7633 matches found
CVE-2025-59039 Prebid Universal Creative on npm briefly compromised
Prebid Universal Creative PUC is a JavaScript API to render multiple formats. Npm users of PUC 1.17.3 or PUC latest were briefly affected by crypto-related malware. This includes the extremely popular jsdelivr hosting of this file. The maintainers of PUC unpublished version 1.17.3. Users should s...
CVE-2025-59039 Prebid Universal Creative on npm briefly compromised
Prebid Universal Creative PUC is a JavaScript API to render multiple formats. Npm users of PUC 1.17.3 or PUC latest were briefly affected by crypto-related malware. This includes the extremely popular jsdelivr hosting of this file. The maintainers of PUC unpublished version 1.17.3. Users should s...
CVE-2025-59039 Prebid Universal Creative on npm briefly compromised
Prebid Universal Creative PUC is a JavaScript API to render multiple formats. Npm users of PUC 1.17.3 or PUC latest were briefly affected by crypto-related malware. This includes the extremely popular jsdelivr hosting of this file. The maintainers of PUC unpublished version 1.17.3. Users should s...
CVE-2025-59039
The CVE-2025-59039 incident concerns Prebid Universal Creative (PUC), a JavaScript API used to render multiple formats. NPM users of PUC 1.17.3 or the latest release were briefly affected by crypto-related malware, including via the popular jsDelivr hosting of the PUC file. In response, maintaine...
Command Injection
Overview OctoPrint is a snappy web interface for your 3D printer Affected versions of this package are vulnerable to Command Injection due to upload file when a specially crafted filename is included in a command defined in a system event handler and the corresponding event is triggered. An...
PT-2025-36996
Name of the Vulnerable Software and Affected Versions: Prebid Universal Creative PUC versions 1.17.3 and latest Description: Prebid Universal Creative PUC is a JavaScript API used to render multiple formats. Npm users of PUC were briefly affected by crypto-related malware. Recommendations:...
Prebid Universal Creative 安全漏洞
Prebid Universal Creative is an interface software from Prebid Open Source. A security vulnerability exists in Prebid Universal Creative version 1.17.3, which stems from malicious code being planted in npm packages that could interfere with cryptocurrency transactions...
Proxmox Virtual Environment 安全漏洞
Proxmox Virtual Environment Proxmox VE is an open source server virtualization environment Linux distribution from Proxmox. A security vulnerability exists in Proxmox Virtual Environment version 8.4, which stems from a U2F Origin field stored cross-site scripting vulnerability that could lead to...
CVE-2025-52161
creationtimestamp| type| source ---|---|--- 2025-09-08 19:32:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lydwzmm5u72a...
Embedded Malicious Code
Overview prebid-universal-creative is a javascript api to render multiple formats. This file is inserted into the prebid creative as a placeholder for the winning prebid creative. Affected versions of this package are vulnerable to Embedded Malicious Code. This package version contains malicious...
net: usb: asix_devices: Fix PHY address mask in MDIO bus initialization
...
ALSA: usb-audio: Validate UAC3 power domain descriptors, too
...
CVE-2025-36907
In drawsurfaceimage of abl/android/lib/draw/draw.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege via USB fastboot, after a bootloader unlock, with no additional execution privileges needed. User interaction is needed for...
DEBIAN-CVE-2025-39674
In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: ufs-qcom: Fix ESI null pointer dereference ESI/MSI is a performance optimization feature that provides dedicated interrupts per MCQ hardware queue. This is optional feature and UFS MCQ should work with and without ESI...
Malicious code in universal-airdrop-checker-ai (npm)
The package universal-airdrop-checker-ai was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-46460 Malicious code in universal-airdrop-checker-ai (npm)
The package universal-airdrop-checker-ai was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...
The vulnerability of the composite_dev_cleanup() function in the Linux kernel’s USB component allows a hacker to trigger a service failure.
The vulnerability of the compositedevcleanup function in the Linux kernel’s USB component is related to the dereferencing of a NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
PT-2025-36269
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains a flaw within the UFS Universal Flash Storage Qualcomm qcom driver related to Enhanced System Interrupt ESI and Message Signaled Interrupts MSI. A regression...
The vulnerability of the usb_bulk_msg() function in the Linux operating system, which allows a hacker to trigger a service failure
The vulnerability of the usbbulkmsg function in the Linux operating system is related to improper initialization of the resource. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...