Mozilla Thunderbird < 115.0.1

The version of Thunderbird installed on the remote Windows host is prior to 115.0.1. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2023-27 advisory. - Thunderbird allowed the Text Direction Override Unicode Character in filenames. An email attachment could be...

Drupal 11.0.x < 11.1.9 Multiple Vulnerabilities

According to its self-reported version number, the detected Drupal application is affected by multiple vulnerabilities : - Drupal Core has a rarely used feature, provided by an underlying library, which allows certain attributes of incoming HTTP requests to be overridden. - Drupal core contains a...

VulnCheck KEV: CVE-2025-61666

Traccar is an open source GPS tracking system. Default installs of Traccar on Windows between versions 6.1- 6.8.1 and non default installs between versions 5.8 - 6.0 are vulnerable to unauthenticated local file inclusion attacks which can lead to leakage of passwords or any file on the file syste...

Drupal 8.0.x < 10.4.9 Multiple Vulnerabilities

According to its self-reported version number, the detected Drupal application is affected by multiple vulnerabilities : - Drupal Core has a rarely used feature, provided by an underlying library, which allows certain attributes of incoming HTTP requests to be overridden. - Drupal core contains a...

Efficient Adversarial Malware Defense Via Trust-Based Raw Override and Confidence-Adaptive Bit-Depth Reduction

The deployment of robust malware detection systems in big data environments requires careful consideration of both security effectiveness and computational efficiency. While recent advances in adversarial defenses have demonstrated strong robustness improvements, they often introduce computationa...

MAL-2025-191835 Malicious code in pylibcugraph (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 b298ab8786b687f39d3ce25f6a69effd415c27b384fa23bc45c5fdf640448105 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Fedora 44 : docker-buildkit (2025-f7ab56fd3b)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-f7ab56fd3b advisory. Automatic update for docker-buildkit-0.26.0-1.fc44. Changelog Thu Nov 13 2025 Bradley G Smith - 0.26.0-1 - Update to release v0.26.0 - Resolves:...

CVE-2025-40181

In the Linux kernel, the following vulnerability has been resolved: x86/kvm: Force legacy PCI hole to UC when overriding MTRRs for TDX/SNP When running as an SNP or TDX guest under KVM, force the legacy PCI hole, i.e. memory between Top of Lower Usable DRAM and 4GiB, to be mapped as UC via a forc...

MAL-2025-172050 Malicious code in apas-lepod-manusiad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4548dccbc8384735c84ba26b3025b86993449d291bf1406a7af1eaf6153ce0c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171063 Malicious code in constellationdreamer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3a0921782b1620a883f1b56a69736fb66d637cf9de5f64a4eb355a86a884f88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikami133 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c091513f4b957819ad9314948eab6531e2f0316d4a21a5d64d84241561d0ae46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pilka-lni-pialima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0698d6edca4ef8b928543ea6fb777baea905161b5d48396fd8ec252e2c45dabf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in google-cloud-iam-credentials (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e75faf49c379401db38883bfb490edbc74161e0d52d38f6aac38f6166645133a Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

thunderbird: firefox: An OBJECT tag type attribute overrode browser behavior on web resources without a content-type

A flaw was found in Thunderbird and Firefox. The Mozilla Foundation's Security Advisory describes the following issue: A malicious page could have used the type attribute of an OBJECT tag to override the default browser behavior when encountering a web resource served without a content-type. This...

Drupal core - Moderately critical - Denial of Service - SA-CORE-2025-005

Drupal Core has a rarely used feature, provided by an underlying library, which allows certain attributes of incoming HTTP requests to be overridden. This functionality can be abused in a way that may cause Drupal to cache response data that it should not. This can lead to legitimate requests...

MAL-2025-137590 Malicious code in unemployed_flamingo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fdbebed29ac5729038fb197c23d3892c63f773f187dc3f45f4cd00fef4d8a75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wawan-nasisayur29-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 298e12a3f540128abd1b43673aeca889926b9917c160643900175f199f5e5292 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fajar-rangginang42-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d235fe2409baca0f8b808e3dd542f2078b31de817a02a1c48f9225dde8d5fba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-124571 Malicious code in yuni-mieayam26-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4e97d799e161a8be547668f9efc45423b40601ab28119fa9efed47421136545 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

kernel: firmware: cs_dsp: Fix OOB memory read access in KUnit test (ctl cache)

In the Linux kernel, the following vulnerability has been resolved: firmware: csdsp: Fix OOB memory read access in KUnit test ctl cache KASAN reported out of bounds access - csdspctlcacheinitmultipleoffsets. The code uses mockcoefftemplate.lengthbytes 4 bytes for register value allocations. But...