MAL-2025-8899 Malicious code in @malware-test-sated-evade-colas-maneh/test-mlw3-sated-evade-colas-maneh (npm)

The package @malware-test-sated-evade-colas-maneh/test-mlw3-sated-evade-colas-maneh was found to contain malicious code...

MAL-2025-37697 Malicious code in umbrella-xerus-tzt825-project (npm)

The package umbrella-xerus-tzt825-project was found to contain malicious code...

MAL-2025-40401 Malicious code in ydtviguxcqwprkfk (npm)

The package ydtviguxcqwprkfk was found to contain malicious code...

MAL-2025-35267 Malicious code in test-mlw2-elves-merks (npm)

The package test-mlw2-elves-merks was found to contain malicious code...

MAL-2025-8472 Malicious code in @malware-test-aunts-ciggy-minae-dints/test-mlw3-aunts-ciggy-minae-dints (npm)

The package @malware-test-aunts-ciggy-minae-dints/test-mlw3-aunts-ciggy-minae-dints was found to contain malicious code...

MAL-2025-8697 Malicious code in @malware-test-guyed-usury-skeer-pareu/test-mlw3-guyed-usury-skeer-pareu (npm)

The package @malware-test-guyed-usury-skeer-pareu/test-mlw3-guyed-usury-skeer-pareu was found to contain malicious code...

MAL-2025-40587 Malicious code in yonder-kelp-vbl109-project (npm)

The package yonder-kelp-vbl109-project was found to contain malicious code...

MAL-2025-38016 Malicious code in uwebsocket.js (npm)

The package uwebsocket.js was found to contain malicious code...

Vulnerability fixed in WinRAR

Rarlab has fixed a vulnerability in WinRAR. The vulnerability is in the Windows version of WinRAR and involves a path traversal. This flaw allows attackers to execute arbitrary code using malicious archive files. This can lead to unauthorized access and control of affected systems. Public sources...

Linux Distros Unpatched Vulnerability : CVE-2025-37764

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/imagination: fix firmware memory leaks Free the memory used to hold the results of...

CVE-2025-45764

CVE-2025-45764 relates to jsrsasign v11.1.0, where the vulnerability described is a weakness due to weak encryption/cryptographic primitives. Multiple sources (NVD, CVE lists, RH advisory, PT-Security entry) confirm the issue but do not provide a confirmed fix version. The Red Hat entry notes mit...

CVE-2025-52169

creationtimestamp| type| source ---|---|--- 2025-07-22 03:54:24+00:00| seen| MISP/a3c5beab-b790-4171-8b4c-02c8a9678071 2025-09-09 11:53:43+00:00| seen| MISP/a3c5beab-b790-4171-8b4c-02c8a9678071...

CVE-2025-49831

creationtimestamp| type| source ---|---|--- 2025-07-18 17:07:27+00:00| seen| https://bsky.app/profile/buherator.bsky.social/post/3luawokctxi23 2025-08-07 13:45:02+00:00| published-proof-of-concept| https://t.me/truesecator/7307 2025-09-09 20:56:47+00:00| seen|...

GHSA-V62J-CXHH-FQ22

creationtimestamp| type| source ---|---|--- 2025-07-16 20:10:13+00:00| seen| https://gist.github.com/safer-bot/e99c53adf7d0285b48dff97d88c6c48e...

GHSA-V2XM-76PQ-PHCF

creationtimestamp| type| source ---|---|--- 2025-07-16 06:27:33+00:00| seen| https://gist.github.com/safer-bot/dcba38acd7b3b589f657659fa2a6b641...

MAL-2025-5918 Malicious code in grabcad-ui-elements (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ee52ce65db4a7eae9515a5809a148be63f55d250702390c261cd05e173132799 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-38194

In the Linux kernel, the following vulnerability has been resolved: jffs2: check that raw node were preallocated before writing summary Syzkaller detected a kernel bug in jffs2linknoderef, caused by fault injection in jffs2preallocrawnoderefs. jffs2sumwritesumnode doesn't check return value of...

CVE-2025-48952

creationtimestamp| type| source ---|---|--- 2025-07-04 23:15:32+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114797506148304132 2025-07-07 19:39:48+00:00| published-proof-of-concept| https://t.me/TheDarkWebInformer/18826 2025-07-07 19:40:08+00:00| seen|...

CVE-2025-38194

CVE-2025-38194 affects the Linux kernel’s JFFS2 file system. The issue arises when jffs2_sum_write_sumnode does not validate the return value of jffs2_prealloc_raw_node_refs, allowing an preallocation error to propagate into jffs2_link_node_ref and potentially cause a kernel BUG at fs/jffs2/nodel...

CVE-2025-38194 jffs2: check that raw node were preallocated before writing summary

In the Linux kernel, the following vulnerability has been resolved: jffs2: check that raw node were preallocated before writing summary Syzkaller detected a kernel bug in jffs2linknoderef, caused by fault injection in jffs2preallocrawnoderefs. jffs2sumwritesumnode doesn't check return value of...