EUVD-2025-77820

Malicious code in actualsolez3n npm...

Malicious code in actual_sole_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4830bf3edda3aabfbfaa46d2a992d04d6e53e954fc62f4521885248a4b54834 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-65434

Malicious code in actualstoatz3n npm...

EUVD-2025-65436

Malicious code in actuallemurz3n npm...

EUVD-2025-87333

Malicious code in actualmastodonz3n npm...

EUVD-2025-56023

Malicious code in actual-turquoise-prawn npm...

EUVD-2025-56022

Malicious code in actual-turquoise-turtle npm...

EUVD-2025-56025

Malicious code in actual-amber-spider npm...

EUVD-2025-56024

Malicious code in actual-blue-crow npm...

CVE-2025-40004 net/9p: Fix buffer overflow in USB transport layer

In the Linux kernel, the following vulnerability has been resolved: net/9p: Fix buffer overflow in USB transport layer A buffer overflow vulnerability exists in the USB 9pfs transport layer where inconsistent size validation between packet header parsing and actual data copying allows a malicious...

Malicious code in actual-free-xbox-codes008 (npm)

The package actual-free-xbox-codes008 was found to contain malicious code...

Malicious code in actual-free-xbox-codes686 (npm)

The package actual-free-xbox-codes686 was found to contain malicious code...

MAL-2025-14059 Malicious code in actual-free-xbox-codes008 (npm)

The package actual-free-xbox-codes008 was found to contain malicious code...

MAL-2025-14060 Malicious code in actual-free-xbox-codes686 (npm)

The package actual-free-xbox-codes686 was found to contain malicious code...

BIT-LIBPYTHON-2025-4435 Tarfile extracts filtered members when errorlevel=0

When using a TarFile.errorlevel = 0 and extracting with a filter the documented behavior is that any filtered members would be skipped and not extracted. However the actual behavior of TarFile.errorlevel = 0 in affected versions is that the member would still be extracted and not skipped...

kernel: vmxnet3: Fix malformed packet sizing in vmxnet3_process_xdp

In the Linux kernel, the following vulnerability has been resolved: vmxnet3: Fix malformed packet sizing in vmxnet3processxdp vmxnet3 driver's XDP handling is buggy for packet sizes using ring0 that is, packet sizes between 128 - 3k bytes. We noticed MTU-related connectivity issues with Cilium's...

kernel: vmxnet3: Fix malformed packet sizing in vmxnet3_process_xdp

In the Linux kernel, the following vulnerability has been resolved: vmxnet3: Fix malformed packet sizing in vmxnet3processxdp vmxnet3 driver's XDP handling is buggy for packet sizes using ring0 that is, packet sizes between 128 - 3k bytes. We noticed MTU-related connectivity issues with Cilium's...

Incorrect context paths included in the fallback URL still pass you to the login form when enable-authentication-fallback is enabled.

h3. Issue Summary When using an incorrect fallback URL to bypass SAML, you are still passed to the login form. This can be reproduced using a context path in the URL when no context path is set in the server.xml or by using a misspelled/wrong context path when one is set. This is reproducible on...

actual-it.si Cross Site Scripting vulnerability OBB-3942411

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2024-10557 · Unknown · Actual Analyzer

Name of the Vulnerable Software and Affected Versions: Actual Analyzer versions prior to 2014-08-29 Description: The issue allows code execution via shell metacharacters because untrusted input is used for part of the input data passed to an eval operation. Recommendations: For versions prior to...