Aether Smart Contract Security Analysis Framework 4.7.1

Aether is a Python-based framework for analyzing Solidity smart contracts, generating vulnerability findings, producing Foundry-based proof-of-concept PoC tests, and validating exploits on mainnet forks. It combines Solidity AST parsing, taint analysis, control flow graph analysis, cross-contract...

How to Configure HTTP Proxy for Linux-based Veeam Components

Purpose This article documents how to configure HTTP and HTTPS Proxy settings for Linux-based components, including the Veeam Software Appliance and JeOS-deployed Veeam Infrastructure Appliances, in environments that require a proxy to access the internet. Note: For proxy configuration settings f...

@townco/agent (>=0.1.20, <=0.1.144), @townco/cli (>=0.1.20, <=0.1.141) +1 more potentially affected by CVE-2025-66479 via @anthropic-ai/sandbox-runtime (0.0.2)

@anthropic-ai/sandbox-runtime NPM version 0.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on @anthropic-ai/sandbox-runtime and may be impacted: - @townco/agent =0.1.20, =0.1.20, =0.1.34, =0.1.38 Source cves: CVE-2025-66479 Source advisory:...

EUVD-2025-137317

Malicious code in reion-tui-pix npm...

MAL-2025-179026 Malicious code in teriu-tui-pix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a25f3088af4013c6cbeb7dfc7c529f81a639c7f02326b9558954b2d1be953f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178168 Malicious code in reion-tui-pix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 542480edf3b2b7f314b61fdf9cc3e7eb19258029f2c0270b5adeee72131ea795 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teriu-tui-pix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a25f3088af4013c6cbeb7dfc7c529f81a639c7f02326b9558954b2d1be953f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-135675

Malicious code in teriu-tui-pix npm...

EUVD-2025-135676

Malicious code in teriu-tui-pix npm...

Fedora: Security Advisory (FEDORA-2025-29c34ad84a)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2025-d3389aa39a)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 43 Update: podman-tui-1.9.0-1.fc43

podman-tui is a terminal user interface for Podman v4 and v5. podman-tui is using podman.socket service to communicate with podman environm ent and SSH to connect to remote podman machines...

Fedora 43 : podman-tui (2025-d3389aa39a)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-d3389aa39a advisory. podman-tui release v1.9.0 ---- podman-tui release 1.8.1 Tenable has extracted the preceding description block directly from the Fedora security...

CVE-2025-62511

yt-grabber-tui is a C++ terminal user interface application for downloading YouTube content. yt-grabber-tui version 1.0 contains a Time-of-Check to Time-of-Use TOCTOU race condition CWE-367 in the creation of the default configuration file config.json. In version 1.0, loadjsonsettings in...

CVE-2025-62511 yt-grabber-tui local arbitrary file overwrite via TOCTOU race in config file creation

yt-grabber-tui is a C++ terminal user interface application for downloading YouTube content. yt-grabber-tui version 1.0 contains a Time-of-Check to Time-of-Use TOCTOU race condition CWE-367 in the creation of the default configuration file config.json. In version 1.0, loadjsonsettings in...

CVE-2025-62511 yt-grabber-tui local arbitrary file overwrite via TOCTOU race in config file creation

yt-grabber-tui is a C++ terminal user interface application for downloading YouTube content. yt-grabber-tui version 1.0 contains a Time-of-Check to Time-of-Use TOCTOU race condition CWE-367 in the creation of the default configuration file config.json. In version 1.0, loadjsonsettings in...

CVE-2025-62511

CVE-2025-62511 concerns yt-grabber-tui (C++ TUI app for YouTube downloads). In version 1.0, the loader (Settings.hpp: load_json_settings) checks for config.json with boost::filesystem::exists and, if missing, writes a default configuration via boost::property_tree::write_json. A local attacker wi...

CVE-2025-62511 yt-grabber-tui local arbitrary file overwrite via TOCTOU race in config file creation

yt-grabber-tui is a C++ terminal user interface application for downloading YouTube content. yt-grabber-tui version 1.0 contains a Time-of-Check to Time-of-Use TOCTOU race condition CWE-367 in the creation of the default configuration file config.json. In version 1.0, loadjsonsettings in...

CVE-2025-62511: Time-of-check Time-of-use (TOCTOU) Race Condition

yt-grabber-tui is a C++ terminal user interface application for downloading YouTube content. yt-grabber-tui version 1.0 contains a Time-of-Check to Time-of-Use TOCTOU race condition CWE-367 in the creation of the default configuration file config.json. In version 1.0, loadjsonsettings in...

CVE-2025-62363

yt-grabber-tui is a terminal user interface application for downloading videos. In versions before 1.0-rc, the application allows users to configure the path to the yt-dlp executable via the pathtoytdlp configuration setting. An attacker with write access to the configuration file or the filesyst...