MAL-2025-49453 Malicious code in karemv1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9be53d7d069f1115ab0b8be4e3243af9ffb512d8a6dc0e31b5395852b1cbc3cd The package karemv1 was found to contain malicious code. Source: ghsa-malware 3f4cd13aca826d2f26c0f7927f298a62ee3f5a66fcc8567eff78027b93a02144 Any...

[SECURITY] Fedora 43 Update: bind-9.18.41-2.fc43

BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names to IP addresses; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server ...

KG-DF: A Black-Box Defense Framework against Jailbreak Attacks Based on Knowledge Graphs

With the widespread application of large language models LLMs in various fields, the security challenges they face have become increasingly prominent, especially the issue of jailbreak. These attacks induce the model to generate erroneous or uncontrolled outputs through crafted inputs, threatenin...

MAL-2025-49392 Malicious code in focusync-custom-controls (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83979de8b383c0a28ec2fea476c2842bafabcb6e5abfe06e4253a9c1ab713234 The package focusync-custom-controls was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in focusync-custom-controls (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83979de8b383c0a28ec2fea476c2842bafabcb6e5abfe06e4253a9c1ab713234 The package focusync-custom-controls was found to contain malicious code. Source: ossf-package-analysis...

CVE-2025-12908

Insufficient validation of untrusted input in Downloads in Google Chrome on Android prior to 140.0.7339.80 allowed a remote attacker to perform domain spoofing via a crafted HTML page. Chromium security severity: Low...

CVE-2025-12908

Insufficient validation of untrusted input in Downloads in Google Chrome on Android prior to 140.0.7339.80 allowed a remote attacker to perform domain spoofing via a crafted HTML page. Chromium security severity: Low...

Google Chrome 输入验证错误漏洞

Google Chrome is a web browser from Google, Inc USA. An input validation error vulnerability exists in versions of Google Chrome prior to 140.0.7339.80, which stems from insufficient validation of untrustworthy inputs and could lead to domain spoofing attacks...

EUVD-2025-38337

Insufficient validation of untrusted input in Downloads in Google Chrome on Android prior to 140.0.7339.80 allowed a remote attacker to perform domain spoofing via a crafted HTML page. Chromium security severity: Low...

CVE-2025-12908

Insufficient validation of untrusted input in Downloads in Google Chrome on Android prior to 140.0.7339.80 allowed a remote attacker to perform domain spoofing via a crafted HTML page. Chromium security severity: Low...

CVE-2025-12908

Insufficient validation of untrusted input in Downloads in Google Chrome on Android prior to 140.0.7339.80 allowed a remote attacker to perform domain spoofing via a crafted HTML page. Chromium security severity: Low...

CVE-2025-12908

Insufficient validation of untrusted input in Downloads in Google Chrome on Android prior to 140.0.7339.80 allowed a remote attacker to perform domain spoofing via a crafted HTML page. Chromium security severity: Low...

CVE-2025-12908

CVE-2025-12908 concerns Google Chrome for Android prior to 140.0.7339.80, where insufficient validation of untrusted input in the Downloads component could allow a remote attacker to perform domain spoofing via a crafted HTML page. The issue is documented with Chromium-based details and is graded...

ALPINE-CVE-2025-10230

A flaw was found in Samba, in the front-end WINS hook handling: NetBIOS names from registration packets are passed to a shell without proper validation or escaping. Unsanitized NetBIOS name data from WINS registration packets are inserted into a shell command and executed by the Samba Active...

AZL-69830 CVE-2025-10230 affecting package samba 4.18.3-2

A flaw was found in Samba, in the front-end WINS hook handling: NetBIOS names from registration packets are passed to a shell without proper validation or escaping. Unsanitized NetBIOS name data from WINS registration packets are inserted into a shell command and executed by the Samba Active...

CVE-2025-58149

A flaw was found in Xen. When passing through PCI devices, the detach logic in libxl won't remove access permissions to any 64bit memory BARs the device might have. As a result a domain can still have access to any 64bit memory BAR when such device is no longer assigned to the domain. A buggy or...

Malicious code in payments-notifications (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec2ff3c7a16e539813080b53ccec2b3531078fed7382156c676025c1188b9c7c The package payments-notifications was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-49390 Malicious code in payments-notifications (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec2ff3c7a16e539813080b53ccec2b3531078fed7382156c676025c1188b9c7c The package payments-notifications was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in payouts-report (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector becec2c60d20e2a05077102cbd8851073afafea45cec70202a05d3af32bb3ccc The package payouts-report was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-49391 Malicious code in payouts-report (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector becec2c60d20e2a05077102cbd8851073afafea45cec70202a05d3af32bb3ccc The package payouts-report was found to contain malicious code. Source: ossf-package-analysis...