13088 matches found
MAL-2025-5774 Malicious code in dtcp-module (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d6735c1027226ecf96f1649634b0f5e6177c10f5cd381586d03cd9f38015d68 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MINI-JGGR-2452-8FFH
Bulletin has no description...
CVE-2025-53632 Chall-Manager's scenario decoding process does not check for zip slips
Chall-Manager is a platform-agnostic system able to start Challenges on Demand of a player. When decoding a scenario i.e. a zip archive, the path of the file to write is not checked, potentially leading to zip slips. Exploitation does not require authentication nor authorization, so anyone can...
CGA-94PQ-RJWP-8F48
Bulletin has no description...
CGA-28C3-6PCM-WJ3H
Bulletin has no description...
CGA-GJH7-VGMP-3RXP
Bulletin has no description...
CGA-QW3C-GRF7-HR39
Bulletin has no description...
CGA-5J26-2MQM-V6WP
Bulletin has no description...
RHSA-2025:10701 Red Hat Security Advisory: kernel security update
Bulletin has no description...
CGA-HJVV-FGJM-QV57
Bulletin has no description...
CVE-2025-38330 firmware: cs_dsp: Fix OOB memory read access in KUnit test (ctl cache)
In the Linux kernel, the following vulnerability has been resolved: firmware: csdsp: Fix OOB memory read access in KUnit test ctl cache KASAN reported out of bounds access - csdspctlcacheinitmultipleoffsets. The code uses mockcoefftemplate.lengthbytes 4 bytes for register value allocations. But...
CVE-2025-38310 seg6: Fix validation of nexthop addresses
In the Linux kernel, the following vulnerability has been resolved: seg6: Fix validation of nexthop addresses The kernel currently validates that the length of the provided nexthop address does not exceed the specified length. This can lead to the kernel reading uninitialized memory if user space...
CVE-2025-38289 scsi: lpfc: Avoid potential ndlp use-after-free in dev_loss_tmo_callbk
In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Avoid potential ndlp use-after-free in devlosstmocallbk Smatch detected a potential use-after-free of an ndlp oject in devlosstmocallbk during driver unload or fatal error handling. Fix by reordering code to avoid...
CGA-MQC4-2W23-VGP8
Bulletin has no description...
BELL-CVE-2025-38248
Bulletin has no description...
BELL-CVE-2025-38262
Bulletin has no description...
BELL-CVE-2025-38257
Bulletin has no description...
BIT-GIT-2025-48385 Git alllows arbitrary file writes via bundle-uri parameter injection
Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. When cloning a repository Git knows to optionally fetch a bundle advertised by the remote server, which allows the server-side to...
MAL-2025-5745 Malicious code in @nomicsfoundation/hardhat-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 47ee3c366ab380260bf1b14296eaac2bfe3c76b726ea2c18b271e9e2af4b8f7a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...