MAL-2025-1577 Malicious code in cmp-dossier-tracking (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca47cddd0ff04336d55d7da2799d42183ab77e8b7270202739f7728e7904f712 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-1755

creationtimestamp| type| source ---|---|--- 2025-02-27 16:26:09+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5711 2025-02-27 17:02:55+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114076927570984469 2025-02-27 18:00:35+00:00| seen|...

CVE-2024-13148

creationtimestamp| type| source ---|---|--- 2025-02-27 15:22:07+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114076531254128083 2025-02-27 17:49:12+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114077109535316307 2025-02-27 18:03:41+00:00| seen|...

CVE-2024-9334

Use of Hard-coded Credentials, Storage of Sensitive Data in a Mechanism without Access Control vulnerability in E-Kent Pallium Vehicle Tracking allows Authentication Bypass. This issue affects Pallium Vehicle Tracking: before 17.10.2024...

CVE-2024-9334

Use of Hard-coded Credentials, Storage of Sensitive Data in a Mechanism without Access Control vulnerability in E-Kent Pallium Vehicle Tracking allows Authentication Bypass. This issue affects Pallium Vehicle Tracking: before 17.10.2024...

CVE-2024-9334 Information Disclosure in E-Kent's Pallium Vehicle Tracking

Use of Hard-coded Credentials, Storage of Sensitive Data in a Mechanism without Access Control vulnerability in E-Kent Pallium Vehicle Tracking allows Authentication Bypass. This issue affects Pallium Vehicle Tracking: before 17.10.2024...

CVE-2024-9334

CVE-2024-9334 concerns the E‑Kent Pallium Vehicle Tracking system, where the root cause is the use of hard‑coded credentials and storage of sensitive data in a mechanism without proper access control. This combination enables an authentication bypass , potentially allowing unauthorized access to ...

CVE-2025-21756

creationtimestamp| type| source ---|---|--- 2025-02-27 07:10:33+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114074598304957807 2025-04-18 23:00:06+00:00| published-proof-of-concept| Telegram/pouWO7oHuMlxYwPs30aspnMqHr17AxXm3igkclxUsCqax5E 2025-04-19 07:23:00+00:00|...

SUSE CVE-2022-49266

In the Linux kernel, the following vulnerability has been resolved: block: fix rq-qos breakage from skipping rqqosdonebio a647a524a467 "block: don't call rqqosops-donebio if the bio isn't tracked" made bioendio skip rqqosdonebio if BIOTRACKED is not set. While this fixed a potential oops, it also...

SUSE CVE-2022-49390

In the Linux kernel, the following vulnerability has been resolved: macsec: fix UAF bug for realdev Create a new macsec device but not get reference to realdev. That can not ensure that realdev is freed after macsec. That will trigger the UAF bug for realdev as following:...

E-Kent Pallium Vehicle Tracking 安全漏洞

E-Kent Pallium Vehicle Tracking is a vehicle tracking system from E-Kent. A security vulnerability exists in E-Kent Pallium Vehicle Tracking prior to version 17.10.2024, which stems from improperly stored hard-coded credentials and sensitive data, which could lead to authentication bypass...

CVE-2025-1728

creationtimestamp| type| source ---|---|--- 2025-02-26 22:24:35+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5634 2025-02-26 23:33:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lj4jzu6iwz2c...

Recommended update for Maven

This update for Maven fixes the following issues: maven-dependency-analyzer was updated from version 1.13.2 to 1.15.1: Key changes across versions: Bug fixes and improved support of dynamic types Dependency upgrades ASM, Maven core, and notably the removal of commons-io Improved error handling by...

DEBIAN-CVE-2022-49561

In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: re-fetch conntrack after insertion In case the conntrack is clashing, insertion can free skb-nfct and set skb-nfct to the already-confirmed entry. This wasn't found before because the conntrack entry and the...

DEBIAN-CVE-2022-49390

In the Linux kernel, the following vulnerability has been resolved: macsec: fix UAF bug for realdev Create a new macsec device but not get reference to realdev. That can not ensure that realdev is freed after macsec. That will trigger the UAF bug for realdev as following:...

CVE-2022-49394

In the Linux kernel, the following vulnerability has been resolved: blk-iolatency: Fix inflight count imbalances and IO hangs on offline iolatency needs to track the number of inflight IOs per cgroup. As this tracking can be expensive, it is disabled when no cgroup has iolatency configured for th...

DEBIAN-CVE-2022-49338

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: CT: Fix cleanup of CT before cleanup of TC ct rules CT cleanup assumes that all tc rules were deleted first, and so is free to delete the CT shared resources e.g the draction fwdaction which is shared for all tuples. B...

UBUNTU-CVE-2022-49561

In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: re-fetch conntrack after insertion In case the conntrack is clashing, insertion can free skb-nfct and set skb-nfct to the already-confirmed entry. This wasn't found before because the conntrack entry and the...

CVE-2022-49194

In the Linux kernel, the following vulnerability has been resolved: net: bcmgenet: Use stronger register read/writes to assure ordering GCC12 appears to be much smarter about its dependency tracking and is aware that the relaxed variants are just normal loads and stores and this is causing proble...

UBUNTU-CVE-2022-49183

In the Linux kernel, the following vulnerability has been resolved: net/sched: actct: fix ref leak when switching zones When switching zones or network namespaces without doing a ct clear in between, it is now leaking a reference to the old ct entry. That's because tcfctskbnfctcached returns fals...