Linux Distros Unpatched Vulnerability : CVE-2018-6096

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A JavaScript focused window could overlap the fullscreen notification in Fullscreen in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to obscure...

ERMAC V3.0 Banking Trojan Source Code Leak Exposes Full Malware Infrastructure

Cybersecurity researchers have detailed the inner workings of an Android banking trojan called ERMAC 3.0, uncovering serious shortcomings in the operators' infrastructure. "The newly uncovered version 3.0 reveals a significant evolution of the malware, expanding its form injection and data theft...

Linux Distros Unpatched Vulnerability : CVE-2024-5689

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In addition to detecting when a user was taking a screenshot XXX, a website was able to overlay the 'My Shots' button that appeared, and direct the user to a...

Linux Distros Unpatched Vulnerability : CVE-2023-1393

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in X.Org Server Overlay Window. A Use-After-Free may lead to local privilege escalation. If a client explicitly destroys the compositor overlay...

Malicious code in cordova-ezar-video-overlay (npm)

The package cordova-ezar-video-overlay was found to contain malicious code...

Malicious code in videojs-ffxnz-overlay (npm)

The package videojs-ffxnz-overlay was found to contain malicious code...

MAL-2025-17563 Malicious code in cordova-ezar-video-overlay (npm)

The package cordova-ezar-video-overlay was found to contain malicious code...

MAL-2025-38364 Malicious code in videojs-ffxnz-overlay (npm)

The package videojs-ffxnz-overlay was found to contain malicious code...

Linux Distros Unpatched Vulnerability : CVE-2023-53004

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ovl: fix tmpfile leak Missed an error cleanup. CVE-2023-53004 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2022-45418

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - If a custom mouse cursor is specified in CSS, under certain circumstances the cursor could have been drawn over the browser UI, resulting in potential user...

Linux Distros Unpatched Vulnerability : CVE-2021-38497

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Through use of reportValidity and window.open, a plain-text validation message could have been overlaid on another origin, leading to possible user confusion an...

Linux Distros Unpatched Vulnerability : CVE-2025-21887

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ovl: fix UAF in ovldentryupdatereval by moving dput in ovllinkup The issue was caused by...

Linux Distros Unpatched Vulnerability : CVE-2016-6197

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fs/overlayfs/dir.c in the OverlayFS filesystem implementation in the Linux kernel before 4.6 does not properly verify the upper dentry before proceeding with...

Linux Distros Unpatched Vulnerability : CVE-2021-29975

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Through a series of DOM manipulations, a message, over which the attacker had control of the text but not HTML or formatting, could be overlaid on top of anothe...

Linux Distros Unpatched Vulnerability : CVE-2016-6198

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The filesystem layer in the Linux kernel before 4.5.5 proceeds with post-rename operations after an OverlayFS file is renamed to a self-hardlink, which allows...

Linux Distros Unpatched Vulnerability : CVE-2024-5698

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - By manipulating the fullscreen feature while opening a data-list, an attacker could have overlaid a text box over the address bar. This could have led to user...

xorg-x11-server: X.Org Server Overlay Window Use-After-Free Local Privilege Escalation Vulnerability

A vulnerability was found in X.Org Server. This flaw occurs if a client explicitly destroys the compositor overlay window aka COW, where Xserver leaves a dangling pointer to that window in the CompScreen structure, which will later trigger a use-after-free issue. The Overlay Window use-after-free...

PlayPraetor Android Trojan Infects 11,000+ Devices via Fake Google Play Pages and Meta Ads

Cybersecurity researchers have discovered a nascent Android remote access trojan RAT called PlayPraetor that has infected more than 11,000 devices, primarily across Portugal, Spain, France, Morocco, Peru, and Hong Kong. "The botnet's rapid growth, which now exceeds 2,000 new infections per week, ...

Malicious code in rca-overlay-panel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e53864a144cd059b57b54e04fbdd4b522e837be90b0cca8354683ef4868f7889 The OpenSSF Package Analysis project identified 'rca-overlay-panel' @ 3.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2025-6350 Malicious code in rca-overlay-panel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e53864a144cd059b57b54e04fbdd4b522e837be90b0cca8354683ef4868f7889 The OpenSSF Package Analysis project identified 'rca-overlay-panel' @ 3.0.0 npm as malicious. It is considered malicious because: - The package...