MAL-2025-41719 Malicious code in prometheus-api-metrics (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in prometheus-api-metrics (PyPI)

--- -= Per source details. Do not edit below this line.=-...

PT-2025-44143

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to tcp metrics. The issue involves replacing three instances of the dst dev function with a lockdep enabled helper, specifically dst dev net rcu...

Linux Distros Unpatched Vulnerability : CVE-2020-7943

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Puppet Server and PuppetDB provide useful performance and debugging information via their metrics API endpoints. For PuppetDB this may contain things like...

Centreon Web 安全漏洞

Centreon Web is a set of open source system monitoring tools from France's Centreon. The product mainly provides monitoring functions for resources such as network, system and application programs. A security vulnerability exists in Centreon Web, which originates from an SQL injection on the Meta...

Malicious code in amp-metrics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dacbeb50af065a576ade73d084e6ac504cb061d33ebdb8fe8d72839b926e9d59 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-41259 Malicious code in amp-metrics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dacbeb50af065a576ade73d084e6ac504cb061d33ebdb8fe8d72839b926e9d59 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Linux Distros Unpatched Vulnerability : CVE-2023-50290

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Solr. The Solr Metrics API publishes all unprotected environment variables...

Linux Distros Unpatched Vulnerability : CVE-2023-52997

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipv4: prevent potential spectre v1 gadget in ipmetricsconvert if !type continue; if type RTAXMAX return -EINVAL; ... metricstype - 1 = val; @type being used as ...

Red Teaming Methodology for Design Obfuscation

The main goal of design obfuscation schemes is to protect sensitive design details from untrusted parties in the VLSI supply chain, including but not limited to off-shore foundries and untrusted end users. In this work, we provide a systematic red teaming approach to evaluate the security of desi...

Linux Distros Unpatched Vulnerability : CVE-2021-4453

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: fix a potential gpumetricstable memory leak Memory is allocated for...

MAL-2025-13966 Malicious code in ac-dom-metrics (npm)

The package ac-dom-metrics was found to contain malicious code...

Malicious code in ac-dom-metrics (npm)

The package ac-dom-metrics was found to contain malicious code...

MAL-2025-24521 Malicious code in kindle-fast-metrics-javascript-sdk (npm)

The package kindle-fast-metrics-javascript-sdk was found to contain malicious code...

Malicious code in switcharoo-plugin-metrics (npm)

The package switcharoo-plugin-metrics was found to contain malicious code...

MAL-2025-33149 Malicious code in shopify_metrics (npm)

The package shopifymetrics was found to contain malicious code...

MAL-2025-34298 Malicious code in switcharoo-plugin-metrics (npm)

The package switcharoo-plugin-metrics was found to contain malicious code...

Malicious code in kindle-fast-metrics-javascript-sdk (npm)

The package kindle-fast-metrics-javascript-sdk was found to contain malicious code...

Malicious code in reddit-mobile-plugin-metrics (npm)

The package reddit-mobile-plugin-metrics was found to contain malicious code...

CVE-2025-54800 Hydra persistent XSS in build metrics

Hydra is a continuous integration service for Nix based projects. Prior to commit dea1e16, a malicious package can introduce arbitrary JavaScript code into the Hydra database that is automatically evaluated in a client's browser when anyone visits the build page. This could be done by a third-par...