Malicious code in joni-naget94-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44f723255b5fb4ae6049f7c03c737adb6e204891bf5bcf3037662f3896747b77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-93542

Double fetch in sandbox kernel driver in Avast/AVG Antivirus 25.3 on windows allows local attacker to escalate privelages via pool overflow...

CVE-2025-13032

Double fetch in sandbox kernel driver in Avast/AVG Antivirus 25.3 on windows allows local attacker to escalate privelages via pool overflow...

CVE-2025-13032

Double fetch in sandbox kernel driver in Avast/AVG Antivirus 25.3 on windows allows local attacker to escalate privelages via pool overflow...

CVE-2025-13032

Double fetch in sandbox kernel driver in Avast/AVG Antivirus 25.3 on windows allows local attacker to escalate privelages via pool overflow...

CVE-2025-13032

Double fetch in sandbox kernel driver in Avast/AVG Antivirus 25.3 on windows allows local attacker to escalate privelages via pool overflow...

CVE-2025-13032

CVE-2025-13032 affects Avast/AVG Antivirus on Windows prior to version 25.3. A double-fetch race condition in the sandbox kernel driver can allow a local attacker to escalate privileges via a pool overflow. Public sources in connected documents corroborate a kernel-driver vulnerability leading to...

kernel: workqueue: Put the pwq after detaching the rescuer from the pool

A vulnerability was found in the Linux kernel's work queue subsystem, which manages background task execution. The issue stems from improper handling of the "rescuer" thread during the cleanup of unbound work queues...

CVE-2025-13032: Time-of-check Time-of-use (TOCTOU) Race Condition

Double fetch in sandbox kernel driver in Avast/AVG Antivirus 25.3 on windows allows local attacker to escalate privelages via pool overflow...

PT-2025-46368

Name of the Vulnerable Software and Affected Versions Avast/AVG Antivirus versions prior to 25.3 Description A double fetch race condition exists in the Avast/AVG kernel sandbox driver on Windows. This condition allows a local attacker to escalate privileges through a pool overflow. The issue...

Gen Digital Antivirus 安全漏洞

Gen Digital Antivirus is an antivirus software from Gen Digital, Inc. A security vulnerability exists in Gen Digital Antivirus versions prior to 25.3, which stems from a double-acquisition issue in the Windows Sandbox kernel driver that could lead to a local attacker achieving elevation of...

The vulnerability of the page_pool_create() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the pagepoolcreate function in the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-988893)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988893 advisory. In the Linux kernel, the following vulnerability has been resolved: ACPI: APEI: Fix integer overflow in ghesestatuspoolinit Change numghes from int to unsigned int,...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989061)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989061 advisory. In the Linux kernel, the following vulnerability has been resolved: net-sysfs: add check for netdevice being present to speedshow When bringing down the netdevice or...

kernel: cifs: Fix xid leak in cifs_ses_add_channel()

A transaction ID xid leak was found in the CIFS/SMB filesystem. When adding a new channel fails, the allocated xid is not freed, leading to gradual exhaustion of the xid pool...

PT-2025-51582

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the netpoll subsystem that can lead to a deadlock scenario when the system experiences significant memory pressure. This occurs during memory...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: net: libwx: removed the duplicate function pagepoolputfullpage The pagepoolputfullpage function should only be called when freeing Rx buffers or when creating a skb if the size is too short. At other times, the pages need to be...

openSUSE Security Advisory (SUSE-SU-2025:3794-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Linux Distros Unpatched Vulnerability : CVE-2022-50563

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dm thin: Fix UAF in runtimersoftirq When dmresume and dmdestroy are concurrent, it will lead to UAF, as follows: BUG: KASAN: use-after-free in...

Siemens SIMATIC Devices Improper Input Validation (CVE-2024-43834)

In the Linux kernel, the following vulnerability has been resolved: xdp: fix invalid wait context of pagepooldestroy If the driver uses a page pool, it creates a page pool with pagepoolcreate. The reference count of page pool is 1 as default. A page pool will be destroyed only when a reference...