MAL-2025-155387 Malicious code in guras-da-bruneid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85784851a9440b9445b446a5b96dffc747c38bbf70b5a5648e7e5f2a246f0c23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-37298

Malicious code in da-lit npm...

Malicious code in da-lit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a04774b86c8891b58af17e5af350189f9eccba16758e14dd16e152dcd3e0bb7 The package da-lit was found to contain malicious code...

MAL-2025-49294 Malicious code in da-lit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a04774b86c8891b58af17e5af350189f9eccba16758e14dd16e152dcd3e0bb7 The package da-lit was found to contain malicious code...

CVE-2025-61932: Improper Verification of Source of a Communication Channel

Lanscope Endpoint Manager On-Premises Client program MR and Detection agent DA improperly verifies the origin of incoming requests, allowing an attacker to execute arbitrary code by sending specially crafted packets...

EUVD-2006-5269

Malware in sbrugna...

EUVD-2012-2986

Malware in sbrugna...

EUVD-2025-25565

Malicious code in bioql PyPI...

EUVD-2024-43323

Malicious code in bioql PyPI...

EUVD-2022-25074

Malicious code in bioql PyPI...

EUVD-2023-47718

Malicious code in bioql PyPI...

SUSE CVE-2025-38636

In the Linux kernel, the following vulnerability has been resolved: rv: Use strings in da monitors tracepoints Using DA monitors tracepoints with KASAN enabled triggers the following warning: BUG: KASAN: global-out-of-bounds in dotraceeventraweventeventdamonitor+0xd6/0x1a0 Read of size 32 at addr...

AZL-66611 CVE-2025-38636 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: rv: Use strings in da monitors tracepoints Using DA monitors tracepoints with KASAN enabled triggers the following warning: BUG: KASAN: global-out-of-bounds in dotraceeventraweventeventdamonitor+0xd6/0x1a0 Read of size 32 at addr...

UBUNTU-CVE-2025-38636

In the Linux kernel, the following vulnerability has been resolved: rv: Use strings in da monitors tracepoints Using DA monitors tracepoints with KASAN enabled triggers the following warning: BUG: KASAN: global-out-of-bounds in dotraceeventraweventeventdamonitor+0xd6/0x1a0 Read of size 32 at addr...

CVE-2025-38636: Out-of-bounds Read

In the Linux kernel, the following vulnerability has been resolved: rv: Use strings in da monitors tracepoints Using DA monitors tracepoints with KASAN enabled triggers the following warning: BUG: KASAN: global-out-of-bounds in dotraceeventraweventeventdamonitor+0xd6/0x1a0 Read of size 32 at addr...

CVE-2025-20696: Out-of-bounds Write

In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS09915215;...

CVE-2025-5713: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in SoluçõesCoop iSoluçõesWEB up to 20250519 and classified as problematic. Affected by this issue is some unknown functionality of the file /fluxos-dashboard of the component Flow Handler. The manipulation of the argument Descrição da solicitação leads to cross site...

CVE-2024-20060

In da, there is a possible escalation of privilege due to an incorrect status check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541749; Issue ID: ALPS08541754...

CVE-2024-49255

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Daniele Alessandra Da Reactions da-reactions allows Stored XSS.This issue affects Da Reactions: from n/a through = 5.1.5...

CVE-2024-20143

In V6 DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS09167056;...