MAL-2025-49093 Malicious code in zustand.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61ff018c7bc2d4532beeb07e3738b8dfa2ba8ff0ee82971a9ae6bdba09d4bed8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-49088 Malicious code in nodemonjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 29d8b4f06839f74e9f9553ef061c6a797169cecd0b6b28b4ddf1e0fad6252f0e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

EUVD-2025-36668

An issue in NCR Atleos Terminal Manager ConfigApp v3.4.0 allows attackers to escalate privileges via a crafted request...

CVE-2025-61429

The NCR Atleos Terminal Manager (ConfigApp) v3.4.0 is vulnerable to a privilege escalation issue caused by improper handling of specially crafted requests. Attackers with low privileges can exploit this vulnerability without user interaction to obtain elevated access rights. CWE-269 (Improper Pri...

CVE-2025-61429

An issue in NCR Atleos Terminal Manager ConfigApp v3.4.0 allows attackers to escalate privileges via a crafted request...

CVE-2025-61429

An issue in NCR Atleos Terminal Manager ConfigApp v3.4.0 allows attackers to escalate privileges via a crafted request...

NCR Atleos Terminal Manager ConfigApp 安全漏洞

NCR Atleos Terminal Manager ConfigApp is a terminal management tool module from NCR Atleos USA. A security vulnerability exists in NCR Atleos Terminal Manager ConfigApp version 3.4.0, which stems from improper handling of specially crafted requests and could lead to elevation of privilege...

PT-2025-44306

Name of the Vulnerable Software and Affected Versions NCR Atleos Terminal Manager ConfigApp version 3.4.0 Description An issue in NCR Atleos Terminal Manager ConfigApp version 3.4.0 allows attackers to escalate privileges via a crafted request. Exploiting this vulnerability allows a crafted reque...

CVE-2025-61429: Improper Privilege Management

An issue in NCR Atleos Terminal Manager ConfigApp v3.4.0 allows attackers to escalate privileges via a crafted request...

EUVD-2025-36573

Malicious code in terminal-kleur npm...

Malicious code in terminal-kleur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfb7974c4fea6be8468d7f37887f3a894f3f1c3b8ba50ee5f6eb49872ce93ddc The package terminal-kleur was found to contain malicious code. Source: ghsa-malware 7aeaeb943d666c429839011345be810a0f587322d34b0b03308f43cd1f9611f5...

MAL-2025-48950 Malicious code in terminal-kleur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfb7974c4fea6be8468d7f37887f3a894f3f1c3b8ba50ee5f6eb49872ce93ddc The package terminal-kleur was found to contain malicious code. Source: ghsa-malware 7aeaeb943d666c429839011345be810a0f587322d34b0b03308f43cd1f9611f5...

FRRouting 安全漏洞

FRRouting is FRRouting open source a network routing software suite running on a Unix-like platform . FRRouting has a denial of service vulnerability caused by NULL pointer dereference via the showvtyextlinklanadjsid function on ospfext.c, which can be exploited by an attacker to cause a denial o...

CVE-2025-61101

FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the showvtyextlinkrmtitfaddr function at ospfext.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted OSPF packet...

USN-7832-1 linux-oracle-5.4 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Device tree and open firmware driver; - SCSI subsystem; - TTY drivers; - SMB network file system; - Bluetooth...

USN-7832-1: Linux kernel (Oracle) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Device tree and open firmware driver; - SCSI subsystem; - TTY drivers; - SMB network file system; - Bluetooth...

EUVD-2025-35064

In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Mark invalid entities with id UVCINVALIDENTITYID Per UVC 1.1+ specification 3.7.2, units and terminals must have a non-zero unique ID. Each Unit and Terminal within the video function is assigned a unique...

UBUNTU-CVE-2025-40016

In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Mark invalid entities with id UVCINVALIDENTITYID Per UVC 1.1+ specification 3.7.2, units and terminals must have a non-zero unique ID. Each Unit and Terminal within the video function is assigned a unique...

JLSEC-2025-142 A flaw was found in FFmpeg's TTY Demuxer

A flaw was found in FFmpeg's TTY Demuxer. This vulnerability allows possible data exfiltration via improper parsing of non-TTY-compliant input files in HLS playlists...

Two CVSS 10.0 Bugs in Red Lion RTUs Could Hand Hackers Full Industrial Control

Cybersecurity researchers have disclosed two critical security flaws impacting Red Lion Sixne t remote terminal unit RTU products that, if successfully exploited, could result in code execution with the highest privileges. The shortcomings, tracked as CVE-2023-40151 andCVE-2023-42770 , are both...