CVE-2025-7342

CVE-2025-7342 affects the Kubernetes Image Builder when using Nutanix or VMware OVA providers. During Windows image builds, default credentials are enabled, allowing root access. The credentials are disabled after the build. Affected clusters are those that use VM images created via the Image Bui...

Security Bulletin: A security vulnerability has been discovered in IBM Verify Identity Access OIDC Provider (CVE-2024-56171)

Summary A security vulnerability has been addressed in IBM Verify Identity Access OIDC Provider Vulnerability Details CVEID:CVE-2024-56171 DESCRIPTION: libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in...

Malicious code in @fm-plugin/dynamic-module-provider (npm)

The package @fm-plugin/dynamic-module-provider was found to contain malicious code...

Malicious code in provider-configurations (npm)

The package provider-configurations was found to contain malicious code...

MAL-2025-19273 Malicious code in eip-119-json-provider (npm)

The package eip-119-json-provider was found to contain malicious code...

MAL-2025-9105 Malicious code in @moneyguide-dev/style-provider (npm)

The package @moneyguide-dev/style-provider was found to contain malicious code...

MAL-2025-7109 Malicious code in @ba-bc-child/provider (npm)

The package @ba-bc-child/provider was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

Malicious code in @ba-bc-child/provider (npm)

The package @ba-bc-child/provider was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

Malicious code in angular2-safe-provider (npm)

The package angular2-safe-provider was found to contain malicious code...

Malicious code in eip-119-json-provider (npm)

The package eip-119-json-provider was found to contain malicious code...

MAL-2025-30780 Malicious code in provider-configurations (npm)

The package provider-configurations was found to contain malicious code...

MAL-2025-14534 Malicious code in angular2-safe-provider (npm)

The package angular2-safe-provider was found to contain malicious code...

MAL-2025-7936 Malicious code in @fm-plugin/dynamic-module-provider (npm)

The package @fm-plugin/dynamic-module-provider was found to contain malicious code...

Malicious code in @moneyguide-dev/style-provider (npm)

The package @moneyguide-dev/style-provider was found to contain malicious code...

MAL-2025-9665 Malicious code in @wisetail/style-provider (npm)

The package @wisetail/style-provider was found to contain malicious code...

SUSE CVE-2025-53942

authentik is an open-source Identity Provider that emphasizes flexibility and versatility, with support for a wide set of protocols. In versions 2025.4.4 and earlier, as well as versions 2025.6.0-rc1 through 2025.6.3, deactivated users who registered through OAuth/SAML or linked their accounts to...

Allocation of Resources Without Limits or Throttling

Overview org.bouncycastle:bcprov-debug-jdk15on is a Java implementation of cryptographic algorithms. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling due to improper processing of large name constraint structures in PKIXCertPathReviewer. An...

Allocation of Resources Without Limits or Throttling

Overview org.bouncycastle:bcprov-jdk16 is a Bouncy Castle Crypto package that is a Java implementation of cryptographic algorithms. This jar contains JCE provider and lightweight API for the Bouncy Castle Cryptography APIs for JDK 1.6. Affected versions of this package are vulnerable to Allocatio...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling due to improper processing of large name constraint structures in PKIXCertPathReviewer. An attacker can cause excessive resource allocation by submitting specially crafted ASN.1...

Social-Sensor Identity Cloning Detection Using Weakly Supervised Deep Forest and Cryptographic Authentication

Recent years have witnessed a rising trend in social-sensor cloud identity cloning incidents. However, existing approaches suffer from unsatisfactory performance, a lack of solutions for detecting duplicated accounts, and a lack of large-scale evaluations on real-world datasets. We introduce a...