EUVD-2025-115287

Malicious code in cluster-callisto-ursa-standard npm...

EUVD-2025-113411

Malicious code in frontend-chakra-ui-standard-colors npm...

EUVD-2025-117066

Malicious code in standard-beige-porcupine npm...

EUVD-2025-117065

Malicious code in standard-peach-cockroach npm...

EulerOS 2.0 SP10 : cloud-init (EulerOS-SA-2025-2408)

According to the versions of the cloud-init package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : When a non-x86 platform is detected, cloud-init grants root access to a hardcoded url with a local IP address. To prevent this,cloud-init defau...

ROS-20251112-03

A vulnerability in the OpenSSL cryptographic library is related to the use of a non-standard option SSLOPNOTICKET, in which the session cache continues to grow indefinitely. Exploiting the vulnerability could Allow an attacker acting remotely to cause a denial of service...

Extensions Component Bypass

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge is related to errors in the implementation of security checks for standard elements. Exploiting this vulnerability can allow an attacker to circumvent existing security restrictions remotely...

Google Chrome Microsoft Edge Unauthorized Access

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to errors in the implementation of security checks for standard elements. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Autofill Component Information Disclosure

The vulnerability of the Autofill component in Google Chrome and Microsoft Edge is related to errors in the implementation of security checks for standard elements. Exploiting this vulnerability can allow an attacker to gain access to confidential information...

EUVD-2025-102082

Malicious code in standardplanarianz3n npm...

EUVD-2025-102083

Malicious code in standardcranez3n npm...

Cross-site Scripting (XSS)

Piranha is vulnerable to Cross-site Scripting XSS. The vulnerability is due to improper input sanitization in the Text content block of Standard and Standard Archive Pages via /manager/pages, which allows an attacker to inject malicious JavaScript that executes in another user’s browser...

EUVD-2025-88673

Malicious code in standardwolfz3n npm...

kernel: smb: client: Add check for next_buffer in receive_encrypted_standard()

In the Linux kernel, the following vulnerability has been resolved: smb: client: Add check for nextbuffer in receiveencryptedstandard Add check for the return value of cifsbufget and cifssmallbufget in receiveencryptedstandard to prevent null pointer dereference...

kernel: smb: client: Add check for next_buffer in receive_encrypted_standard()

In the Linux kernel, the following vulnerability has been resolved: smb: client: Add check for nextbuffer in receiveencryptedstandard Add check for the return value of cifsbufget and cifssmallbufget in receiveencryptedstandard to prevent null pointer dereference...

EUVD-2025-75550

Malicious code in standardraccoon-smiletea npm...

EUVD-2025-75551

Malicious code in standardpossum-toolteadev npm...

EUVD-2025-78230

Malicious code in standardhippopotamusz3n npm...

EUVD-2025-80456

Malicious code in standardmole0xrequest npm...

MAL-2025-109071 Malicious code in standard_crawdad_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eab99207fe6161c74d35c6ea7709d7384cb7bdfa5569d97fbf6802a37c4bd6e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...