Malicious code in billa-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5b438dff97b1b91b56a4cbf23275a91c04109dd130807ba03afa1a62611512d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-40147

In the Linux kernel, the following vulnerability has been resolved: blk-throttle: fix access race during throttle policy activation On repeated cold boots we occasionally hit a NULL pointer crash in blkshouldthrotl when throttling is consulted before the throttle policy is fully enabled for the...

CVE-2025-40151

In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: No support of struct argument in trampoline programs The current implementation does not support struct argument. This causes a oops when running bpf selftest: $ ./testprogs -a tracingstruct Oops1: CPU -1 Unable t...

EUVD-2025-131944

A heap-use-after-free vulnerability exists in airpig2011 IEC104 thru Commit be6d841 2019-07-08. During multi-threaded client execution, the function Iec10xScheduled can access memory that has already been freed, potentially causing program crashes or undefined behavior. This may be exploited to...

EUVD-2025-100559

Malicious code in cindy-miemee27-riris npm...

EUVD-2025-99100

A vulnerability has been identified in Solid Edge SE2025 All versions V225.0 Update 11. Affected applications do not properly validate client certificates to connect to License Service endpoint. This could allow an unauthenticated remote attacker to perform man in the middle attacks...

CVE-2025-62219

creationtimestamp| type| source ---|---|--- 2025-11-11 17:29:38+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0358 2025-11-11 17:30:42+00:00| seen| https://www.thezdi.com/blog/2025/11/11/the-november-2025-security-update-review 2025-11-11 20:00:34+00:00| seen|...

CVE-2025-61815

InDesign Desktop versions 20.5, 19.5.5 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

EUVD-2025-88999

Malicious code in rudi-gepuk97-miaww npm...

CVE-2025-10161

creationtimestamp| type| source ---|---|--- 2025-11-11 13:37:24+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5eaxwmldp32 2025-11-11 21:00:05+00:00| published-proof-of-concept| Telegram/shWj4yVZfYZ8SMMOaybmV9yApMn3mNDIaTU298AMpVdB8...

CVE-2025-62483

creationtimestamp| type| source ---|---|--- 2025-11-11 11:28:56+00:00| seen| https://bsky.app/profile/ripjyr.bsky.social/post/3m5dzu2xzip2d 2025-11-13 15:37:17+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5jilrm7fxy2...

EUVD-2025-70879

Malicious code in dewi-donat25-ruro npm...

CVE-2025-12840

creationtimestamp| type| source ---|---|--- 2025-11-11 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-991/ 2026-01-26 11:26:56+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mdd56ezxo22q...

EUVD-2025-66071

Malicious code in tomi-ronde54-riris npm...

EUVD-2025-66978

Malicious code in rudi-mangut97-miaww npm...

EUVD-2025-55889

Malicious code in amateur-orange-mockingbird npm...

EUVD-2025-58818

Malicious code in kiki-rangi83-sluey npm...

Amazon Linux 2 : nerdctl, --advisory ALAS2-2025-3060 (ALAS-2025-3060)

The version of nerdctl installed on the remote host is prior to 2.1.5-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-3060 advisory. go-viper's mapstructure May Leak Sensitive Information in Logs When Processing Malformed Data CVE-2025-11065 Tenable has extracted...

Microsoft Windows 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Administrator Protection. An attacker could exploit this vulnerability to gain elevated privileges. The following products and version...

Amazon Linux 2 : runc, --advisory ALAS2NITRO-ENCLAVES-2025-077 (ALASNITRO-ENCLAVES-2025-077)

The version of runc installed on the remote host is prior to 1.3.3-2. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2NITRO-ENCLAVES-2025-077 advisory. Placeholder CVE. Details forthcoming CVE-2025-31133 net/url: insufficient validation of bracketed IPv6 hostnames...