CVE-2025-23308

NVIDIA CUDA Toolkit for all platforms contains a vulnerability in nvdisasm where an attacker may cause a heap-based buffer overflow by getting the user to run nvdisasm on a malicious ELF file. A successful exploit of this vulnerability may lead to arbitrary code execution at the privilege level o...

CVE-2025-23346

NVIDIA CUDA Toolkit contains a vulnerability in cuobjdump, where an unprivileged user can cause a NULL pointer dereference. A successful exploit of this vulnerability may lead to a limited denial of service...

USN-7770-1 linux-azure vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - Block layer subsystem; - Cryptographic API; - ACP...

AI vs. AI: Detecting an AI-obfuscated phishing campaign

Microsoft Threat Intelligence recently detected and blocked a credential phishing campaign that likely used AI-generated code to obfuscate its payload and evade traditional defenses. Appearing to be aided by a large language model LLM, the activity obfuscated its behavior within an SVG file,...

MAL-2025-47522 Malicious code in sha256-validation-xyz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d087a7f065c7d1c6612320e8fc3d19957b0768a27ea56d1c6849c32193941829 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

ROS-20250924-07

A vulnerability in the GIMP graphics editor is related to an integer overflow when analyzing ICO files. Exploitation of the vulnerability could allow an attacker to execute arbitrary code on the target system...

Important: Red Hat Security Advisory: A Subscription Management tool for finding and reporting Red Hat product usage

A Subscription Management tool for finding and reporting Red Hat product usage Red Hat Discovery, also known as Discovery, is an inspection and reporting tool that finds, identifies, and reports environment data, or facts, such as the number of physical and virtual systems on a network, their...

GHSA-Q58R-HWC8-RM9J vulnerabilities

Vulnerabilities for packages: rancher-api-ui...

CVE-2025-58473

creationtimestamp| type| source ---|---|--- 2025-09-23 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-266-01...

CVE-2025-39870

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix double free in idxdsetupwqs The clean up in idxdsetupwqs has had a couple bugs because the error handling is a bit subtle. It's simpler to just re-write it in a cleaner way. The issues here are: 1 If...

CVE-2025-39868

In the Linux kernel, the following vulnerability has been resolved: erofs: fix runtime warning on truncatefoliobatchexceptionals Commit 0e2f80afcfa6"fs/dax: ensure all pages are idle prior to filesystem unmount" introduced the WARNONONCE to capture whether the filesystem has removed all DAX entri...

Viessmann Vitogate 300

RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to modify an intended OS command when it is sent to a downstream component, or allow an attacker to cause unexpected interactions between the client and server. 2. RECOMMENDED PRACTICES CISA recommends users...

Mitsubishi Electric MELSEC-Q Series CPU Module

RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to cause a denial of service DoS. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability, such as: Minimize network exposure for all...

GHSA-W7R3-MGWF-4MQQ vulnerabilities

Vulnerabilities for packages: kubernetes-reflector...

CVE-2025-59432

SCRAM Salted Challenge Response Authentication Mechanism is part of the family of Simple Authentication and Security Layer SASL, RFC 4422 authentication mechanisms. Prior to version 3.2, a timing attack vulnerability exists in the SCRAM Java implementation. The issue arises because Arrays.equals...

Malicious code in webpack-serve-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b4137b637e880b1add619efe8a8cb012cb89d4364be36dd8607cd4c20bc1b67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47508 Malicious code in webpack-serve-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b4137b637e880b1add619efe8a8cb012cb89d4364be36dd8607cd4c20bc1b67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Information Disclosure

nx is vulnerable to Information Disclosure. The vulnerability is due to malicious package versions containing code that scans the file system and collects credentials, which allows an attacker to exfiltrate sensitive data by posting it to GitHub under the victim’s account...

MAL-2025-47502 Malicious code in tailwind-desktop-icon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 499aa4b2704334334941cc6f69986a5c31488867b97fa544ce2927ce5d5a7bfc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in postcss-calc-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a126d37fa7524804ef4c161588d71e9837418138fd67c7fbd8bc775d0f78a49f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...