MAL-2025-47628 Malicious code in com.unity.editor.tasks (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2025-60172

creationtimestamp| type| source ---|---|--- 2025-09-26 08:53:41+00:00| seen| Telegram/LbsMDZF5PauBCRdddvTqZ46FehG-glfBql-hpfWQfT6aBgY...

CVE-2025-10307

creationtimestamp| type| source ---|---|--- 2025-09-26 06:54:29+00:00| seen| Telegram/DQQceXtl0AA7mlMip2P2vRKBKF2Kakxy3wryGnlF4DDdGFU...

CVE-2025-10136

creationtimestamp| type| source ---|---|--- 2025-09-26 06:54:26+00:00| seen| Telegram/sjYCan-H5CR2DyK7eqDxRWMdhal--iHVFubdJKHbad3FGY...

CVE-2025-9984

creationtimestamp| type| source ---|---|--- 2025-09-26 04:56:29+00:00| seen| Telegram/SqAW4aB8WsRRpajqIrKWnumOCzhjpUygyuAUYvDh-V7m4...

RHSA-2025:1917

creationtimestamp| type| source ---|---|--- 2025-09-25 17:54:46+00:00| seen| Telegram/LauEJH8XtyvIR8Jsw9hJgU55K19UrIz3P1NwYRmy9ZMAio...

CVE-2014-0789

creationtimestamp| type| source ---|---|--- 2025-09-25 17:54:32+00:00| seen| Telegram/1qX3cFaohEHNv3oYLj3BrAuSBwX2kptpdRBzXVQdZsUE...

CERTFR-2025-ALE-013

creationtimestamp| type| source ---|---|--- 2025-09-25 17:34:24+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/115266136468526536...

CVE-2025-27261

creationtimestamp| type| source ---|---|--- 2025-09-25 14:55:23+00:00| seen| Telegram/yVxd3bsFxEulMEdPzN5SDwA78DgvBGmEzhWw7DlS2fHVEs...

CVE-2025-10467

creationtimestamp| type| source ---|---|--- 2025-09-25 13:53:17+00:00| seen| Telegram/1HzC-b87mAdUhvVO2CitKYtKZwe7MGoH-34LId2PsHVnJ0...

Bluetooth: hci_event: Ignore multiple conn complete events

...

Information Disclosure

github.com/neuvector/neuvector is vulnerable to information disclosure. The vulnerability is due to passwords in Java command parameters being logged in security event logs when a process rule violation occurs, which allows an attacker to obtain sensitive credentials...

Malicious Package

Overview @sev-ui-verse/event-bus is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...

MAL-2025-47534 Malicious code in @sev-ui-verse/event-bus (npm)

The package @sev-ui-verse/event-bus was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f2e7a58185f216b62d263ee5e9e75c527755dab55a83fcaf06401463b8bccabc Any computer that has this package installed or running should be considered ful...

Malicious code in @sev-ui-verse/event-bus (npm)

The package @sev-ui-verse/event-bus was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f2e7a58185f216b62d263ee5e9e75c527755dab55a83fcaf06401463b8bccabc Any computer that has this package installed or running should be considered ful...

Malicious Package

Overview @sev-ui-verse/event-tracking is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious code in @sev-ui-verse/event-tracking (npm)

The package @sev-ui-verse/event-tracking was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 456d3a4ed1bb864eafcf6a65c30be392f9dc9ac1342ab0c1cd51cc463f11ff7f Any computer that has this package installed or running should be considere...

CVE-2025-5717

An authenticated remote code execution RCE vulnerability exists in multiple WSO2 products due to improper input validation in the event processor admin service. A user with administrative access to the SOAP admin services can exploit this flaw by deploying a Siddhi execution plan containing...

kernel: RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction

In the Linux kernel, the following vulnerability has been resolved: RDMA/iwcm: Fix use-after-free of work objects after cmid destruction The commit 59c68ac31e15 "iwcm: free cmid resources on the last deref" simplified cmid resource management by freeing cmid once all references to the cmid were...

kernel: usb: dwc3: gadget: check that event count does not exceed event buffer length

In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: gadget: check that event count does not exceed event buffer length The event count is read from register DWC3GEVNTCOUNT. There is a check for the count being zero, but not for exceeding the event buffer length. Check...