EUVD-2025-140742

Malicious code in kim-jiwon-m npm...

Malicious code in masako-m-gunung (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8719114b546273c55d369ba9dbd755de40a1aeb549da42515b3ad43215a341d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-146353

Malicious code in verify-tactiva-m npm...

MAL-2025-159526 Malicious code in manaf-marzuki-m (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d4d0a7cc8c2d80c158d5916288e64011e7f892ca7e4bf8a8d11757cb2c40051 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155489 Malicious code in guras-visa-m (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 278c9154cdc9d769e59b957e9975a02a68ce06e3b2302d6df66f4049b43dfdcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-visa-m (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 278c9154cdc9d769e59b957e9975a02a68ce06e3b2302d6df66f4049b43dfdcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158917 Malicious code in m-bendera-lisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cf1377dc80b668ec979c5aab80fa2dacd4534344268c66101e7f7e84e471701 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158919 Malicious code in m-rasaaya-nurses (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cfe3429702c736c5d14fdc70f7a9a7a42c691e8f28734207ce38f138718e5f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170459 Malicious code in verify-tactiva-m (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a74ab8e10a5ecebc361c0bcfcd6149f51a22bc302c8b280e695953b29f69da19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-9408

System call entry on Cortex M and possibly R and A, but I think not has a race which allows very practical privilege escalation for malicious userspace processes...

PT-2025-46684

Name of the Vulnerable Software and Affected Versions Fujitsu iRMC S6 on M5 versions prior to 1.37S Description The software mishandles Redfish/WebUI access when a username with a length of exactly 16 characters is used. The issue affects access through the Redfish API and the WebUI. The vulnerab...

CVE-2025-9408

System call entry on Cortex M and possibly R and A, but I think not has a race which allows very practical privilege escalation for malicious userspace processes...

CVE-2025-9408

CVE-2025-9408 describes a race condition in the system call entry path on Cortex-M ( Zephyr RTOS context in the provided docs ) that enables privilege escalation by malicious userspace processes. The available connected documents confirm the issue and its impact but do not specify concrete exploi...

CVE-2025-9408 Userspace privilege escalation vulnerability on Cortex M

System call entry on Cortex M and possibly R and A, but I think not has a race which allows very practical privilege escalation for malicious userspace processes...

EUVD-2025-84338

System call entry on Cortex M and possibly R and A, but I think not has a race which allows very practical privilege escalation for malicious userspace processes...

CVE-2025-9408 Userspace privilege escalation vulnerability on Cortex M

System call entry on Cortex M and possibly R and A, but I think not has a race which allows very practical privilege escalation for malicious userspace processes...

CVE-2025-9408 Userspace privilege escalation vulnerability on Cortex M

System call entry on Cortex M and possibly R and A, but I think not has a race which allows very practical privilege escalation for malicious userspace processes...

CVE-2025-9408: Privilege Context Switching Error

System call entry on Cortex M and possibly R and A, but I think not has a race which allows very practical privilege escalation for malicious userspace processes...

PT-2025-46349

Name of the Vulnerable Software and Affected Versions versions prior to 2025-9408 Description A race condition exists during system call entry on Cortex M processors, potentially allowing privilege escalation for malicious user space processes. It is possible this issue may also affect Cortex R a...

CVE-2025-63384: Incorrect Privilege Assignment

A vulnerability was discovered in RISC-V Rocket-Chip v1.6 and before implementation where the SRET Supervisor-mode Exception Return instruction fails to correctly transition the processor's privilege level. Instead of downgrading from Machine-mode M-mode to Supervisor-mode S-mode as specified by...