MAL-2025-47478 Malicious code in dowload_ebok_la_tigre_azzurra_by_nicolas_barreau_bkcek (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b5287a522154683f0d46492e8eadd688fe50efe83c0e02bea2c5ad23463eb4c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47505 Malicious code in tailwind-scrollmenu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 670918a6780c8dfd5085225b5db85733fee0cfde4128583ec1c4028d9168b2bf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in aot-npm-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 387dbb36bb1161598fbfa2872fbf071892696c3a1df11c616ffa424495bacdb0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-34201

Vasion Print formerly PrinterLogic Virtual Appliance Host and Application VA and SaaS deployments run many Docker containers on shared internal networks without firewalling or segmentation between instances. A compromise of any single container allows direct access to internal services HTTP, Redi...

CVE-2025-34202

Vasion Print formerly PrinterLogic Virtual Appliance Host prior to 25.2.169 and Application prior to 25.2.1518 VA and SaaS deployments expose Docker internal networks in a way that allows an attacker on the same external L2 segment — or an attacker able to add routes using the appliance as a...

PT-2025-44683

Name of the Vulnerable Software and Affected Versions Google Chrome affected versions not specified Description A flaw exists in Google Chrome that could allow attackers to compromise the system. The issue involves a policy bypass within Chrome Extensions. This impacts Microsoft Edge, which is...

CVE-2025-34202

Vasion Print formerly PrinterLogic Virtual Appliance Host prior to 25.2.169 and Application prior to 25.2.1518 VA and SaaS deployments expose Docker internal networks in a way that allows an attacker on the same external L2 segment — or an attacker able to add routes using the appliance as a...

CVE-2025-34202

Vasion Print formerly PrinterLogic Virtual Appliance Host prior to 25.2.169 and Application prior to 25.2.1518 VA and SaaS deployments expose Docker internal networks in a way that allows an attacker on the same external L2 segment — or an attacker able to add routes using the appliance as a...

CVE-2025-34201

The CVE-2025-34201 entry concerns Vasion Print (formerly PrinterLogic) Virtual Appliance Host and Application used in VA/SaaS deployments. It states that Docker containers are run on shared internal networks without firewalling or segmentation between instances, so a compromise of any single cont...

MAL-2025-47470 Malicious code in oauthly (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f51e9d4666c50bc7bc1a5f83811020d5da995fc251b9ec96a9ad3b8a3c6e2ecf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in internallib_v669 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c74fa66856ac3b7c8cc0f5f559a15175c7a39ebbca11744c7bce73eae5fa990b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47468 Malicious code in internallib_v669 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c74fa66856ac3b7c8cc0f5f559a15175c7a39ebbca11744c7bce73eae5fa990b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47466 Malicious code in internallib_v504 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef29b128600afaa40be1b95115adb2fd455e0f2369a632fffb2af8949124e6c6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47469 Malicious code in internallib_v915 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3514c2a5f4c17fc8f3a153f8c5601c0308a3dded83b19b0b6a387943c2425178 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2025-38609

Name of the Vulnerable Software and Affected Versions Vasion Print Virtual Appliance Host versions prior to 25.2.169 Vasion Print Application versions prior to 25.2.1518 Description The Vasion Print Virtual Appliance and Application expose Docker internal networks, allowing attackers on the same...

Malicious code in another-shai (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f3fba9cc731c68608bf4548a514b4491220c23775767b250f6c1cc318584a843 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

USN-7722-2: Linux kernel vulnerability

A security issues was discovered in the Linux kernel. An attacker could possibly use this to compromise the system. This update corrects flaws in the following subsystem: - Network traffic control; CVE-2025-38350...

USN-7754-2 linux-aws-fips, linux-fips, linux-gcp-fips vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Network traffic control; CVE-2025-38350, CVE-2025-37752, CVE-2024-57996...

USN-7754-1: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Network traffic control; CVE-2025-38350, CVE-2025-37752, CVE-2024-57996...

CVE-2025-34183 Ilevia EVE X1 Server 4.7.18.0.eden Credentials Leak Through Log Disclosure

Ilevia EVE X1 Server version ≤ 4.7.18.0.eden contains a vulnerability in its server-side logging mechanism that allows unauthenticated remote attackers to retrieve plaintext credentials from exposed .log files. This flaw enables full authentication bypass and system compromise through credential...