MAL-2026-553 Malicious code in @snazah/davey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 236e7aae221a82bf01fa6f35766d0620cf72915540e8b589a91246d12706ba4d The package @snazah/davey was found to contain malicious code. Source: ghsa-malware bf3411f3e043990828ed141def8eac684a7942e9bbdfb6860c1f2a9c1e9e4a1b...

Malicious code in @snazah/davey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 236e7aae221a82bf01fa6f35766d0620cf72915540e8b589a91246d12706ba4d The package @snazah/davey was found to contain malicious code. Source: ghsa-malware bf3411f3e043990828ed141def8eac684a7942e9bbdfb6860c1f2a9c1e9e4a1b...

Malicious code in tripica-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2094e4c510f7d9f01acaf3dcdb4e2fda46afbe56f235d8168d81bcb984e52fc3 The package tripica-library was found to contain malicious code. Source: ossf-package-analysis...

MAL-2026-507 Malicious code in tripica-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2094e4c510f7d9f01acaf3dcdb4e2fda46afbe56f235d8168d81bcb984e52fc3 The package tripica-library was found to contain malicious code. Source: ossf-package-analysis...

BIT-NODE-MIN-2026-21636

A flaw in Node.js's permission model allows Unix Domain Socket UDS connections to bypass network restrictions when --permission is enabled. Even without --allow-net, attacker-controlled inputs such as URLs or socketPath options can connect to arbitrary local sockets via net, tls, or undici/fetch...

BIT-NODE-2026-21636

A flaw in Node.js's permission model allows Unix Domain Socket UDS connections to bypass network restrictions when --permission is enabled. Even without --allow-net, attacker-controlled inputs such as URLs or socketPath options can connect to arbitrary local sockets via net, tls, or undici/fetch...

EUVD-2026-4706

A security flaw has been discovered in pymumu SmartDNS up to 47.1. This vulnerability affects the function dnsdecoderrhead/dnsdecodeSVCBHTTPS of the file src/dns.c of the component SVBC Record Parser. The manipulation results in stack-based buffer overflow. It is possible to launch the attack...

Explainability Methods for Hardware Trojan Detection: A Systematic Comparison

Hardware trojan detection requires accurate identification and interpretable explanations for security engineers to validate and act on results. This work compares three explainability categories for gate-level trojan detection on the Trust-Hub benchmark: 1 domain-aware property-based analysis of...

Tenda W30E security vulnerabilities

The Tenda W30E is a router produced by the Chinese company Tenda. Versions of the Tenda W30E such as V2 and V16.01.0.195037 have security vulnerabilities. These vulnerabilities stem from the use of insecure cross-device resource sharing policies by management endpoints, which may allow attackers ...

MAL-2026-554 Malicious code in braintree-web-latest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72db908797ea8aa5f2c1c6d89356499ed46b677379648156e795ee3049b24b20 The package braintree-web-latest was found to contain malicious code. Source: ghsa-malware...

Malicious code in braintree-web-latest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72db908797ea8aa5f2c1c6d89356499ed46b677379648156e795ee3049b24b20 The package braintree-web-latest was found to contain malicious code. Source: ghsa-malware...

Malicious code in zabittest11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08a0084877b46812f2b43eaa232ecb1768d4b4415111ee65c741f2cc7acfa784 The package zabittest11 was found to contain malicious code. Source: ossf-package-analysis...

MAL-2026-500 Malicious code in zabittest11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08a0084877b46812f2b43eaa232ecb1768d4b4415111ee65c741f2cc7acfa784 The package zabittest11 was found to contain malicious code. Source: ossf-package-analysis...

[SECURITY] [DLA 4447-1] php7.4 security update

Debian LTS Advisory DLA-4447-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin January 24, 2026 https://wiki.debian.org/LTS Package : php7.4 Version : 7.4.33-1+deb11u10 CVE ID : CVE-2025-14178 Debian Bug : 1123574 Multiple security issues were found in PHP, a...

CVE-2025-70458

A DOM-based Cross-Site Scripting XSS vulnerability exists in the DomainCheckerApp class within domain/script.js of Sourcecodester Domain Availability Checker v1.0. The vulnerability occurs because the application improperly handles user-supplied data in the createResultElement method by using the...

SUSE SLED15: libvirt / libvirt-client / libvirt-client-qemu / libvirt-daemon / etc (SUSE-SU-2026:0279-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0279-1 advisory. - CVE-2025-13193: Fixed umask for 'qemu-img' when creating external inactive snapshots bsc1253703 -...

CVE-2025-70458

A DOM-based Cross-Site Scripting XSS vulnerability exists in the DomainCheckerApp class within domain/script.js of Sourcecodester Domain Availability Checker v1.0. The vulnerability occurs because the application improperly handles user-supplied data in the createResultElement method by using the...

Malicious code in oxnoxon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07667b579e49b5aa7dcc235c9e846cb1ea838af728878c44548d30a94b136dd3 The package oxnoxon was found to contain malicious code. Source: ghsa-malware dfafb8b040b2477ed33376b3c89b6854913025495027f4d32d6d8cd675ee84ec Any...

MAL-2026-493 Malicious code in oxnoxon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07667b579e49b5aa7dcc235c9e846cb1ea838af728878c44548d30a94b136dd3 The package oxnoxon was found to contain malicious code. Source: ghsa-malware dfafb8b040b2477ed33376b3c89b6854913025495027f4d32d6d8cd675ee84ec Any...

Security update for libvirt

This update for libvirt fixes the following issues: CVE-2025-13193: Fixed umask for 'qemu-img' when creating external inactive snapshots bsc1253703 CVE-2025-12748: Fixed check ACLs before parsing the whole domain XML bsc1253278 Patch Instructions: To install this SUSE update use the SUSE...