Malicious code in elf-stats-ginger-wreath-646 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0736ed9611847ba4c5416cd0bd8ba33bae114769eec8947e7d58c85c3ce100c1 The package elf-stats-ginger-wreath-646 was found to contain malicious code. Source: ossf-package-analysis...

DEBIAN-CVE-2025-40214

In the Linux kernel, the following vulnerability has been resolved: afunix: Initialise sccindex in unixaddedge. Quang Le reported that the AFUNIX GC could garbage-collect a receive queue of an alive in-flight socket, with a nice repro. The repro consists of three stages. 1 1-a. Create a single...

DNS Visibility Gap: Misconfigurations That Firewalls Miss in Network Security

...

CVE-2025-40214 af_unix: Initialise scc_index in unix_add_edge().

In the Linux kernel, the following vulnerability has been resolved: afunix: Initialise sccindex in unixaddedge. Quang Le reported that the AFUNIX GC could garbage-collect a receive queue of an alive in-flight socket, with a nice repro. The repro consists of three stages. 1 1-a. Create a single...

CVE-2025-40214

The CVE CVE-2025-40214 is tied to the Linux kernel AF_UNIX garbage-collection path. According to the connected sources, the vulnerability stemmed from unix_add_edge() not initializing the scc_index, which could cause unix_vertex_dead() to misclassify sockets in in-flight cycles, enabling incorrec...

Malicious code in volume-viz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6c36ba7964bc7d977fc3eba85d86488002805ca4ffddddb94863afd1b754902 The package volume-viz was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-192372 Malicious code in volume-viz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6c36ba7964bc7d977fc3eba85d86488002805ca4ffddddb94863afd1b754902 The package volume-viz was found to contain malicious code. Source: ossf-package-analysis...

[SECURITY] Fedora 42 Update: stb-0^20251025gitf1c79c0-2.fc42

Single-file public domain libraries for C/C++...

[SECURITY] Fedora 43 Update: stb-0^20251025gitf1c79c0-2.fc43

Single-file public domain libraries for C/C++...

Malicious code in elf-stats-festive-sparkler-275 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3adaeddf56adca42174e060e74d72cba7c7afff543772ffc7037f6329fe0359 The package elf-stats-festive-sparkler-275 was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192294 Malicious code in elf-stats-festive-sparkler-275 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3adaeddf56adca42174e060e74d72cba7c7afff543772ffc7037f6329fe0359 The package elf-stats-festive-sparkler-275 was found to contain malicious code. Source: ghsa-malware...

XunRuiCMS 代码注入漏洞

XunRuiCMS XunRuiCMS is a content management system for individual developers of XunRuiCMS. A code injection vulnerability exists in XunRuiCMS 4.7.1 and earlier versions, which stems from incorrect manipulation of the component Domain Name Binding Page in the file /admin79f2ec220c7e.php, which cou...

PT-2025-49029

Name of the Vulnerable Software and Affected Versions dayrui XunRuiCMS versions up to 4.7.1 Description A cross site scripting issue exists in dayrui XunRuiCMS. The issue is located in the Domain Name Binding Page, specifically within the file /admin79f2ec220c7e.php?c=api&m=demo&name=mobile. The...

Oracle Linux 10 : python-kdcproxy (ELSA-2025-21142)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2025-21142 advisory. - Use DNS discovery for declared realms only CVE-2025-59088 Resolves: RHEL-122777 Tenable has extracted the preceding description block directly from...

Malicious code in self-service-portal-prod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e4de1ac227f5bbfb5b8aead3c1eeccbaeaa77d15ff7575b83b4d7899c380eda The package self-service-portal-prod was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192288 Malicious code in self-service-portal-prod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e4de1ac227f5bbfb5b8aead3c1eeccbaeaa77d15ff7575b83b4d7899c380eda The package self-service-portal-prod was found to contain malicious code. Source: ghsa-malware...

Malicious code in elf-stats-frostbitten-pantry-235 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6af87e8804f9d49a6b71f2546c64657549faef299f6cf99e9dfc3bf7af21a905 The package elf-stats-frostbitten-pantry-235 was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-192281 Malicious code in elf-stats-frostbitten-pantry-235 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6af87e8804f9d49a6b71f2546c64657549faef299f6cf99e9dfc3bf7af21a905 The package elf-stats-frostbitten-pantry-235 was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in elf-stats-aurora-toy-659 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d91ae0169f112f2142e3793ee5f5fea9aebc352c6969c276ba2e5d31bd03f2a The package elf-stats-aurora-toy-659 was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-192278 Malicious code in elf-stats-aurora-toy-659 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d91ae0169f112f2142e3793ee5f5fea9aebc352c6969c276ba2e5d31bd03f2a The package elf-stats-aurora-toy-659 was found to contain malicious code. Source: ossf-package-analysis...