CVE-2025-9815

CVE-2025-9815 affects alaneuler batteryKid up to 2.1 on macOS. The vulnerability is in PrivilegeHelper/PrivilegeHelper.swift within the NSXPCListener component, where a manipulation causes missing authentication. This enables a local attack on the host, with the exploit publicly available. Remedi...

PT-2025-35539

Name of the Vulnerable Software and Affected Versions alaneuler batteryKid versions 2.0 through 2.1 Description A weakness has been identified in alaneuler batteryKid on macOS. The affected element is an unknown function within the file PrivilegeHelper/PrivilegeHelper.swift of the NSXPCListener...

Linux Distros Unpatched Vulnerability : CVE-2025-48386

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to...

Malicious code in internal-helper-utils (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-44705 Malicious code in internal-helper-utils (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

Linux Distros Unpatched Vulnerability : CVE-2021-43113

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iTextPDF in iText 7 and up to excluding 4.4.13.3 7.1.17 allows command injection via a CompareTool filename that is mishandled on the gs aka Ghostscript command...

Linux Distros Unpatched Vulnerability : CVE-2018-14453

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in libgig 4.1.0. There is a heap-based buffer overflow in pData1 access in the function store16 in helper.h. CVE-2018-14453 Note that...

Malicious code in @espace-client-axafr/fetch-helper (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-41856 Malicious code in @espace-client-axafr/fetch-helper (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in selenium-stealth-utils (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 b7721bb039c55a43bd1dc81dfad14494df158912f9dda006a67881ce54be64d3 During importing, a malicious executable is being downloaded and started. According to sandbox report, the executable is an infostealer of rhadamanthys family...

MAL-2025-191866 Malicious code in selenium-stealth-utils (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 b7721bb039c55a43bd1dc81dfad14494df158912f9dda006a67881ce54be64d3 During importing, a malicious executable is being downloaded and started. According to sandbox report, the executable is an infostealer of rhadamanthys family...

Linux Distros Unpatched Vulnerability : CVE-2017-8849

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb4k before 2.0.1 allows local users to gain root privileges by leveraging failure to verify arguments to the mount helper DBUS service. CVE-2017-8849 Note tha...

Linux Distros Unpatched Vulnerability : CVE-2018-14459

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in libgig 4.1.0. There is an out-of-bounds write in pData0 access in the function store16 in helper.h. CVE-2018-14459 Note that Nessus...

Linux Distros Unpatched Vulnerability : CVE-2017-15569

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Redmine before 3.2.8, 3.3.x before 3.3.5, and 3.4.x before 3.4.3, XSS exists in app/helpers/querieshelper.rb via a multi-value field with a crafted value tha...

Linux Distros Unpatched Vulnerability : CVE-2005-0023

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gnome-pty-helper in GNOME libzvt2 and libvte4 allows local users to spoof the logon hostname via a modified DISPLAY environment variable. NOTE: the severity of...

Malicious code in selenium-stealth-helper (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7c2cda67d57bc0989cefaaf7d1bf288e32cbff3768347ee959619e88ade1d44c During importing, a malicious executable is being downloaded and started. According to sandbox report, the executable is an infostealer of rhadamanthys family...

MAL-2025-191865 Malicious code in selenium-stealth-helper (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7c2cda67d57bc0989cefaaf7d1bf288e32cbff3768347ee959619e88ade1d44c During importing, a malicious executable is being downloaded and started. According to sandbox report, the executable is an infostealer of rhadamanthys family...

AZL-66527 CVE-2025-38572 affecting package kernel for versions less than 6.6.104.2-1

In the Linux kernel, the following vulnerability has been resolved: ipv6: reject malicious packets in ipv6gsosegment syzbot was able to craft a packet with very long IPv6 extension headers leading to an overflow of skb-transportheader. This 16bit field has a limited range. Add...

UBUNTU-CVE-2025-38572

In the Linux kernel, the following vulnerability has been resolved: ipv6: reject malicious packets in ipv6gsosegment syzbot was able to craft a packet with very long IPv6 extension headers leading to an overflow of skb-transportheader. This 16bit field has a limited range. Add...

CVE-2025-38572 ipv6: reject malicious packets in ipv6_gso_segment()

In the Linux kernel, the following vulnerability has been resolved: ipv6: reject malicious packets in ipv6gsosegment syzbot was able to craft a packet with very long IPv6 extension headers leading to an overflow of skb-transportheader. This 16bit field has a limited range. Add...