MAL-2025-3734 Malicious code in com.unity.robotics.warehouse.base (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1c888bbc76a87698356b86c72559a95c4a77dd4440e06d6ccb1423ae2aab3bc9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3728 Malicious code in com.unity.furioos-connection-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 68c58a66214f806ff93b92a26cc583bbad8e5b14bde97afe154c5c850bc40585 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3730 Malicious code in com.unity.perception (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 882160cfdcc85287d81ae0b812ae0b3e00bd6254e018d4268f6e54655839a10f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in com.unity.rpc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 29020683719ce2888e35bc68573af9acf12bfa039f451c61178d38ae8210386d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3735 Malicious code in com.unity.rpc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 29020683719ce2888e35bc68573af9acf12bfa039f451c61178d38ae8210386d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3726 Malicious code in com.unity.cluster-display (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b017254017be28523d1d339bd21b2d15cfa38d299a6dfd0df7a157028c544bac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in com.unity.scripting.python (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware be82e73674df50f7f47d6c1c4f94d2c17d47e0b4fe889b1d813aef836bd95c98 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3729 Malicious code in com.unity.list-view-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e62e603878259ca3d97124f0e3dd5225e75518c1572831a35e96a26b807e151 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3740 Malicious code in badgerdoc-storage (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 57170ed58e2cf5e3b4b32f443ae555c7c040f2a395b3505837c90e06add93db5 Packages that seem to be created by a legit bug bounty hunter. Designed to look like created by different organisations, they contain a couple of data...

SUSE CVE-2025-37851

In the Linux kernel, the following vulnerability has been resolved: fbdev: omapfb: Add 'plane' value check Function dispcovlsetup is not intended to work with the value OMAPDSSWB of the enum parameter plane. The value of this parameter is initialized in dssinitoverlays and in the current state of...

CVE-2025-4492

creationtimestamp| type| source ---|---|--- 2025-05-09 22:14:49+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lorghtllrnq2 2025-05-09 22:26:25+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15855 2025-05-09...

CVE-2025-37881

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: aspeed: Add NULL pointer check in astvhubinitdev The variable d-name, returned by devmkasprintf, could be NULL. A pointer check is added to prevent potential NULL pointer dereference. This is similar to the fix in...

UBUNTU-CVE-2025-37844

In the Linux kernel, the following vulnerability has been resolved: cifs: avoid NULL pointer dereference in dbg call cifsserverdbg implies server to be non-NULL so move call under condition to avoid NULL pointer dereference. Found by Linux Verification Center linuxtesting.org with SVACE...

CVE-2025-37881 usb: gadget: aspeed: Add NULL pointer check in ast_vhub_init_dev()

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: aspeed: Add NULL pointer check in astvhubinitdev The variable d-name, returned by devmkasprintf, could be NULL. A pointer check is added to prevent potential NULL pointer dereference. This is similar to the fix in...

CVE-2025-37881

In CVE-2025-37881, the Linux kernel USB gadget aspeed driver (ast_vhub_init_dev) fixes a NULL pointer dereference by adding a NULL check for d->name (returned by devm_kasprintf). The issue could occur if devm_kasprintf() returns NULL, potentially leading to a crash. The patch, which references...

CVE-2025-37881 usb: gadget: aspeed: Add NULL pointer check in ast_vhub_init_dev()

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: aspeed: Add NULL pointer check in astvhubinitdev The variable d-name, returned by devmkasprintf, could be NULL. A pointer check is added to prevent potential NULL pointer dereference. This is similar to the fix in...

CVE-2025-37851

CVE-2025-37851 affects the Linux kernel fbdev omapfb path. The vulnerability centers on the dispc_ovl_setup function not handling the plane value OMAP_DSS_WB from the enum parameter plane. While that value is initialized in dss_init_overlays and in current code cannot take this value, some code p...

SUSE CVE-2025-37811

In the Linux kernel, the following vulnerability has been resolved: usb: chipidea: cihdrcimx: fix usbmisc handling usbmisc is an optional device property so it is totally valid for the corresponding data-usbmiscdata to have a NULL value. Check that before dereferencing the pointer. Found by Linux...

PT-2025-21906 · Git +1 · Lucene

Name of the Vulnerable Software and Affected Versions: Apache Lucene affected versions not specified Description: The software is susceptible to a security exception during the cloning of an AttributeSource$State object within the ConcatenateGraphFilter$BytesRefBuilderT class. The issue occurs wh...

RiM: Record, Improve and Maintain Physical Well-Being Using Federated Learning

In academic settings, the demanding environment often forces students to prioritize academic performance over their physical well-being. Moreover, privacy concerns and the inherent risk of data breaches hinder the deployment of traditional machine learning techniques for addressing these health...