Malicious code in package_events (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 74ede61665484ec6970f2d593a4363c19f20c93d1691ce47bbf4f7e6e1a8f3ff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

USN-7294-3: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - Block layer subsystem; - ACPI drivers; - Drivers core; - ATA over ethernet AOE driver; - TPM...

USN-7294-3 linux-ibm vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - Block layer subsystem; - ACPI drivers; - Drivers core; - ATA over ethernet AOE driver; - TPM...

USN-7294-2 linux-aws, linux-oracle, linux-oracle-5.4 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - Block layer subsystem; - ACPI drivers; - Drivers core; - ATA over ethernet AOE driver; - TPM...

RHSA-2024:8686

creationtimestamp| type| source ---|---|--- 2025-02-27 17:25:18+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5724 2025-03-11 02:40:08+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7100 2025-04-10 21:49:44+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11358...

CVE-2025-25330

creationtimestamp| type| source ---|---|--- 2025-02-27 16:26:15+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5717 2025-02-27 19:15:43+00:00| seen| https://t.me/cvedetector/19052 2025-03-02 11:45:37+00:00| seen| Telegram/chJ58hsHKAAhdcfQTZEJuZeRBXCpFKuBGOhMuUtpsc7OrVLW...

CVE-2025-25334

creationtimestamp| type| source ---|---|--- 2025-02-27 16:26:12+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5714 2025-02-27 19:15:45+00:00| seen| https://t.me/cvedetector/19055 2025-03-02 11:45:37+00:00| seen| Telegram/uscqOGixP5GX-PPvEBLdAxPDez--6rNRun58ogbMSxJnAXuA...

RHSA-2024:1866

creationtimestamp| type| source ---|---|--- 2025-02-27 11:25:30+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5664 2025-03-26 19:26:07+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8934 2025-06-25 00:49:28+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19413...

RHSA-2024:3354

creationtimestamp| type| source ---|---|--- 2025-02-27 11:25:30+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5664 2025-06-25 00:49:28+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19413...

RHSA-2024:1860

creationtimestamp| type| source ---|---|--- 2025-02-27 11:25:30+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5664 2025-03-26 19:26:07+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8934 2025-06-25 00:49:28+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19413...

SUSE CVE-2022-49054

In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Deactivate sysctlrecordpanicmsg by default in isolated guests hvpanicpage might contain guest-sensitive information, do not dump it over to Hyper-V by default in isolated guests. While at it, update some...

SUSE CVE-2022-49134

In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum: Guard against invalid local ports When processing events generated by the device's firmware, the driver protects itself from events reported for non-existent local ports, but not for the CPU port local port 0,...

SUSE CVE-2022-49138

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcievent: Ignore multiple conn complete events When one of the three connection complete events is received multiple times for the same handle, the device is registered multiple times which leads to memory corruptions...

SUSE CVE-2022-49436

In the Linux kernel, the following vulnerability has been resolved: powerpc/paprscm: Fix leaking nvdimmeventsmap elements Right now 'char ' elements allocated for individual 'statid' in 'paprscmpriv.nvdimmeventsmap' during paprscmpmucheckevents, get leaked in paprscmremove and paprscmpmuregister,...

SUSE CVE-2022-49607

In the Linux kernel, the following vulnerability has been resolved: perf/core: Fix data race between perfeventsetoutput and perfmmapclose Yang Jihing reported a race between perfeventsetoutput and perfmmapclose: CPU1 CPU2 perfmmapclosee2 if atomicdecandtest&e2-rb-mmapcount // 1 - 0 detachrest =...

RHSA-2025:1296

creationtimestamp| type| source ---|---|--- 2025-02-27 01:26:02+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5635 2025-04-16 18:56:07+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12130...

CVE-2025-25793

creationtimestamp| type| source ---|---|--- 2025-02-26 20:08:37+00:00| seen| https://t.me/cvedetector/18957 2025-03-08 04:34:11+00:00| seen| Telegram/jUAso2ru7n-Lz0ZwFdRA9eADVYjG8DksVf9dAyr4W0YvpySe...

CVE-2025-1249

Missing Authorization vulnerability in Marcus aka @msykes Events Manager events-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Events Manager: from n/a through = 6.6.4.1...

USN-7295-1 linux-xilinx-zynqmp vulnerabilities

Ye Zhang and Nicolas Wu discovered that the iouring subsystem in the Linux kernel did not properly handle locking for rings with IOPOLL, leading to a double-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code...

CVE-2025-1249 WordPress Events Manager plugin <= 6.6.4.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Pixelite Events Manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Events Manager: from n/a through 6.6.4.1...