Malicious code in fork-serialize-secure-grid-load (npm)

The package fork-serialize-secure-grid-load was found to contain malicious code...

Malicious code in serialize-sudo-delta-sandbox-decode (npm)

The package serialize-sudo-delta-sandbox-decode was found to contain malicious code...

Malicious code in serialize-module-wind-cache-execute (npm)

The package serialize-module-wind-cache-execute was found to contain malicious code...

MAL-2025-20785 Malicious code in fork-serialize-secure-grid-load (npm)

The package fork-serialize-secure-grid-load was found to contain malicious code...

MAL-2025-32992 Malicious code in serialize-stub-secure-protected-psi (npm)

The package serialize-stub-secure-protected-psi was found to contain malicious code...

MAL-2025-16419 Malicious code in cache-cluster-async-gamma-serialize (npm)

The package cache-cluster-async-gamma-serialize was found to contain malicious code...

MAL-2025-40962 Malicious code in zeta-uglify-serialize-finally-gamma (npm)

The package zeta-uglify-serialize-finally-gamma was found to contain malicious code...

MAL-2025-26215 Malicious code in meta-bad-protected-orchestrate-serialize (npm)

The package meta-bad-protected-orchestrate-serialize was found to contain malicious code...

MAL-2025-32993 Malicious code in serialize-sudo-delta-sandbox-decode (npm)

The package serialize-sudo-delta-sandbox-decode was found to contain malicious code...

Malicious code in compile-serialize-uglify-book-simulate (npm)

The package compile-serialize-uglify-book-simulate was found to contain malicious code...

Malicious code in zeta-uglify-serialize-finally-gamma (npm)

The package zeta-uglify-serialize-finally-gamma was found to contain malicious code...

Malicious code in fire-good-serialize-process-phi (npm)

The package fire-good-serialize-process-phi was found to contain malicious code...

MAL-2025-15219 Malicious code in awk-serialize-upsilon-web-yaml (npm)

The package awk-serialize-upsilon-web-yaml was found to contain malicious code...

Linux Distros Unpatched Vulnerability : CVE-2025-2926

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in HDF5 up to 1.14.6 and classified as problematic. This issue affects the function H5Ocachechkserialize of the file src/H5Ocache.c. T...

📄 PivotX 3.0.0 RC3 Remote Code Execution / Cross Site Scripting

PivotX version 3.0.0 RC3 suffers from a persistent cross site scripting vulnerability that can assist an attacker in achieving remote code execution once privileges are escalated. Exploit Title: PivotX v3.0.0 RC3 - Stored XSS to Remote Code Execution RCE Date: July 2025 Exploit Author: HayToN...

SUSE CVE-2025-7067

A vulnerability classified as problematic was found in HDF5 1.14.6. This vulnerability affects the function H5FSsinfoserializenodecb of the file src/H5FScache.c. The manipulation leads to heap-based buffer overflow. Local access is required to approach this attack. The exploit has been disclosed ...

DEBIAN-CVE-2025-7067

A vulnerability classified as problematic was found in HDF5 1.14.6. This vulnerability affects the function H5FSsinfoserializenodecb of the file src/H5FScache.c. The manipulation leads to heap-based buffer overflow. Local access is required to approach this attack. The exploit has been disclosed ...

AZL-65208 CVE-2025-7067 affecting package hdf5 for versions less than 1.14.6-1

A vulnerability classified as problematic was found in HDF5 1.14.6. This vulnerability affects the function H5FSsinfoserializenodecb of the file src/H5FScache.c. The manipulation leads to heap-based buffer overflow. Local access is required to approach this attack. The exploit has been disclosed ...

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow via the H5FSsinfoserializenodecb function. An attacker can cause a denial of service by triggering a heap-based buffer overflow through local access. Remediation A fix was pushed into the master branch but not...

Security Bulletin: IBM Event Endpoint Management is vulnerable to a Cross-site scripting (XSS) attack (CVE-2024-11831).

Summary IBM Event Endpoint Management is vulnerable to a Cross-site scripting XSS attack due to a flaw in npm-serialize-javascript. It is used for safely serialize complex JavaScript objects for storage or transmission. Vulnerability Details CVEID:CVE-2024-11831 DESCRIPTION: A flaw was found in...