Ubuntu 16.04 LTS / 18.04 LTS : Linux kernel vulnerabilities (USN-7553-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7553-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update...

ABB Cylon Aspect 3.08.04 DeploySource - Remote Code Execution (RCE)

ABB Cylon Aspect 3.08.04 DeploySource - Remote Code Execution RCE Vendor: ABB Ltd. Product web page: https://www.global.abb Affected version: NEXUS Series, MATRIX-2 Series, ASPECT-Enterprise, ASPECT-Studio Firmware: =3.08.04 Summary: ASPECT is an award-winning scalable building energy management...

Malicious code in conventional-changelog-action (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 824c344ea468bb338b2b69885de649068ca830ed86879b6b8d0142a646097470 Any computer that has this package installed or running should be considered...

Malicious code in @sasmeee/wabetainfo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7027d0725ce64bc70ef8e7bfcafb2c6d3bf6101d0c98cf6d2e52f59a04fd87ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @sasmeee/tkdl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 86e369ff2cd51d4106a9d5c63d747520d44d4f24c18d810d65fb7de9c2d16061 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-1701

CVE-2025-1701 is a high-severity vulnerability in the MIM Admin service. An attacker could exploit this vulnerability by sending a specially crafted request over the RMI interface to execute arbitrary code with the privileges of the MIM Admin service. The RMI interface is only accessible locally...

MAL-2025-4667 Malicious code in checkout-sparse (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f5576b93b0dbfc8f72fa10da0b8b43e6ba0e801c71d51807996063ee1f73f84 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in keypair-core-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c2a54a7dc344c67f1694d2a8f965c6ab161011af4fd98177d19a9536a0218b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

USN-7554-3: Linux kernel (FIPS) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Block layer subsystem; - Clock framework and drivers; - GPU drivers; - Parport drivers; - Ext4 file system; - JFFS2...

USN-7554-2: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Block layer subsystem; - Clock framework and drivers; - GPU drivers; - Parport drivers; - Ext4 file system; - JFFS2...

USN-7554-1: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Block layer subsystem; - Clock framework and drivers; - GPU drivers; - Parport drivers; - Ext4 file system; - JFFS2...

USN-7553-2: Linux kernel (FIPS) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Clock framework and drivers; - GPU drivers; - Parport drivers; - Ext4 file system; - JFFS2 file system; - JFS file...

USN-7553-1: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Clock framework and drivers; - GPU drivers; - Parport drivers; - Ext4 file system; - JFFS2 file system; - JFS file...

USN-7550-4: Linux kernel (Azure CVM) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - GPU drivers; - Sun RPC protocol; CVE-2024-53168, CVE-2024-56551, CVE-2024-56608...

Malicious code in keypair-decryptor-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28b7a13ea11bbb26ce1785b3784f6dcd3470a60ad16e2235d40089c17023e8e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in espresso-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8ce5ab7d96b084c2116afda967b080d56ed7a0dad48fe8ac7b67a1317824e8a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fluro-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c04c138df7be76776b255750944cf66472503de25abd93507c7ab4d8edf33c58 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in some-private-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 74c2eb038ada13a2b2c86adb72a460b9a2e327e9682b3ecce38839b4f8de281d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in graphstruct (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3d501610322eef6c7aa27534198e500566f7ac611d91e55d92612e12fb8bd817 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4654 Malicious code in plugin-svg-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 824299b29c64a19455bcdc235b9c2726b1ae00b364f8a549bb972a1be842eb43 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...