MAL-2025-16420 Malicious code in cache-emulate-fire-encrypt-cache (npm)

The package cache-emulate-fire-encrypt-cache was found to contain malicious code...

MAL-2025-14356 Malicious code in alpha-encrypt-process-alert-phi (npm)

The package alpha-encrypt-process-alert-phi was found to contain malicious code...

MAL-2025-16975 Malicious code in chi-old-encrypt-grep-delta (npm)

The package chi-old-encrypt-grep-delta was found to contain malicious code...

MAL-2025-33923 Malicious code in star-cold-sudo-encrypt-void (npm)

The package star-cold-sudo-encrypt-void was found to contain malicious code...

MAL-2025-22793 Malicious code in humanapi-mongoose-encrypt (npm)

The package humanapi-mongoose-encrypt was found to contain malicious code...

Malicious code in small-encrypt-orchestrate-star-grid (npm)

The package small-encrypt-orchestrate-star-grid was found to contain malicious code...

Malicious code in delta-eta-encrypt-node-thread (npm)

The package delta-eta-encrypt-node-thread was found to contain malicious code...

Malicious code in enum-beta-java-double-encrypt (npm)

The package enum-beta-java-double-encrypt was found to contain malicious code...

Malicious code in cache-table-cloud-encrypt-reject (npm)

The package cache-table-cloud-encrypt-reject was found to contain malicious code...

MAL-2025-19643 Malicious code in encrypt-compile-signal-visualize-root (npm)

The package encrypt-compile-signal-visualize-root was found to contain malicious code...

MAL-2025-27458 Malicious code in ng-encrypt (npm)

The package ng-encrypt was found to contain malicious code...

cn.jarkata:jarkata-encrypt (=1.0.0), cn.ponfee:commons-core (>=1.1 <=1.4) +242 more potentially affected by CVE-2025-8885 via org.bouncycastle:bcprov-ext-jdk18on (>=1.71 <=1.77)

org.bouncycastle:bcprov-ext-jdk18on MAVEN version =1.71, =1.1, =2.4.1, =3.0.0 - com.clever-cloud.pulsar4s:pulsar4s-akka-streams2.12 =2.9.1 - com.clever-cloud.pulsar4s:pulsar4s-akka-streams2.13 =2.9.1 - com.clever-cloud.pulsar4s:pulsar4s-akka-streams3 =2.9.1 -...

CVE-2025-54799

Let's Encrypt client and ACME library written in Go Lego. In versions 4.25.1 and below, the github.com/go-acme/lego/v4/acme/api package thus the lego library and the lego cli as well don't enforce HTTPS when talking to CAs as an ACME client. Unlike the http-01 challenge which solves an ACME...

CVE-2025-54799 Lego does not enforce HTTPS

Let's Encrypt client and ACME library written in Go Lego. In versions 4.25.1 and below, the github.com/go-acme/lego/v4/acme/api package thus the lego library and the lego cli as well don't enforce HTTPS when talking to CAs as an ACME client. Unlike the http-01 challenge which solves an ACME...

AlmaLinux 9 : kernel (ALSA-2025:12746)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:12746 advisory. kernel: padata: fix UAF in padatareorder CVE-2025-21727 kernel: HID: intel-ish-hid: Fix use-after-free issue in ishtphidremove CVE-2025-21928 kernel: HID...

net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done

...

kernel: net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done

A vulnerability was found in the Linux kernel's management of network namespaces. By manipulating the lifecycle of network namespaces, an attacker could exploit this vulnerability to cause a system crash or leak sensitive system memory. Exploitation of this vulnerability requires that a user has...

ALSA-2025:12662 Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: padata: fix UAF in padatareorder CVE-2025-21727 kernel: HID: intel-ish-hid: Fix use-after-free issue in ishtphidremove CVE-2025-21928 kernel: HID: intel-ish-hid: Fix use-after-free issue ...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a reference counting issue in tipcaeadencrypt, which could lead to a system crash...

PT-2025-28655 · Ibm · Ibm Openpages With Watson

Name of the Vulnerable Software and Affected Versions: IBM OpenPages with Watson versions 8.3 through 9.0 Description: The issue concerns the storage of encrypted data using AES encryption and CBC mode, which could provide weaker than expected security. An authenticated remote attacker with acces...