Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 : Erlang vulnerability (USN-7443-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 host has packages installed that are affected by a vulnerability as referenced in the USN-7443-1 advisory. Fabian Bumer, Marcel Maehren, Marcus Brinkmann, and Jrg Schwenk discovered that Erlang OTPs SSH module incorrect handled...

Malicious code in studocu-extension-pack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b65c603a493cae2050aa25da30a9442d60b84baa80985df69af20af3e08fc9f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3274 Malicious code in react-x-twitter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1675100a9b4622daef2a3e8d439f1baf8428c60cd4dad9b6fe09ef615ce1e645 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3270 Malicious code in fine-packages (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware efa7db7b7f29b44c0f53be5db51efa983975a15a5343fd0adf918ed6f7284c52 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rainbow-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 64c5fe41e9c20f99e7a295e9aefd4299f1b00420bbe2bda28b07249513a513f3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Ubuntu: Security Advisory (USN-7443-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-3509

A Remote Code Execution RCE vulnerability was identified in GitHub Enterprise Server that allowed attackers to execute arbitrary code by exploiting the pre-receive hook functionality, potentially leading to privilege escalation and system compromise. The vulnerability involves using dynamically...

USN-7443-1 erlang vulnerability

Fabian Bäumer, Marcel Maehren, Marcus Brinkmann, and Jörg Schwenk discovered that Erlang OTP’s SSH module incorrect handled authentication. A remote attacker could use this issue to execute arbitrary commands without authentication, possibly leading to a system compromise...

USN-7443-1: Erlang vulnerability

Fabian Bäumer, Marcel Maehren, Marcus Brinkmann, and Jörg Schwenk discovered that Erlang OTP’s SSH module incorrect handled authentication. A remote attacker could use this issue to execute arbitrary commands without authentication, possibly leading to a system compromise...

Malicious code in r5-wallet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc4aaeb0366774d42ad97cf330e53bc1deac3770a8de992cd1e837ecd9190dbc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in helper-member-expression-to-functions (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e46054f993cedcc0d3d1aa68cb5224550c94097ec1d867f3d8dba501da7963f7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in helper-split-export-declaration (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6daaf23e3df1ed0abe704ec032c37ed6c1d9ba40629a7588eabbb6adf785ad36 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fatfingers-hahayeet3333 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6b4086e35c75abc0351d990cbb4263a2e74284ca59bde975e0963623bf0a6b0b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3245 Malicious code in fatfingers-hahayeet3333 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6b4086e35c75abc0351d990cbb4263a2e74284ca59bde975e0963623bf0a6b0b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3244 Malicious code in fatfingers-hahayeet333 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5247d3c082d84b031145add7682e515a39d31412e45c6cd934738dc05ee86f9f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3241 Malicious code in fatfingers-hahayeet2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7b265d0af53100351e857e7122941420f14f207de723371c198bb1a273358c2b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fatfingers-hahayeet333 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5247d3c082d84b031145add7682e515a39d31412e45c6cd934738dc05ee86f9f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3230 Malicious code in airbnb-embed-frame (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 376bf68663b9b18092bb92b3b07313218798ff34c1a714d205121ac55072e1ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in airbnb-datepickeroptions (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 863302cb49601a697c0ab1dacb7cc78b529ff2a24b8185ceb782a5a48c10248c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3236 Malicious code in eco-solver (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a8f7c5551c322952642a4ae7cfaa02b59bd51fd08667100bbcf22cda084b0e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...