MiracleLinux 9 : postgresql-13.13-1.el9_3 (AXSA:2023-7047:07)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-7047:07 advisory. postgresql: Buffer overrun from integer overflow in array modification CVE-2023-5869 postgresql: Memory disclosure in aggregate function calls...

Malicious code in @daffadeveloper/signal-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae0087b0a9b601b66eed90dbf41396601a483159b3e74933ad6ed63e6a06e3d1 The package @daffadeveloper/signal-node was found to contain malicious code. Source: ghsa-malware...

Malicious Package

Overview @daffadeveloper/signal-node is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

EUVD-2026-3278

Malicious code in @daffadeveloper/signal-node npm...

MAL-2026-330 Malicious code in @daffadeveloper/signal-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae0087b0a9b601b66eed90dbf41396601a483159b3e74933ad6ed63e6a06e3d1 The package @daffadeveloper/signal-node was found to contain malicious code. Source: ghsa-malware...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2026-50061)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-50061 advisory. - tipc: Fix use-after-free in tipcmonreinitself. Kuniyuki Iwashima Orabug: 38855323 CVE-2025-40280 - vsock: Ignore signal/timeout on connect if...

MiracleLinux 7 : socat-1.7.3.2-2.el7 (AXBA:2017-1813:01)

The remote MiracleLinux 7 host has a package installed that is affected by a vulnerability as referenced in the AXBA:2017-1813:01 advisory. - The signal handler implementations in socat before 1.7.3.0 and 2.0.0-b8 allow remote attackers to cause a denial of service process freeze or crash...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004464)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004464 advisory. A flaw possibility of race condition and incorrect initialization of the process id was found in the Linux kernel child/parent process identification handling while...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003957)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003957 advisory. A flaw possibility of race condition and incorrect initialization of the process id was found in the Linux kernel child/parent process identification handling while...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003860)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003860 advisory. A signal access-control issue was discovered in the Linux kernel before 5.6.5, aka CID-7395ea4e65c2. Because execid in include/linux/sched.h is only 32 bits, an...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001470)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001470 advisory. A flaw was found in the way memory resources were freed in the unixstreamrecvmsg function in the Linux kernel when a signal was pending. This flaw allows an...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004228)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004228 advisory. A signal access-control issue was discovered in the Linux kernel before 5.6.5, aka CID-7395ea4e65c2. Because execid in include/linux/sched.h is only 32 bits, an...

MiracleLinux 3 : dbus-glib-0.73-11.AXS3 (AXSA:2013-125:01)

The remote MiracleLinux 3 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2013-125:01 advisory. D-Bus add-on library to integrate the standard D-Bus library with the GLib thread abstraction and main loop. Security issues fixed with this release:...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000683)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000683 advisory. On Linux running on PowerPC hardware Power8 or later a user process can craft a signal frame and then do a sigreturn so that the kernel will take an exception...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001460)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001460 advisory. A flaw possibility of race condition and incorrect initialization of the process id was found in the Linux kernel child/parent process identification handling while...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003393)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003393 advisory. On Linux running on PowerPC hardware Power8 or later a user process can craft a signal frame and then do a sigreturn so that the kernel will take an exception...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003225)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003225 advisory. The x86/fpu Floating Point Unit subsystem in the Linux kernel before 4.13.5, when a processor supports the xsave feature but not the xsaves feature, does not correct...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002878)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002878 advisory. The killsomethinginfo function in kernel/signal.c in the Linux kernel before 4.13, when an unspecified architecture and compiler is used, might allow local users to...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002641)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002641 advisory. The x86/fpu Floating Point Unit subsystem in the Linux kernel before 4.13.5, when a processor supports the xsave feature but not the xsaves feature, does not correct...

PLUGGYAPE Malware Uses Signal and WhatsApp to Target Ukrainian Defense Forces

The Computer Emergency Response Team of Ukraine CERT-UA has disclosed details of new cyber attacks targeting its defense forces with malware known as PLUGGYAPE between October and December 2025. The activity has been attributed with medium confidence to a Russian hacking group tracked as Void...