RUSTSEC-2025-0154 `replit_ruspty` was removed from crates.io for malicious code

The OpenSSF Package Analysis project identified 'replitruspty' @ 1.0.0 crates.io as malicious. Version 2.0.0 was also published with malware. It is considered malicious because: The package communicates with a domain associated with malicious activity. The package executes one or more commands...

sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems

A flaw was found in the integration of Active Directory and the System Security Services Daemon SSSD on Linux systems. In default configurations, the Kerberos local authentication plugin sssdkrb5localauthplugin is enabled, but a fallback to the an2ln plugin is possible. This fallback allows an...

Use-After-Free

github.com/envoyproxy/envoy is vulnerable to a Use-After-Free. The vulnerability is due to improper handling of DNS cache operations in the Dynamic Forward Proxy implementation, where a completion callback can trigger new or remove existing DNS resolutions, which allows an attacker to cause...

Malicious code in replit_ruspty (crates.io)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 703ba59c0f40f937ba922d389d8beab406cc57110b792ed8d58ab7e8133c1712 The OpenSSF Package Analysis project identified 'replitruspty' @ 1.0.0 crates.io as malicious. It is considered malicious because: - The package...

MAL-2025-49350 Malicious code in replit_ruspty (crates.io)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 703ba59c0f40f937ba922d389d8beab406cc57110b792ed8d58ab7e8133c1712 The OpenSSF Package Analysis project identified 'replitruspty' @ 1.0.0 crates.io as malicious. It is considered malicious because: - The package...

Malicious code in pkg-with-optional (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a7273cf1aeda44bb1d1c2b9e1336bae21d1e1c6606ec940757a218d7761a81b The package pkg-with-optional was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-49349 Malicious code in pkg-with-optional (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a7273cf1aeda44bb1d1c2b9e1336bae21d1e1c6606ec940757a218d7761a81b The package pkg-with-optional was found to contain malicious code. Source: ossf-package-analysis...

CVE-2025-43376

A logic issue was addressed with improved state management. This issue is fixed in Safari 26, tvOS 26, watchOS 26, iOS 26 and iPadOS 26, visionOS 26. A remote attacker may be able to view leaked DNS queries with Private Relay turned on...

CVE-2025-43376

CVE-2025-43376 is a logic/state-management issue in WebKit/Safari affecting Apple platforms (Safari 26, WebKit updates across macOS Sonoma/Sequoia, iOS 26, iPadOS 26, tvOS/watchOS). The vulnerability could allow a remote attacker to view leaked DNS queries when Private Relay is enabled. Root caus...

CVE-2025-43376

A logic issue was addressed with improved state management. This issue is fixed in Safari 26, iOS 18.7.7 and iPadOS 18.7.7, iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. A remote attacker may be able to view leaked DNS queries with Private Relay turned on...

sssd security update

2.9.4-5.0.2.3 - Missing ntohs to service port Orabug: 37389651 - Restore default debug level for ssscache Orabug: 32810448 2.9.4-5.3 - Resolves: RHEL-112455 - p11child currently has an infinite timeout rhel-8.10.z - Resolves: RHEL-120292 - CVE-2025-11561 sssd: SSSD default Kerberos configuration...

Malicious code in antora-navigator-extension (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea546d0e4728489bf022620518fcacbdeead708393058151148b3434c4651256 The package antora-navigator-extension was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-49348 Malicious code in antora-navigator-extension (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea546d0e4728489bf022620518fcacbdeead708393058151148b3434c4651256 The package antora-navigator-extension was found to contain malicious code. Source: ossf-package-analysis...

Machine and Deep Learning for Indoor UWB Jammer Localization

Ultra-wideband UWB localization delivers centimeter-scale accuracy but is vulnerable to jamming attacks, creating security risks for asset tracking and intrusion detection in smart buildings. Although machine learning ML and deep learning DL methods have improved tag localization, localizing...

Malicious code in python-requirements-inspector (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8f26b5cd7ab7cb6a847edc1afec2dc496ac0f0bd3f592f2a98391365298c4fc6 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2025-49320 Malicious code in python-requirements-inspector (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8f26b5cd7ab7cb6a847edc1afec2dc496ac0f0bd3f592f2a98391365298c4fc6 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in faker-python (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2d88bf5533b182da36c514791c3e6841d83565d4d7f7065a09cdebddc2509453 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2025-49310 Malicious code in faker-python (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2d88bf5533b182da36c514791c3e6841d83565d4d7f7065a09cdebddc2509453 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in webswing-directdraw-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e79387f18b95e5ef7af4d75095dd85e7dedcff2c1e2a068795989cc559bbc695 The package webswing-directdraw-javascript was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-49309 Malicious code in webswing-directdraw-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e79387f18b95e5ef7af4d75095dd85e7dedcff2c1e2a068795989cc559bbc695 The package webswing-directdraw-javascript was found to contain malicious code. Source: ossf-package-analysis...