CVE-2019-16243

On TCL Alcatel Cingular Flip 2 B9HUAH1 devices, there is an undocumented web API that allows unprivileged JavaScript, including JavaScript running within the KaiOS browser, to view and edit the device's firmware over-the-air update settings. This web API is normally used by the system application...

JBL多款产品 安全漏洞

JBL Flip and JBL Pulse are both a range of Bluetooth audio from JBL USA. A security vulnerability exists in various JBL products that stems from improper authentication of BLE connection requests, which could result in a deadlock on affected devices. The following products are affected: JBL Flip ...

CacheTrap: Injecting Trojans in LLMs without Leaving Any Traces in Inputs or Weights

Adversarial weight perturbation has emerged as a concerning threat to LLMs that either use training privileges or system-level access to inject adversarial corruption in model weights. With the emergence of innovative defensive solutions that place system- and algorithm-level checks and correctio...

EUVD-2025-199222

Malicious code in feature-flip npm...

Malicious code in feature-flip (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70f38090f7d06e2ca6dedee4db704eb48de8c582ee65be6a5142487fba31d1e1 The package feature-flip was found to contain malicious code. Source: ghsa-malware 1d3a90cfc6cc14cf62f81b6f2ca995f00fbff67b1b819ba339516765de278bd2 A...

MAL-2025-191091 Malicious code in feature-flip (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70f38090f7d06e2ca6dedee4db704eb48de8c582ee65be6a5142487fba31d1e1 The package feature-flip was found to contain malicious code. Source: ghsa-malware 1d3a90cfc6cc14cf62f81b6f2ca995f00fbff67b1b819ba339516765de278bd2 A...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

TencentOS Server 4: sudo (TSSA-2025:0078)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0078 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989534)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989534 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/gma500: Fix BUG: sleeping function called from invalid context errors gmacrtcpageflip was...

EUVD-2012-6498

Malware in sbrugna...

EUVD-2008-5722

Malware in sbrugna...

EUVD-2007-5043

Malware in sbrugna...

EUVD-2019-7050

Malware in sbrugna...

EUVD-2017-16411

Malware in sbrugna...

EUVD-2010-4241

Malware in sbrugna...

EUVD-2008-3299

Malware in sbrugna...

EUVD-2019-7049

Malware in sbrugna...

EUVD-2005-4360

Malware in sbrugna...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986744)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986744 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/gma500: Fix BUG: sleeping function called from invalid context errors gmacrtcpageflip was...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-387630)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-387630 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Fix a null pointer crash in mtkdrmcrtcfinishpageflip It's possible that mtkcrtc-eve...