EUVD-2025-53687

Malicious code in intermediate-azure-rooster npm...

EUVD-2025-53686

Malicious code in intermediate-blue-ant npm...

EUVD-2025-53684

Malicious code in intermediate-scarlet-smelt npm...

MAL-2025-68965 Malicious code in intermediate-scarlet-smelt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4080214e6e792c1ffe5c60019c1f3a37f17e56897a051132d6a40b0cb4ce8c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68963 Malicious code in intermediate-blue-ant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1e34e99fccfca357b6068efa82064082fe6bc32b37dbded2b5a10c907f5e1d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53685

Malicious code in intermediate-cyan-mockingbird npm...

EUVD-2025-49960

Malicious code in intermediatepartridgez3n npm...

EUVD-2002-1390

Malware in sbrugna...

EUVD-2009-5093

Malware in sbrugna...

EUVD-2016-0829

Malware in sbrugna...

EUVD-2020-0069

Malware in sbrugna...

EUVD-2025-27686

Malicious code in bioql PyPI...

BIT-MONGODB-2025-3085 MongoDB Server running on Linux may allow unexpected connections where intermediate certificates are revoked

A MongoDB server under specific conditions running on Linux with TLS and CRL revocation status checking enabled, fails to check the revocation status of the intermediate certificates in the peer's certificate chain. In cases of MONGODB-X509, which is not enabled by default, this may lead to...

Khronos Group glslang Intermediate.cpp isConversionAllowed null pointer dereference

...

Linux Distros Unpatched Vulnerability : CVE-2021-36086

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The CIL compiler in SELinux 3.2 has a use-after-free in cilresetclasspermission called from cilresetclasspermsset and cilresetclasspermslist. CVE-2021-36086 Not...

Cisco NX-OSS IS-IS DoS

The vulnerability of the Intermediate System-to-Intermediate System IS-IS routing protocol implementation in the Cisco NX-OSS operating system of Cisco Nexus 3000 and Nexus 9000 devices is related to errors in the compiler optimization process. Exploiting this vulnerability allows a malicious act...

PT-2025-34887

Name of the Vulnerable Software and Affected Versions Cisco NX-OS Software for Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches Description A vulnerability exists in the Intermediate System-to-Intermediate System IS-IS feature. An unauthenticated, adjacent attacker could...

Enhancing Targeted Adversarial Attacks on Large Vision-Language Models through Intermediate Projector Guidance

Targeted adversarial attacks are essential for proactively identifying security flaws in Vision-Language Models before real-world deployment. However, current methods perturb images to maximize global similarity with the target text or reference image at the encoder level, collapsing rich visual...

SUSE-SU-2025:20483-1 Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-57982: xfrm: state: fix out-of-bounds read during lookup bsc1237913. - CVE-2024-58053: rxrpc: Fix handling of received connection abort...

CVE-2025-7145: Improper Neutralization of Special Elements used in an OS Command

ThreatSonar Anti-Ransomware developed by TeamT5 has an OS Command Injection vulnerability, allowing remote attackers with product platform intermediate privileges to inject arbitrary OS commands and execute them on the server, thereby gaining administrative access to the remote host...