9705 matches found
Malicious code in node-hashing (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c5d317a1c60082e11dcf4b2d8a23616192cc326cd4fa14d1dd132b164d87fdce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-3502 Malicious code in node-hashing (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c5d317a1c60082e11dcf4b2d8a23616192cc326cd4fa14d1dd132b164d87fdce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-3486 Malicious code in auth-help3r (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4fcb399ae4d0f936194424a6a54364f75f3fc4728a9bcb599e3ac9082a380c46 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-3504 Malicious code in turbo-bike-inspector (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0b2b7e282a4f78a18dbc7c28f2200bea91788bc176c9f76173a34af8ead206dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-3497 Malicious code in jd-npm-com-test (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0f205097feb67db492d1ce42f141278ef445cb7792b8c530f866eb0a837e6d47 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-3496 Malicious code in jcp-benchmarking (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b0e185faf71a47d06bf407e04233da78db300929cea4486b8c8df41edbc6c67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in jcp-benchmarking (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b0e185faf71a47d06bf407e04233da78db300929cea4486b8c8df41edbc6c67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Exploit for Missing Authentication for Critical Function in Erlang Erlang\/Otp
CVE-2025-32433 CVE-2025-32433 Summary and Attack Overview CVE...
CVE-2025-3509
A Remote Code Execution RCE vulnerability was identified in GitHub Enterprise Server that allowed attackers to execute arbitrary code by exploiting the pre-receive hook functionality, potentially leading to privilege escalation and system compromise. The vulnerability involves using dynamically...
Malicious code in dowload_ebok_englens_spil_by_carlos_ruiz_zafon_iben_hasselbalch_lqvq8 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6a13704c12e7e39594e32a2fa929139780659e502c52a16c0d1e57c897b561c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-3388 Malicious code in dowload_ebok_englens_spil_by_carlos_ruiz_zafon_iben_hasselbalch_lqvq8 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6a13704c12e7e39594e32a2fa929139780659e502c52a16c0d1e57c897b561c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
USN-7462-2: Linux kernel (AWS FIPS) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - GPU drivers; - Network drivers; - File systems infrastructure; - Ext4 file system; - Network file system NFS server...
Malicious code in keypair-encryptor (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c02f1145632762977fc8763c9f6ee3f5c9272b45196357654217a1bc1ce13bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Ubuntu: Security Advisory (USN-7443-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 20.04 LTS : Linux kernel (IBM) vulnerabilities (USN-7458-1)
"The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7458-1 advisory. Attila Szsz discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a...
Ubuntu 20.04 LTS : Linux kernel (Intel IoTG) vulnerabilities (USN-7459-1)
"The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7459-1 advisory. Jann Horn discovered that the watchqueue event notification subsystem in the Linux kernel contained an out-of-bounds write vulnerability. A local attack...
Malicious code in tree-sitter-your-language (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a2eb2b9f4016b7bb6e4361eba8cd63c311f6f4674e10edc744de4622f0766482 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
USN-7450-1: Linux kernel vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - MIPS architecture; - PowerPC architecture; - RISC-V architecture; - S390 architecture; - Supe...
USN-7448-1: Linux kernel vulnerabilities
It was discovered that the CIFS network file system implementation in the Linux kernel did not properly verify the target namespace when handling upcalls. An attacker could use this to expose sensitive information. CVE-2025-2312 Several security issues were discovered in the Linux kernel. An...
USN-7445-1: Linux kernel vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - GPIO subsystem; - GPU drivers; - IRQ chip drivers; - Network drivers; - Mellanox network drivers; - x86 platform...