Ubuntu 24.10 : Linux kernel vulnerabilities (USN-7323-2)

The remote Ubuntu 24.10 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7323-2 advisory. Attila Szsz discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a speciall...

Ubuntu: Security Advisory (USN-7327-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 22.04 LTS / 24.04 LTS : Linux kernel vulnerability (USN-7324-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-7324-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws...

Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel vulnerabilities (USN-7328-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7328-1 advisory. Attila Szsz discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker coul...

Exploit for Missing Authorization in Spicethemes Newscrunch

Newscrunch Exploit CVE-2025-1307 🚨 Overview This exploit...

USN-7329-1: Linux kernel vulnerabilities

Attila Szász discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted, could cause a denial of service system crash or possibly execute arbitrary code...

USN-7329-1 linux-gcp, linux-gcp-5.15, linux-gke vulnerabilities

Attila Szász discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted, could cause a denial of service system crash or possibly execute arbitrary code...

USN-7324-1: Linux kernel vulnerability

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Media drivers; CVE-2024-53104...

USN-7324-1 linux, linux-lowlatency, linux-lowlatency-hwe-6.8 vulnerability

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Media drivers; CVE-2024-53104...

Malicious code in process-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 756473e9e78d1d2db26cddd093eecff1900a2bb075716275fac12c4a760d6f9b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2189 Malicious code in resc-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d81dbc4c66b5f25d59f9bd5701536667f95b999b24a84aac3978047f685dc174 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nazir-scraper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 48a115000dc7228960ddb820e0687c73a67dccfb4f2eddcfc17b52247ba9a26c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in requireform (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c99f289c40aca4d37d6a0e570ffff5b68ab746b09a266718bf794bb3fcda61b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2188 Malicious code in requireform (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c99f289c40aca4d37d6a0e570ffff5b68ab746b09a266718bf794bb3fcda61b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

USN-7323-1: Linux kernel vulnerabilities

Attila Szász discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted, could cause a denial of service system crash or possibly execute arbitrary code...

Malicious code in async-query-data (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3c182fcd486203b0e1bcf7d1677e5b65105252c5d88f343b159e8dec92e0c772 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2190 Malicious code in safe-events-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2c5f0543a7347a07a6c8e5268d63a80e4043f47d8b45500c6c585b72d093b118 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2181 Malicious code in makerspace-cpx-intro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f001e9f23b801fb8c275858b50785d657d092aac3e06e694490e7e4b5dd0ae1a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2164 Malicious code in api-discord.js-v14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d7ee9add0a4330d935c9898bf52c0fb410166bbda7287b5e162e139afd045bf9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2163 Malicious code in alexpavlov--jquery-suggestable (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6f4773aee85f3d282a89ee413b5af4e93365981f67b821882709daf1d3cc6eac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...