MAL-2025-48463 Malicious code in shopifyql-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 22c1e659f820da451cb67b3bf646d2511ccc31118a06138dbe97687430e7bbb4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48461 Malicious code in @shopify.com/shopifyql-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2a2bd69260e57b66e60b0e7aa07aab1d645f5cb9c42f30ce261b119e51f92ffb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

EUVD-2025-34998

Malicious code in @shopify.com/shopifyql-parser npm...

Malicious code in @shopify.com/shopifyql-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2a2bd69260e57b66e60b0e7aa07aab1d645f5cb9c42f30ce261b119e51f92ffb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

JLSEC-2025-93 A vulnerability was found in the Libksba library due to an integer overflow within the CRL parser

A vulnerability was found in the Libksba library due to an integer overflow within the CRL parser. The vulnerability can be exploited remotely for code execution on the target system by passing specially crafted data to the application, for example, a malicious S/MIME attachment...

OESA-2025-2456 expat security update

expat is a stream-oriented XML parser library written in C. expat excels with files too large to fit RAM, and where performance and flexibility are crucial. Security Fixes: libexpat in Expat before version 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document...

CVE-2025-55100 Potential out-of-bounds read in _ux_host_class_audio10_sam_parse_func()

In USBX before 6.4.3, the USB support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in uxhostclassaudio10samparsefunc when parsing a list of sampling frequencies...

EUVD-2025-34838

In Xpdf 4.05 and earlier, a PDF object loop in a CMap, via the "UseCMap" entry, leads to infinite recursion and a stack overflow...

Malicious Package

Overview parser-session is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview parser-tson is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...

A Novel GPT-Based Framework for Anomaly Detection in System Logs

Identification of anomalous events within system logs constitutes a pivotal element within the frame- work of cybersecurity defense strategies. However, this process faces numerous challenges, including the management of substantial data volumes, the distribution of anomalies, and the precision o...

[SECURITY] Fedora 42 Update: inih-62-1.fc42

The inih package provides simple INI file parser which is only a couple of pages of code, and it was designed to be small and simple, so it's good for embedded systems...

[SECURITY] Fedora 42 Update: rust-protobuf-parse-3.7.2-1.fc42

Parse .proto files. Files are parsed into a protobuf::descriptor::FileDescriptorSet object using either: pure rust parser no dependencies protoc binary more reliable and compatible with Google's implementation...

The vulnerability of the OLE Document DIFAT Parser component of the program for extracting readable text from MS-Word catdoc files allows a perpetrator to execute arbitrary code.

The vulnerability of the OLE Document DIFAT Parser component of the program for extracting readable text from MS-Word catdoc files is related to a countable loss of significance. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the OLE Document File Allocation Table Parser component of the text extraction software, which can read text from MS-Word catdoc files, allows a hacker to execute arbitrary code.

The vulnerability of the OLE Document File Allocation Table Parser component of the MS-Word catdoc file extraction tool is related to a numerical overflow condition. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

[SECURITY] Fedora 43 Update: rust-protobuf-parse-3.7.2-1.fc43

Parse .proto files. Files are parsed into a protobuf::descriptor::FileDescriptorSet object using either: pure rust parser no dependencies protoc binary more reliable and compatible with Google's implementation...

[SECURITY] [DLA 4333-1] php-horde-css-parser security update

Debian LTS Advisory DLA-4333-1 [email protected] https://www.debian.org/lts/security/ Andreas Henriksson October 14, 2025 https://wiki.debian.org/LTS Package : php-horde-css-parser Version : 1.0.11-8+deb11u1 CVE ID : CVE-2020-13756 Debian Bug : Sabberworm PHP CSS Parser before 8.3.1 cal...

JLSEC-2025-61 libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of external...

libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of external parsers created via XMLExternalEntityParserCreate...

DLA-4333-1 php-horde-css-parser - security update

Bulletin has no description...

Debian dla-4333 : php-horde-css-parser - security update

The remote Debian 11 host has a package installed that is affected by a vulnerability as referenced in the dla-4333 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4333-1 [email protected] https://www.debian.org/lts/security/...