Malware in @cryptochords/shared

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Bluetooth Service Privilege Escalation

The vulnerability of the Bluetooth Service for Windows operating systems is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Graphics component Windows Privilege Escalation

The vulnerability of the Graphics component in Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to increase their privileges...

Linux net/rose/rose_timer.c Heap Buffer Overflow DoS

The vulnerability of the net/rose/rosetimer.c component in the Linux operating system is related to the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and caus...

mtk_eth_soc Kernel DoS

The vulnerability of the mtkethsoc component in the Linux operating system’s kernel is related to the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability can allow an attacker to cause a service failure...

netfilter Kernel Data Compromise

The vulnerability of the netfilter component in the Linux operating system’s kernel is related to the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause...

Linux IPv4 Kernel DoS

The vulnerability of IPv4 components of the Linux operating system’s kernel is related to the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability can allow an attacker to cause service failures...

Linux sch_drr.c Component Data Compromise

The vulnerability of the schdrr.c component in the Linux operating system’s kernel is related to insufficient checking of the status of shared resources. Exploiting this vulnerability could allow an attacker to compromise data integrity...

fs/exfat Kernel Data Compromise

The vulnerability of the fs/exfat component in the Linux operating system’s kernel is related to the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and...

Linux streamzap.c DoS

The vulnerability of the streamzap.c component in the Linux operating system’s kernel is related to the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux kernel DoS

The vulnerability of the Linux operating system’s kernel relates to the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability can allow an attacker to cause service failures...

Linux kernel Synchronization DoS

The vulnerability of the Linux operating system’s kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2025-59936

get-jwks contains fetch utils for JWKS keys. In versions prior to 11.0.2, a vulnerability in get-jwks can lead to cache poisoning in the JWKS key-fetching mechanism. When the iss issuer claim is validated only after keys are retrieved from the cache, it is possible for cached keys from an...

media: rkisp1: Fix IRQ handling due to shared interrupts

...

Malicious code in @pvz-admin/shared (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c4020200a4088b595e243ce109fbec2e1823739ccd908dcf7a5600488e85b8a0 Any computer that has this package installed or running should be considered...

MAL-2025-47840 Malicious code in @pvz-admin/shared (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c4020200a4088b595e243ce109fbec2e1823739ccd908dcf7a5600488e85b8a0 Any computer that has this package installed or running should be considered...

Malicious code in cds-shared (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-47621 Malicious code in cds-shared (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2025-35027

Multiple robotic products by Unitree sharing a common firmware, including the Go2, G1, H1, and B2 devices, contain a command injection vulnerability. By setting a malicious string when configuring the on-board WiFi via a BLE module of an affected robot, then triggering a restart of the WiFi...

Malicious code in filecoin-checker-shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6196805b97dfa338fede5b1f871b87e26bfe4909ed5ac6a26c580e29f40cd85d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...