Malicious code in create-krnl-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 211459e94c3ff6a3713ee7a8327fdef67b1eaac62530f22c658dad263fa901db Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2025-25786

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved. The issue occurred when a process exited and attempted to unmap CSA and free GPU VM. If a signal was accepted and the wait to take...

CVE-2025-25014

A Prototype pollution vulnerability in Kibana leads to arbitrary code execution via crafted HTTP requests to machine learning and reporting endpoints...

CVE-2025-25014

A Prototype pollution vulnerability in Kibana leads to arbitrary code execution via crafted HTTP requests to machine learning and reporting endpoints...

CVE-2025-25014

KIBANA: CVE-2025-25014 is a prototype-pollution vulnerability in Kibana that enables arbitrary code execution via crafted HTTP requests to the Machine Learning or Reporting endpoints. Public details indicate exploitation is possible remotely over the network with low complexity and requires high ...

CVE-2025-25014 Kibana arbitrary code execution via prototype pollution

A Prototype pollution vulnerability in Kibana leads to arbitrary code execution via crafted HTTP requests to machine learning and reporting endpoints...

CVE-2025-25014

A Prototype pollution vulnerability in Kibana leads to arbitrary code execution via crafted HTTP requests to machine learning and reporting endpoints...

CVE-2025-25014 Kibana arbitrary code execution via prototype pollution

A Prototype pollution vulnerability in Kibana leads to arbitrary code execution via crafted HTTP requests to machine learning and reporting endpoints...

Third Parties and Machine Credentials: The Silent Drivers Behind 2025's Worst Breaches

It wasn't ransomware headlines or zero-day exploits that stood out most in this year's Verizon 2025 Data Breach Investigations Report DBIR — it was what fueled them. Quietly, yet consistently, two underlying factors played a role in some of the worst breaches: third-party exposure and machine...

CVE-2025-21460

Memory corruption while processing a message, when the buffer is controlled by a Guest VM, the value can be changed continuously...

CVE-2024-49842

Memory corruption during memory mapping into protected VM address space due to incorrect API restrictions...

CVE-2024-49841

Memory corruption during memory assignment to headless peripheral VM due to incorrect error code handling...

CVE-2024-49841

Memory corruption during memory assignment to headless peripheral VM due to incorrect error code handling...

CVE-2024-49842

Memory corruption during memory mapping into protected VM address space due to incorrect API restrictions...

CVE-2025-21460

CVE-2025-21460 describes memory corruption in a Qualcomm chipset-based automotive software platform built on QNX. The vulnerability occurs while processing a message where a buffer is controlled by a Guest VM, allowing the value to be changed continuously and potentially triggering corruption. CV...

CVE-2024-49842

Technical details about CVE-2024-49842 are not publicly provided in the connected documents. Monitor for updates.

CVE-2024-49842 Improper Access Control in Hypervisor

Memory corruption during memory mapping into protected VM address space due to incorrect API restrictions...

Malicious code in awetz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 50ab38a23d32c01ded4e220aa81684169b2a15b5f423ddac77957543d2da8c7d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in flashcanvas (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d2a7c1d4db3a33aaeb6b2b80bf058332cdd082406999470a56960c36f28ad99d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-2509

Out-of-Bounds Read in Virglrenderer in ChromeOS 16093.57.0 allows a malicious guest VM to achieve arbitrary address access within the crosvm sandboxed process, potentially leading to VM escape via crafted vertex elements data triggering an out-of-bounds read in utilformatdescription...