MAL-2025-54752 Malicious code in rudi-lontong87-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0805bedf2fb70e1ea8cc536ff5162c1cd022b32bb2380ecfc51ac004bac27737 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-53089 Malicious code in kiki-kue4-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 409f70cd7ee038155945ea4fbbdc7a483733de2c02424831f660e1db4087543d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-51986 Malicious code in gita-lapis14-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72dd608bc88cf762e6648776ba45ad89d2c3be82a38ef2f5ceb5559e74536388 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galih-empal30-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6464a4917db4e9bcd559b0cb0ddde49f6cac50737dfad98eb57946747dd90a2 The package galih-empal30-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

Malicious code in gilang-keripik95-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 582953e4345eb480aaffc0cfa8d51c907b0fc155738dc0a41db1af2db8636a35 The package gilang-keripik95-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-51256 Malicious code in cici-buburayam45-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b50a259e5c5bca0c84e8a8e972109cb6ed324b674600137aa89cfe373b6692b The package cici-buburayam45-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-50147 Malicious code in citra-lodeh15-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb41fd3ee5cc4b0067d1a1ad9204a524daf98d1cf34c7f9efd7f88d2b0fa6cbf The package citra-lodeh15-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

[SECURITY] Fedora 43 Update: bpfman-0.5.4-3.fc43

bpfman operates as an eBPF manager, focusing on simplifying the deployment and administration of eBPF programs...

The 7 Best Continuous Threat Exposure Management Tools

If your security team is drowning in a sea of "critical" alerts from your vulnerability scanner, you know the feeling of being busy without being effective. You spend all your time triaging and patching, but you never feel like you're actually ahead of the attackers. This is the core problem that...

EUVD-2025-38115

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThimPress LearnPress Export Import learnpress-import-export allows PHP Local File Inclusion.This issue affects LearnPress Export Import: from n/a through = 4.0.9...

CVE-2025-48290

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in bslthemes Kinsley kinsley allows PHP Local File Inclusion.This issue affects Kinsley: from n/a through = 3.4.4...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989480)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989480 advisory. In the Linux kernel, the following vulnerability has been resolved: ice: avoid bpfprog refcount underflow Ice driver has the routines for managing XDP resources that...

Hybrid Fuzzing with LLM-Guided Input Mutation and Semantic Feedback

Software fuzzing has become a cornerstone in automated vulnerability discovery, yet existing mutation strategies often lack semantic awareness, leading to redundant test cases and slow exploration of deep program states. In this work, I present a hybrid fuzzing framework that integrates static an...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989490)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989490 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf, testrun: Fix alignment problem in bpfprogtestrunskb We got a syzkaller problem because of...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988805)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988805 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: Track subprog poke descriptors correctly and fix use-after-free Subprograms are calling...

Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: bpf: Avoid bpfprogret0warn when JIT fails Syzkaller reported an issue: WARNING: CPU: 3 PID: 217 at kernel/bpf/core.c:2357 bpfprogret0warn+0xa/0x20 kernel/bpf/core.c:2357 Linked modules: CPU: 3 UID: 0 PID: 217 Comm: kworker/u32:6...

Astra Linux – Vulnerability in mtr

In certain privileged contexts, mtr improperly handles the execution of a program specified by the MTRPACKET environment variable. NOTE: On macOS, mtr may often be subject to sudo rules, as a result of Homebrew not installing setuid binaries...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: BPF: Disabling migration in nfhookrunbpf. Syzbot reported that the netfilter BPF program can be called without disabling migration in the xmit path. Then, the assertion in bpfprogrun fails, triggering a crash below. 0 Let’s use...

Astra Linux - уязвимость в linux-5.10

In the Linux kernel, the following vulnerability has been resolved: gve: guard XDP xmit NDO on existence of xdp queues In GVE, dedicated XDP queues only exist when an XDP program is installed and the interface is up. As such, the NDO XDP XMIT callback should return early if either of these...

Bizerba Communication Server 安全漏洞

Bizerba Communication Server is an interface software component from Bizerba, Germany. A security vulnerability exists in Bizerba Communication Server that originates from an unreferenced service path and could lead to the execution of a malicious program...