CVE-2025-65807

An issue in sd command v1.0.0 and before allows attackers to escalate privileges to root via a crafted command...

CVE-2025-65807

The CVE-2025-65807 entry concerns the sd command (version 1.0.0 and earlier). Affected component: the sd command itself; root-privilege escalation is possible via a crafted command, with reports noting changes to group ownership of the source file as the potential underlying issue. The available ...

MAL-2025-192347 Malicious code in sd-123456 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00b44fd36c7e696d952fccf6c85284d4a4b2fbd1c47062ef87b5ed6d13368fc6 The package sd-123456 was found to contain malicious code...

EUVD-2025-201469

Malicious code in sd-123456 npm...

Malicious code in sd-123456 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00b44fd36c7e696d952fccf6c85284d4a4b2fbd1c47062ef87b5ed6d13368fc6 The package sd-123456 was found to contain malicious code...

EUVD-2025-201468

Malicious code in sd-notexsit npm...

Malicious code in sd-notexsit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4e913bd2265d51b2e2a3c9be6498c860ffc76186b24a2f81322c22d2c47a9b0 The package sd-notexsit was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-192348 Malicious code in sd-notexsit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4e913bd2265d51b2e2a3c9be6498c860ffc76186b24a2f81322c22d2c47a9b0 The package sd-notexsit was found to contain malicious code. Source: ossf-package-analysis...

systemd security update

252-55.0.3.7 - serialize: don't allocate 1M on the stack just like that LINUX-16166 - Route logs from container mapped uids to the system journal Orabug: 38135007 - Drop delay when nspawn fails to reset loginuid Orabug: 37793135 - Improve logging for api bus connection and subscribers Orabug:...

CVE-2025-63674

An issue in Blurams Lumi Security Camera A31C v23.1227.472.2926 allows local physical attackers to execute arbitrary code via overriding the bootloader on the SD card...

CVE-2025-55810

A vulnerability was found in Alaga Home Security WiFi Camera 3K model S-CW2503C-H with hardware version V03 and firmware version 1.4.2, which allows physical attackers to execute commands as root via script file with a specific name on a SD card...

EUVD-2025-175370

A vulnerability was found in Alaga Home Security WiFi Camera 3K model S-CW2503C-H with hardware version V03 and firmware version 1.4.2, which allows physical attackers to execute commands as root via script file with a specific name on a SD card...

CVE-2025-55810

A vulnerability was found in Alaga Home Security WiFi Camera 3K model S-CW2503C-H with hardware version V03 and firmware version 1.4.2, which allows physical attackers to execute commands as root via script file with a specific name on a SD card...

CVE-2025-55810

A vulnerability was found in Alaga Home Security WiFi Camera 3K model S-CW2503C-H with hardware version V03 and firmware version 1.4.2, which allows physical attackers to execute commands as root via script file with a specific name on a SD card...

Alaga Home Security WiFi Camera 安全漏洞

Alaga Home Security WiFi Camera is a series of home webcams from Alaga USA. A security vulnerability exists in Alaga Home Security WiFi Camera that originates from a physical attacker being able to execute root commands via a specifically named SD card script file...

CVE-2025-55810

A vulnerability was found in Alaga Home Security WiFi Camera 3K model S-CW2503C-H with hardware version V03 and firmware version 1.4.2, which allows physical attackers to execute commands as root via script file with a specific name on a SD card...

CVE-2025-55810

A vulnerability was found in Alaga Home Security WiFi Camera 3K model S-CW2503C-H with hardware version V03 and firmware version 1.4.2, which allows physical attackers to execute commands as root via script file with a specific name on a SD card...

Malicious code in tusaaya-sd-s (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66e95799d8502d5f569614f75649dc7e54871d4c2e508deafd899473424e44ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-147417

Malicious code in tusaaya-sd-s npm...

Malicious code in mursai-bdurt-sd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b285b395afa0339a4acbefdb72bf1b8b5013ccac5a9d6e1cb84d61973872e9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...