SUSE SLES12 Security Update : runc (SUSE-SU-2025:4077-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4077-1 advisory. Update to runc v1.3.3. Upstream changelog is available from . bsc1252232 CVE-2025-31133 CVE-2025-52565 CVE-2025-52881 Update to runc v1.3.2...

Siemens SIMATIC S7-1500 Signal Handler Race Condition (CVE-2025-4598)

A vulnerability was found in systemd-coredump. This flaw allows an attacker to force a SUID process to crash and replace it with a non- SUID binary to access the original's privileged process coredump, allowing the attacker to read sensitive data, such as /etc/shadow content, loaded by the origin...

CVE-2025-60672

An unauthenticated command injection vulnerability exists in the D-Link DIR-878A1 router firmware FW101B04.bin. The vulnerability occurs in the 'SetDynamicDNSSettings' functionality, where the 'ServerAddress' and 'Hostname' parameters in prog.cgi are stored in NVRAM and later used by rc to...

CVE-2025-40182

In the Linux kernel, the following vulnerability has been resolved: crypto: skcipher - Fix reqsize handling Commit afddce13ce81d "crypto: api - Add reqsize to cryptoalg" introduced crareqsize field in cryptoalg struct to replace type specific reqsize fields. It looks like this was introduced...

DEBIAN-CVE-2025-40182

In the Linux kernel, the following vulnerability has been resolved: crypto: skcipher - Fix reqsize handling Commit afddce13ce81d "crypto: api - Add reqsize to cryptoalg" introduced crareqsize field in cryptoalg struct to replace type specific reqsize fields. It looks like this was introduced...

CVE-2025-40182

Technical details for CVE-2025-40182 are not provided in the supplied documents. The initial description mentions a kernel crypto skcipher reqsize handling issue, but no vendor/version specifics or remediation are included here. Monitor for updated advisories.

CVE-2025-40182 crypto: skcipher - Fix reqsize handling

In the Linux kernel, the following vulnerability has been resolved: crypto: skcipher - Fix reqsize handling Commit afddce13ce81d "crypto: api - Add reqsize to cryptoalg" introduced crareqsize field in cryptoalg struct to replace type specific reqsize fields. It looks like this was introduced...

EUVD-2025-136966

Malicious code in rusdi-set-nutru npm...

EUVD-2025-136958

Malicious code in rusdi-set-rusma npm...

EUVD-2025-136953

Malicious code in rusdi-set-rusu npm...

EUVD-2025-136960

Malicious code in rusdi-set-rusm npm...

EUVD-2025-141618

Malicious code in rusdi-set-rusmaya npm...

Malicious code in rusdi-set-nutru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0b464272cf8e2bfc3864b0613c1e83aebac54a86f50ec305bdb752804ac5482 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178362 Malicious code in rusdi-set-rusu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b46856c9f895aa1677efb4696fcf066f81fd533a70ec75d0db2eaf502c75d5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173141 Malicious code in budi-set-rusmaya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a506d084a14bfc8b02ebcd023ee60598148fe8f295aeec94fd2a10025a594c2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-143162

Malicious code in budi-set-rusmaya npm...

EUVD-2025-136964

Malicious code in rusdi-set-ru npm...

EUVD-2025-136962

Malicious code in rusdi-set-rus npm...

EUVD-2025-136956

Malicious code in rusdi-set-rusmay npm...

EUVD-2025-131925

A vulnerability in FiberHome GPON ONU HG6145F1 RP4423 allows the device's factory default Wi-Fi password WPA/WPA2 pre-shared key to be predicted from the SSID. The device generates default passwords using a deterministic algorithm that derives the router passphrase from the SSID, enabling an...