MAL-2025-46980 Malicious code in strip-ansi (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3736bb5cc515b07f47ad6b5bb06c367271994c4b6606f1ddeb91a056788c34c2 Any computer that has this package installed or running should be considered fully compromised. All...

Behind the Mask: Benchmarking Camouflaged Jailbreaks in Large Language Models

Large Language Models LLMs are increasingly vulnerable to a sophisticated form of adversarial prompting known as camouflaged jailbreaking. This method embeds malicious intent within seemingly benign language to evade existing safety mechanisms. Unlike overt attacks, these subtle prompts exploit...

media: mtk-vcodec: potential null pointer deference in SCP

...

PT-2025-40529

Name of the Vulnerable Software and Affected Versions Qt versions 6.7.0 through 6.9.0 Qt6-svg qtsvg-opensource-src Description The issue is a use-after-free condition within the Qt framework, specifically related to the parsing of SVG files. The renderPattern function and the SVG module are...

Linux Distros Unpatched Vulnerability : CVE-2018-3298

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.2.20. Easi...

USN-7718-1: GNU binutils vulnerability

It was discovered that GNU binutils incorrectly handled certain inputs. An attacker could possibly use this issue to cause a crash...

Linux Distros Unpatched Vulnerability : CVE-2015-3249

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The HTTP/2 experimental feature in Apache Traffic Server 5.3.x before 5.3.1 allows remote attackers to cause a denial of service out-of-bounds access and daemon...

Linux Distros Unpatched Vulnerability : CVE-2024-9936

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When manipulating the selection node cache, an attacker may have been able to cause unexpected behavior, potentially leading to an exploitable crash. This...

AZL-66464 CVE-2025-38585 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: staging: media: atomisp: Fix stack buffer overflow in gmingetvarint When gmingetconfigvar calls efi.getvariable and the EFI variable is larger than the expected buffer size, two behaviors combine to create a stack buffer overflow...

Unspecified Vulnerability in Emby MediaBrowser (CNVD-2025-19601)

Emby MediaBrowser is a media server software from Emby. Emby MediaBrowser contains a security vulnerability that can be exploited by attackers to obtain sensitive information...

Linux Distros Unpatched Vulnerability : CVE-2024-39371

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: iouring: check for non-NULL file pointer in iofilecanpoll In earlier kernels, it was possibl...

MAL-2025-8340 Malicious code in @lbnqduy/potential-succotash (npm)

The package @lbnqduy/potential-succotash was found to contain malicious code...

MAL-2025-8337 Malicious code in @lbnqduy/potential-eureka (npm)

The package @lbnqduy/potential-eureka was found to contain malicious code...

MAL-2025-8338 Malicious code in @lbnqduy/potential-memory (npm)

The package @lbnqduy/potential-memory was found to contain malicious code...

MAL-2025-8339 Malicious code in @lbnqduy/potential-parakeet (npm)

The package @lbnqduy/potential-parakeet was found to contain malicious code...

MAL-2025-9135 Malicious code in @npmteanew/potential-octo-dollop (npm)

The package @npmteanew/potential-octo-dollop was found to contain malicious code...

Malicious code in @lbnqduy/potential-eureka (npm)

The package @lbnqduy/potential-eureka was found to contain malicious code...

Malicious code in @lbnqduy/potential-memory (npm)

The package @lbnqduy/potential-memory was found to contain malicious code...

Malicious code in @lbnqduy/potential-succotash (npm)

The package @lbnqduy/potential-succotash was found to contain malicious code...

Malicious code in @npmteanew/potential-octo-dollop (npm)

The package @npmteanew/potential-octo-dollop was found to contain malicious code...