MAL-2025-100914 Malicious code in content_cephalopod-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4e60abf3d710f07fecfa4062beb31443935dc956fd2aab8412126defde8795a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99402 Malicious code in amused_armadillo_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17b94fc64ca358712a1833f10a360a838b1e2324dc8465964609c81411d802f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rifqi-lontong36-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4c4a5332000d0ffb1b8f7b834ab46279bbb1dadbb4a5bdd7d99dfde1d592a40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-81839 Malicious code in udin-moci29-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b023fc507909e31307527d1d272f07ac6f48a660667c75419db1c8f60d898c52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-tapai85-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c035e62e939066201bc5f133c2fad58943171b06c31b4fca40cebfd9ca7bef18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68202 Malicious code in extreme-sapphire-zebra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d05cb2e6c1949cf65fc509b0111cc0ef466de840938798d07c4ba83bf633183 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990045)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990045 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/pm: Fix the null pointer dereference in applystateadjustrules Check the pointer value ...

UBUNTU-CVE-2023-53730

In the Linux kernel, the following vulnerability has been resolved: blk-iocost: use spinlockirqsave in adjustinuseandcalccost adjustinuseandcalccost use spinlockirq and IRQ will be enabled when unlock. DEADLOCK might happen if we have held other locks and disabled IRQ before invoking it. Fix it b...

CVE-2023-53730

CVE-2023-53730 : In the Linux kernel, the blk-iocost code path uses spin_lock_irq() when acquiring bfqd-related locks in adjust_inuse_and_calc_cost(), which can leave IRQ state inconsistent and lead to a potential deadlock if other locks are held and IRQ is disabled before unlocking. The fix swit...

EUVD-2020-16067

Malware in sbrugna...

[SECURITY] Fedora 41 Update: exiv2-0.28.6-2.fc41

A command line utility to access image metadata, allowing one to: print the Exif metadata of Jpeg images as summary info, interpreted values, or the plain data for each tag print the Iptc metadata of Jpeg images print the Jpeg comment of Jpeg images set, add and delete Exif and Iptc metadata of...

Linux Distros Unpatched Vulnerability : CVE-2020-28368

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Xen through 4.14.x allows guest OS administrators to obtain sensitive information such as AES keys from outside the guest via a side-channel attack on a...

CVE-2025-54804 Russh is missing an overflow check during channel windows adjust

Russh is a Rust SSH client & server library. In versions 0.54.0 and below, the channel window adjust message of the SSH protocol is used to track the free space in the receive buffer of the other side of a channel. The current implementation takes the value from the message and adds it to an...

CVE-2025-54804

Russh is a Rust SSH client/server library. In versions ≤0.54.0, CHANNEL_WINDOW_ADJUST handling computes recipient_window_size from the decoded value without proper overflow checks, causing an integer overflow that can crash the server. The issue is fixed in version 0.54.1. Attacker impact is serv...

CVE-2025-54804

Russh is a Rust SSH client & server library. In versions 0.54.0 and below, the channel window adjust message of the SSH protocol is used to track the free space in the receive buffer of the other side of a channel. The current implementation takes the value from the message and adds it to an...

GHSA-H5RC-J5F5-3GCM russh is missing overflow checks during channel windows adjust

Summary The channel window adjust message of the SSH protocol is used to track the free space in the receive buffer of the other side of a channel. The current implementation takes the value from the message and adds it to an internal state value. This can result in a integer overflow. If the Rus...

PT-2025-31887 · Russh · Russh

Name of the Vulnerable Software and Affected Versions: Russh versions 0.54.0 and earlier Description: Russh is a Rust SSH client & server library. The implementation of the SSH protocol's channel window adjust message does not properly validate the incoming value, leading to a potential integer...

Malicious code in com.adjust.test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e1c1175d9d178e089d813fa5fd10a1f34409c94f28af0ef4c4b0aa7d2424c77b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

UBUNTU-CVE-2025-21933

In the Linux kernel, the following vulnerability has been resolved: arm: pgtable: fix NULL pointer dereference issue When updatemmucacherange is called by updatemmucache, the vmf parameter is NULL, which will cause a NULL pointer dereference issue in adjustpte: Unable to handle kernel NULL pointe...

CVE-2025-21933 arm: pgtable: fix NULL pointer dereference issue

In the Linux kernel, the following vulnerability has been resolved: arm: pgtable: fix NULL pointer dereference issue When updatemmucacherange is called by updatemmucache, the vmf parameter is NULL, which will cause a NULL pointer dereference issue in adjustpte: Unable to handle kernel NULL pointe...