MAL-2025-6319 Malicious code in tool-commitizen-adapter-xp (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in tool-commitizen-adapter-xp (npm)

The package communicates with a domain associated with malicious activity...

@finsemble/finsemble-core (>=8.16.0-beta.2, <=9.8.0-iocd.10), @finsemble/finsemble-electron-adapter (>=8.16.0-beta.2, <=9.8.0-iocd.10) +15 more potentially affected by CVE-2025-8011 via electron (>=37.0.0, <=37.2.4)

electron NPM version =37.0.0, =8.16.0-beta.2, =8.16.0-beta.2, =0.0.1, =0.0.1, =1.0.0, =2.6.39, =0.0.1, =2.13.0, =0.82.0-nightly-20250808-aaf471278, =0.20.0-rc.0, =1.0.1, =1.0.2 - deyuan 1.0.0 - http-cache-store 0.0.1 and more Source cves: CVE-2025-8011 Source advisory: SNYK:JS-ELECTRON-11023267...

@finsemble/finsemble-core (>=8.16.0-beta.2, <=9.8.0-iocd.10), @finsemble/finsemble-electron-adapter (>=8.16.0-beta.2, <=9.8.0-iocd.10) +15 more potentially affected by CVE-2025-8010 via electron (>=37.0.0, <=37.2.4)

electron NPM version =37.0.0, =8.16.0-beta.2, =8.16.0-beta.2, =0.0.1, =0.0.1, =1.0.0, =2.6.39, =0.0.1, =2.13.0, =0.82.0-nightly-20250808-aaf471278, =0.20.0-rc.0, =1.0.1, =1.0.2 - deyuan 1.0.0 - http-cache-store 0.0.1 and more Source cves: CVE-2025-8010 Source advisory: SNYK:JS-ELECTRON-11023263...

CVE-2025-41236

VMware ESXi, Workstation, and Fusion contain an integer-overflow vulnerability in the VMXNET3 virtual network adapter. A malicious actor with local administrative privileges on a virtual machine with VMXNET3 virtual network adapter may exploit this issue to execute code on the host. Non VMXNET3...

The vulnerability in the virtual graphics adapter VMSVGA of the Oracle VM VirtualBox software allows a hacker to escalate their privileges and execute arbitrary code.

The vulnerability of the Virtual Graphics Adapter VMSVGA in the Oracle VM VirtualBox virtualization software is related to deficiencies in access control. This vulnerability allows a malicious actor to enhance their privileges and execute arbitrary code...

The vulnerability in the virtual network adapter VMXNET3 of VMware ESXi, Workstation, Fusion, and Cloud Foundation exists due to a write-off outside the buffer, allowing an attacker to execute arbitrary code.

The vulnerability in the virtual network adapter VMXNET3 of VMware ESXi, Workstation, Fusion, and Cloud Foundation software lies in buffer overflow attacks. Exploiting this vulnerability allows an attacker to execute arbitrary code...

CVE-2025-41236

VMware ESXi, Workstation, and Fusion contain an integer-overflow vulnerability in the VMXNET3 virtual network adapter. A malicious actor with local administrative privileges on a virtual machine with VMXNET3 virtual network adapter may exploit this issue to execute code on the host. Non VMXNET3...

PT-2025-29584

Name of the Vulnerable Software and Affected Versions VMware ESXi, Workstation, and Fusion versions affected versions not specified Description VMware ESXi, Workstation, and Fusion contain an integer-overflow vulnerability in the VMXNET3 virtual network adapter. A malicious actor with local...

PT-2025-28882 · Amd +1 · Amd +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A flaw exists in the Linux kernel’s DRM/AMD/display component where the drm edid raw function does not guarantee a proper Extended Display Identification Data EDID return. This can...

SUSE CVE-2025-38053

In the Linux kernel, the following vulnerability has been resolved: idpf: fix null-ptr-deref in idpffeaturescheck idpffeaturescheck is used to validate the TX packet. skb header length is compared with the hardware supported value received from the device control plane. The value is stored in the...

CVE-2025-6087

A Server-Side Request Forgery SSRF vulnerability was identified in the @opennextjs/cloudflare package. The vulnerability stems from an unimplemented feature in the Cloudflare adapter for Open Next, which allowed unauthenticated users to proxy arbitrary remote content via the /next/image endpoint...

CVE-2022-50054

In the Linux kernel, the following vulnerability has been resolved: iavf: Fix NULL pointer dereference in iavfgetlinkksettings Fix possible NULL pointer dereference, due to freeing of adapter-vfres in iavfinitgetresources. Previous commit introduced a regression, where receiving...

Malicious code in solana-web3-adapter (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 12e75c393c8da1b623873b652c0e4024a25d635513e641c2c50d5899421160ec Any computer that has this package installed or running should be considered...

CVE-2025-22854

Improper handling of non-200 http responses in the PingFederate Google Adapter leads to thread exhaustion under normal usage conditions...

CVE-2025-6087

A Server-Side Request Forgery SSRF vulnerability was identified in the @opennextjs/cloudflare package. The vulnerability stems from an unimplemented feature in the Cloudflare adapter for Open Next, which allowed unauthenticated users to proxy arbitrary remote content via the /next/image endpoint...

CVE-2025-6087 SSRF vulnerability in opennextjs-cloudflare via /_next/image endpoint

A Server-Side Request Forgery SSRF vulnerability was identified in the @opennextjs/cloudflare package. The vulnerability stems from an unimplemented feature in the Cloudflare adapter for Open Next, which allowed unauthenticated users to proxy arbitrary remote content via the /next/image endpoint...

CVE-2025-6087

CVE-2025-6087 affects @opennextjs/cloudflare (OpenNext Cloudflare adapter) and enables SSRF by proxying arbitrary remote content through the /_next/image endpoint due to an unimplemented feature. Affected deployments using the Cloudflare adapter for Open Next are at risk of loading remote resourc...

CVE-2025-6087 SSRF vulnerability in opennextjs-cloudflare via /_next/image endpoint

A Server-Side Request Forgery SSRF vulnerability was identified in the @opennextjs/cloudflare package. The vulnerability stems from an unimplemented feature in the Cloudflare adapter for Open Next, which allowed unauthenticated users to proxy arbitrary remote content via the /next/image endpoint...

CVE-2025-6087 SSRF vulnerability in opennextjs-cloudflare via /_next/image endpoint

A Server-Side Request Forgery SSRF vulnerability was identified in the @opennextjs/cloudflare package. The vulnerability stems from an unimplemented feature in the Cloudflare adapter for Open Next, which allowed unauthenticated users to proxy arbitrary remote content via the /next/image endpoint...