MAL-2025-170285 Malicious code in verify-aikun-misualaibaku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 993f08d7d4d467932304e80abf2fc70cd4ccddbaab17dc28c51ed4d99a0825e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170316 Malicious code in verify-ain-us (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 744ca877baa45f737af0da700786e4c08b94bcce8b2e82790e2571fcf56b805c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170362 Malicious code in verify-ayali-gan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 190202e5a8876dcbd5ea83677133cdc6af1efd3535a047966f6ee00be6bd5868 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170452 Malicious code in verify-tacti-busuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c46fcb6733dcec7c09cd4aed525005a7b996fe7a405c02c2c2b51e51ec3357e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170499 Malicious code in verify-tayic-iams (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a95512ab87972165a0f765ad800313c6af93c7b400a7464e5b2c5f5a99f3998b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124954

In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix null pointer dereference on zero-length checksum In xdrstreamdecodeopaqueauth, zero-length checksum.len causes checksum.data to be set to NULL. This triggers a NPD when accessing checksum.data in gsskrb5verifymicv2...

CVE-2025-40129

In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix null pointer dereference on zero-length checksum In xdrstreamdecodeopaqueauth, zero-length checksum.len causes checksum.data to be set to NULL. This triggers a NPD when accessing checksum.data in gsskrb5verifymicv2...

UBUNTU-CVE-2025-40129

In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix null pointer dereference on zero-length checksum In xdrstreamdecodeopaqueauth, zero-length checksum.len causes checksum.data to be set to NULL. This triggers a NPD when accessing checksum.data in gsskrb5verifymicv2...

CVE-2025-40129

CVE-2025-40129 is a Linux kernel vulnerability addressed in Unity Linux/UTSA-2026-013110: sunrpc may dereference checksum.data due to a zero-length checksum in xdr_stream_decode_opaque_auth(), causing a null pointer dereference when gss_krb5_verify_mic_v2() accesses checksum.data. The patch ensur...

CVE-2025-40129 sunrpc: fix null pointer dereference on zero-length checksum

In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix null pointer dereference on zero-length checksum In xdrstreamdecodeopaqueauth, zero-length checksum.len causes checksum.data to be set to NULL. This triggers a NPD when accessing checksum.data in gsskrb5verifymicv2...

Linux Distros Unpatched Vulnerability : CVE-2025-40129

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sunrpc: fix null pointer dereference on zero-length checksum In xdrstreamdecodeopaqueauth, zero- length checksum.len causes checksum.data to be set to NULL. Thi...

kernel: ima: Fix a potential integer overflow in ima_appraise_measurement

In the Linux kernel, the following vulnerability has been resolved: ima: Fix a potential integer overflow in imaappraisemeasurement When the ima-modsig is enabled, the rc passed to evmverifyxattr may be negative, which may cause the integer overflow problem...

Improper Certificate Validation

Overview Affected versions of this package are vulnerable to Improper Certificate Validation due to insufficient peer verification logic in the verifyPeerCert function. An attacker can impersonate privileged API components and execute unauthorized operations by compromising a single instance and...

Improper Certificate Validation

Overview Affected versions of this package are vulnerable to Improper Certificate Validation due to insufficient peer verification logic in the verifyPeerCert function. An attacker can impersonate privileged API components and execute unauthorized operations by compromising a single instance and...

CVE-2025-46404

A denial of service vulnerability exists in the lassoproviderverifysamlsignature functionality of Entr'ouvert Lasso 2.5.1. A specially crafted SAML response can lead to a denial of service. An attacker can send a malformed SAML response to trigger this vulnerability...

The vulnerability of the IBM Verify Identity Access system (formerly IBM Security Verify Access) relates to the failure to implement measures to neutralize special elements, allowing a perpetrator to execute arbitrary commands.

The vulnerability of the IBM Verify Identity Access system formerly IBM Security Verify Access relates to the failure to take measures to neutralize specific elements. Exploiting this vulnerability allows a malicious actor operating remotely to execute arbitrary commands...

The vulnerability of the IBM Verify Identity Access system (formerly IBM Security Verify Access) relates to the inclusion of functions from an unreliable controlled area, allowing a perpetrator to execute arbitrary code.

The vulnerability of the IBM Verify Identity Access system formerly IBM Security Verify Access lies in the fact that its functions are integrated into an unverified controlled area. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

The vulnerability of the IBM Verify Identity Access system (formerly IBM Security Verify Access) relates to errors in privilege management, allowing attackers to elevate their privileges.

The vulnerability of the IBM Verify Identity Access system formerly IBM Security Verify Access is related to errors in privilege management. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

CVE-2025-10740

The URL Shortener Plugin For WordPress plugin for WordPress is vulnerable to unauthorized access to functionality provided by the API due to a missing capability check on the verifyRequest function in all versions up to, and including, 3.0.7. This makes it possible for authenticated attackers, wi...

EUVD-2025-35820

The URL Shortener Plugin For WordPress plugin for WordPress is vulnerable to unauthorized access to functionality provided by the API due to a missing capability check on the verifyRequest function in all versions up to, and including, 3.0.7. This makes it possible for authenticated attackers, wi...