8580 matches found
AZL-68879 CVE-2025-40080 affecting package kernel for versions less than 6.6.112.1-2
In the Linux kernel, the following vulnerability has been resolved: nbd: restrict sockets to TCP and UDP Recently, syzbot started to abuse NBD with all kinds of sockets. Commit cf1b2326b734 "nbd: verify socket is supported during setup" made sure the socket supported a shutdown method. Explicitel...
EUVD-2025-36448
In the Linux kernel, the following vulnerability has been resolved: nbd: restrict sockets to TCP and UDP Recently, syzbot started to abuse NBD with all kinds of sockets. Commit cf1b2326b734 "nbd: verify socket is supported during setup" made sure the socket supported a shutdown method. Explicitel...
SUSE CVE-2025-52099
DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2025-29088. Reason: This record is a duplicate of CVE-2025-29088. Notes: All CVE users should reference CVE-2025-29088 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage...
kernel: mm: swap: fix potential buffer overflow in setup_clusters()
A flaw was found in the Linux kernel's memory management mm swap component. A local attacker with low privileges could exploit a buffer overflow vulnerability in the setupclusters function. This issue arises from insufficient validation of page ranges, which could allow an attacker to write data...
The vulnerabilities of the x86/coco components of the Linux operating system’s kernel, which allow a hacker to cause a service failure
The vulnerability of the x86/coco components of the Linux operating system’s kernel is related to insufficient checking of input data in the setuparch and ccmkdec functions. Exploiting this vulnerability can allow an attacker to cause a service failure...
MAL-2025-191844 Malicious code in python3-autopep8 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 36e35b782ec2e15a96c4b7c9d9eb5bacbbf3ded26b6b3ee72f2f698b1622c241 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
Malicious code in python3-autopep8 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 36e35b782ec2e15a96c4b7c9d9eb5bacbbf3ded26b6b3ee72f2f698b1622c241 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
Malicious code in statsapi (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 5c59dd2732ec529321670e500c8b732a5641b361029fd435277a6f110d4c5286 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
MAL-2025-191878 Malicious code in statsapi (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 5c59dd2732ec529321670e500c8b732a5641b361029fd435277a6f110d4c5286 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
SUSE CVE-2025-50950
Audiofile v0.3.7 was discovered to contain a NULL pointer dereference via the ModuleState::setup function...
EUVD-2025-35887
Integer Overflow vulnerability in SQLite SQLite3 v.3.50.0 allows a remote attacker to cause a denial of service via the setupLookaside function...
EUVD-2025-35864
D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formLanSetupRouterSettings...
SUSE-SU-2025:20875-1 Security update for kernel-livepatch-MICRO-6-0-RT_Update_6
This update for kernel-livepatch-MICRO-6-0-RTUpdate6 fixes the following issues: - CVE-2025-38206: exfat: fix double free in delayedfree bsc1246075 - CVE-2025-38396: fs: export anoninodemakesecureinode and fix secretmem LSM bypass bsc1247158 - CVE-2025-38471: kernel: tls: always refresh the queue...
Malicious Package
Overview mender-setup is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
MAL-2025-48577 Malicious code in mender-setup (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 95b2a0aeb7e210157ad59facfa9c0e679873c34a71078e93e3410440365970a9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
EUVD-2025-35762
Malicious code in mender-setup npm...
Malicious code in mender-setup (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 95b2a0aeb7e210157ad59facfa9c0e679873c34a71078e93e3410440365970a9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2025-60552
CVE-2025-60552 affects the D-Link DIR600L router (DIR600L Ax FW116WWb01). A buffer overflow is triggered in the function formTcpipSetup via the input noted in the curTime parameter, due to improper input length validation. Reported impact is denial of service, with CVSSv3.1 indicating Network acc...
CVE-2025-52099
CVE-2025-52099 describes an integer overflow in SQLite3 v3.50.0 that can enable a remote denial of service via the setupLookaside function. The root cause is an overflow during memory allocation in sqlite3_db_config-related code, leading to potential exploitation that can crash the application. P...
