Ubuntu 20.04 LTS : Linux kernel vulnerabilities (USN-7331-1)

"The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7331-1 advisory. Attila Szsz discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a...

Ubuntu: Security Advisory (USN-7327-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 24.10 : Linux kernel vulnerabilities (USN-7323-2)

The remote Ubuntu 24.10 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7323-2 advisory. Attila Szsz discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a speciall...

Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel vulnerabilities (USN-7328-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7328-1 advisory. Attila Szsz discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker coul...

Ubuntu 22.04 LTS / 24.04 LTS : Linux kernel vulnerability (USN-7324-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-7324-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws...

Exploit for Missing Authorization in Spicethemes Newscrunch

Newscrunch Exploit CVE-2025-1307 🚨 Overview This exploit...

USN-7329-1: Linux kernel vulnerabilities

Attila Szász discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted, could cause a denial of service system crash or possibly execute arbitrary code...

USN-7329-1 linux-gcp, linux-gcp-5.15, linux-gke vulnerabilities

Attila Szász discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted, could cause a denial of service system crash or possibly execute arbitrary code...

USN-7324-1: Linux kernel vulnerability

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Media drivers; CVE-2024-53104...

USN-7324-1 linux, linux-lowlatency, linux-lowlatency-hwe-6.8 vulnerability

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Media drivers; CVE-2024-53104...

Malicious code in process-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 756473e9e78d1d2db26cddd093eecff1900a2bb075716275fac12c4a760d6f9b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2189 Malicious code in resc-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d81dbc4c66b5f25d59f9bd5701536667f95b999b24a84aac3978047f685dc174 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nazir-scraper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 48a115000dc7228960ddb820e0687c73a67dccfb4f2eddcfc17b52247ba9a26c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in requireform (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c99f289c40aca4d37d6a0e570ffff5b68ab746b09a266718bf794bb3fcda61b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2188 Malicious code in requireform (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c99f289c40aca4d37d6a0e570ffff5b68ab746b09a266718bf794bb3fcda61b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

USN-7323-1: Linux kernel vulnerabilities

Attila Szász discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted, could cause a denial of service system crash or possibly execute arbitrary code...

Malicious code in async-query-data (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3c182fcd486203b0e1bcf7d1677e5b65105252c5d88f343b159e8dec92e0c772 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2190 Malicious code in safe-events-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2c5f0543a7347a07a6c8e5268d63a80e4043f47d8b45500c6c585b72d093b118 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2181 Malicious code in makerspace-cpx-intro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f001e9f23b801fb8c275858b50785d657d092aac3e06e694490e7e4b5dd0ae1a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2164 Malicious code in api-discord.js-v14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d7ee9add0a4330d935c9898bf52c0fb410166bbda7287b5e162e139afd045bf9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...