TencentOS Server 4: mbedtls (TSSA-2025:0533)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0533 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

Siemens SIMATIC S7-1500 Uncaught Exception (CVE-2024-28835)

A flaw has been discovered in GnuTLS where an application crash can be induced when attempting to verify a specially crafted .pem bundle using the certtool --verify-chain command. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...

EUVD-2025-134949

Malicious code in -pem-misa npm...

EUVD-2025-133803

Malicious code in ola-pem-misa npm...

EUVD-2025-134927

Malicious code in a-pem-misa npm...

Malicious code in ola-pem-misa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62855c1a1426085dd7bb41eec49c0407521a3436013572e9eacd8acb4aaae753 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-134270

Malicious code in la-pem-misa npm...

Malicious code in obloa-pem-ms (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b785f3026e013308fdef12d593c3dc83deb517f33fc42c0065139304b35fe8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in a-pem-misa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3ceef2f7df03c24fc249dcfbd60e7876462e0f5ee7c613d84dff849cae53728 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-134950

Malicious code in -pem-misa npm...

EUVD-2025-133805

Malicious code in obloa-pem-ms npm...

EUVD-2025-133804

Malicious code in obloa-pem-ms npm...

EUVD-2025-134928

Malicious code in a-pem-misa npm...

EUVD-2025-134269

Malicious code in la-pem-misa npm...

EUVD-2025-133806

Malicious code in obla-pem-misa npm...

MAL-2025-179777 Malicious code in la-pem-misa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d95de71497dd563e6d6a9237e95c18ad693ee00dc104ea4e065ab3798abdac6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Amazon Linux 2023 : captree, libcap, libcap-devel (ALAS2023-2025-1279)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-1279 advisory. net/url: insufficient validation of bracketed IPv6 hostnames The Parse function permitted values other than IPv6 addresses to be included in square brackets within the host component of a URL...

Important: rclone

Issue Overview: net/url: insufficient validation of bracketed IPv6 hostnames The Parse function permitted values other than IPv6 addresses to be included in square brackets within the host component of a URL. RFC 3986 permits IPv6 addresses to be included within the host component, enclosed withi...

Important: libcap

Issue Overview: net/url: insufficient validation of bracketed IPv6 hostnames The Parse function permitted values other than IPv6 addresses to be included in square brackets within the host component of a URL. RFC 3986 permits IPv6 addresses to be included within the host component, enclosed withi...

MGASA-2025-0256 Updated golang packages fix security vulnerabilities

Insufficient validation of bracketed IPv6 hostnames in net/url. CVE-2025-47912 Unbounded allocation when parsing GNU sparse map in archive/tar. CVE-2025-58183 Parsing DER payload can cause memory exhaustion in encoding/asn1. CVE-2025-58185 Lack of limit when parsing cookies can cause memory...