MAL-2025-170510 Malicious code in verify-teical-bisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56089ec60c2815665c5db0ff2f5809d32a54315648f4985127027bb33b377c5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170470 Malicious code in verify-taic-alusaki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8103fe83a0fa8ffdf0cfa702ab18f633e5bcfe00e57407f89b9d896a9c077b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170354 Malicious code in verify-ayai-galia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 776c47604578dbc8159a71cb2028b7c582b2bf3f9375862e0fb87ee942405f79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170324 Malicious code in verify-aya-amil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c4dd738127b97d6ba6d876359f7ba5439193f3db8b453eb2406abac5bc6d85a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170315 Malicious code in verify-ain-uks (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5db23131ef3658eb1bf94a40373d258e217fd7324d2b12806bb5a1061bb2c6b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170485 Malicious code in verify-taic-malasulu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44c6b22ff36f6ea2593487cfdb55a0596c5632ca888f9959e883f04381c3bec7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124954

In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix null pointer dereference on zero-length checksum In xdrstreamdecodeopaqueauth, zero-length checksum.len causes checksum.data to be set to NULL. This triggers a NPD when accessing checksum.data in gsskrb5verifymicv2...

CVE-2025-40129

In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix null pointer dereference on zero-length checksum In xdrstreamdecodeopaqueauth, zero-length checksum.len causes checksum.data to be set to NULL. This triggers a NPD when accessing checksum.data in gsskrb5verifymicv2...

UBUNTU-CVE-2025-40129

In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix null pointer dereference on zero-length checksum In xdrstreamdecodeopaqueauth, zero-length checksum.len causes checksum.data to be set to NULL. This triggers a NPD when accessing checksum.data in gsskrb5verifymicv2...

CVE-2025-40129

CVE-2025-40129 is a Linux kernel vulnerability addressed in Unity Linux/UTSA-2026-013110: sunrpc may dereference checksum.data due to a zero-length checksum in xdr_stream_decode_opaque_auth(), causing a null pointer dereference when gss_krb5_verify_mic_v2() accesses checksum.data. The patch ensur...

CVE-2025-40129 sunrpc: fix null pointer dereference on zero-length checksum

In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix null pointer dereference on zero-length checksum In xdrstreamdecodeopaqueauth, zero-length checksum.len causes checksum.data to be set to NULL. This triggers a NPD when accessing checksum.data in gsskrb5verifymicv2...

Linux Distros Unpatched Vulnerability : CVE-2025-40129

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sunrpc: fix null pointer dereference on zero-length checksum In xdrstreamdecodeopaqueauth, zero- length checksum.len causes checksum.data to be set to NULL. Thi...

kernel: ima: Fix a potential integer overflow in ima_appraise_measurement

In the Linux kernel, the following vulnerability has been resolved: ima: Fix a potential integer overflow in imaappraisemeasurement When the ima-modsig is enabled, the rc passed to evmverifyxattr may be negative, which may cause the integer overflow problem...

Improper Certificate Validation

Overview Affected versions of this package are vulnerable to Improper Certificate Validation due to insufficient peer verification logic in the verifyPeerCert function. An attacker can impersonate privileged API components and execute unauthorized operations by compromising a single instance and...

Improper Certificate Validation

Overview Affected versions of this package are vulnerable to Improper Certificate Validation due to insufficient peer verification logic in the verifyPeerCert function. An attacker can impersonate privileged API components and execute unauthorized operations by compromising a single instance and...

CVE-2025-46404

A denial of service vulnerability exists in the lassoproviderverifysamlsignature functionality of Entr'ouvert Lasso 2.5.1. A specially crafted SAML response can lead to a denial of service. An attacker can send a malformed SAML response to trigger this vulnerability...

The vulnerability of the IBM Verify Identity Access system (formerly IBM Security Verify Access) relates to errors in privilege management, allowing attackers to elevate their privileges.

The vulnerability of the IBM Verify Identity Access system formerly IBM Security Verify Access is related to errors in privilege management. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

The vulnerability of the IBM Verify Identity Access system (formerly IBM Security Verify Access) relates to the inclusion of functions from an unreliable controlled area, allowing a perpetrator to execute arbitrary code.

The vulnerability of the IBM Verify Identity Access system formerly IBM Security Verify Access lies in the fact that its functions are integrated into an unverified controlled area. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

The vulnerability of the IBM Verify Identity Access system (formerly IBM Security Verify Access) relates to the failure to implement measures to neutralize special elements, allowing a perpetrator to execute arbitrary commands.

The vulnerability of the IBM Verify Identity Access system formerly IBM Security Verify Access relates to the failure to take measures to neutralize specific elements. Exploiting this vulnerability allows a malicious actor operating remotely to execute arbitrary commands...

The vulnerability of the ProFTPD FTP server, related to the swapping of the zero pointer, allows a hacker to trigger a service failure.

The vulnerability of the ProFTPD FTP server is related to the zero pointer assignment in the tlsverifycrl function. Exploiting this vulnerability can allow a malicious actor to cause service failures...