could be...

Linux Distros Unpatched Vulnerability : CVE-2022-1706

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in Ignition where ignition configs are accessible from unprivileged containers in VMs running on VMware products. This issue is only...

AutoConnect 安全漏洞

AutoConnect is an Arduino library by the individual developer Hieromon Ikasamo. A security vulnerability exists in AutoConnect version 1.4.2, which stems from the AutoConnect web interface /ac/config that allows execution of HTML/JS code in a specially crafted network SSID, potentially leading to...

CLSA-2025-1754411479 Fix CVE(s): CVE-2025-48384

SECURITY UPDATE: security vulnerability - debian/patches/CVE-2025-48384.patch: quote values containing CR character in config to prevent unintended stripping of CR - CVE-2025-48384...

VulnCheck KEV: CVE-2022-40799

Data Integrity Failure in 'Backup Config' in D-Link DNR-322L = 2.60B15 allows an authenticated attacker to execute OS level commands on the device...

MAL-2025-6730 Malicious code in internal-newrelic-config (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in internal-newrelic-config (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in playwright-config-pdffiller (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-6751 Malicious code in playwright-config-pdffiller (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in eslint-config-pdffiller (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-6719 Malicious code in eslint-config-pdffiller (npm)

The package communicates with a domain associated with malicious activity...

SUSE-SU-2025:02592-1 Security update for cosign

This update for cosign fixes the following issues: Update to version 2.5.3 jscSLE-23879: - CVE-2025-46569: Fixed OPA server Data API HTTP path injection of Rego bsc1246725 Changelog: Update to 2.5.3: - Add signing-config create command 4280 - Allow multiple services to be specified for trusted-ro...

MAL-2025-6390 Malicious code in eslint-config-pdffiller-typescript (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bd433611287b0e5010c855eaeac600cc58e87febefac7a8fdcb27568a25d29f2 The OpenSSF Package Analysis project identified 'eslint-config-pdffiller-typescript' @ 999.0.0 npm as malicious. It is considered malicious...

Malicious code in @sangith/eslint-config (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-6718 Malicious code in epic-fortnite-webpack-config (npm)

The package communicates with a domain associated with malicious activity...

DRUPAL-CONTRIB-2025-093

This module enables you to access an edit page for a config page. The module doesn't sufficiently check the access permissions hookENTITYTYPEaccess wasn't taken into account. This vulnerability is mitigated by the fact that an attacker must have a role with the permission "edit ID config page" an...

Malicious code in webpack-server-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4670ee3b5e87d1f4c57be17f95c864d3412ab82f6f6388c35cacf173fce117c2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6382 Malicious code in webpack-server-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4670ee3b5e87d1f4c57be17f95c864d3412ab82f6f6388c35cacf173fce117c2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview webpack-server-config is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...