CVE-2025-2027

A double free vulnerability has been identified in the ASUS System Analysis service. This vulnerability can be triggered by sending specially crafted local RPC requests, leading to the service crash and potentially memory manipulation in some rare circumstances. Refer to the 'Security Update for...

MAL-2025-2799 Malicious code in sony-liv-smarttv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 61696a41d9c61203ebde9adcecf521e954619c6273e75d9da24c9f402aaeb603 The OpenSSF Package Analysis project identified 'sony-liv-smarttv' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2025-2795 Malicious code in @nationalgeographicsociety/ngsui-header (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d937ed5f0de34fc1491db77a6b046ff477eb03286b9c49541ae1250170651eb0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in castorama.pl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 730bed67861cb1d30e187eb40b957257e8395b86e8a9e255005ba3b808369878 The OpenSSF Package Analysis project identified 'castorama.pl' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2025-2793 Malicious code in castorama.pl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 730bed67861cb1d30e187eb40b957257e8395b86e8a9e255005ba3b808369878 The OpenSSF Package Analysis project identified 'castorama.pl' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2025-2792 Malicious code in bugbounty208-test-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5012a09f4c2283a7df00a99f643af1a87adbef671a39e6569188a3bcdced87e8 The OpenSSF Package Analysis project identified 'bugbounty208-test-package' @ 1.0.1 npm as malicious. It is considered malicious because: - The...

CVE-2024-11180

creationtimestamp| type| source ---|---|--- 2025-03-29 08:29:03+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9541 2025-03-29 10:28:54+00:00| seen| https://t.me/cvedetector/21502 2025-03-29 13:55:33+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114246060126102811 2025-03-29...

CVE-2025-2027

A double free vulnerability has been identified in the ASUS System Analysis service. This vulnerability can be triggered by sending specially crafted local RPC requests, leading to the service crash and potentially memory manipulation in some rare circumstances. Refer to the 'Security Update for...

CVE-2025-2027

A double free vulnerability has been identified in the ASUS System Analysis service. This vulnerability can be triggered by sending specially crafted local RPC requests, leading to the service crash and potentially memory manipulation in some rare circumstances. Refer to the 'Security Update for...

CVE-2025-2027

A double free vulnerability has been identified in the ASUS System Analysis service. This vulnerability can be triggered by sending specially crafted local RPC requests, leading to the service crash and potentially memory manipulation in some rare circumstances. Refer to the 'Security Update for...

CVE-2025-2027

The CVE-2025-2027 entry describes a double-free vulnerability in the ASUS System Analysis service triggered by specially crafted local RPC requests, potentially causing a service crash and, in rare cases, memory manipulation. Affected component is the local RPC handling within the ASUS System Ana...

DEBIAN-CVE-2023-53005

In the Linux kernel, the following vulnerability has been resolved: traceeventshist: add check for return value of 'createhistfield' Function 'createhistfield' is called recursively at traceeventshist.c:1954 and can return NULL-value that's why we have to check it to avoid null pointer dereferenc...

CVE-2022-49754 Bluetooth: Fix a buffer overflow in mgmt_mesh_add()

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix a buffer overflow in mgmtmeshadd Smatch Warning: net/bluetooth/mgmtutil.c:375 mgmtmeshadd error: memcpy 'meshtx-param' too small 48 vs 50 Analysis: 'meshtx-param' is array of size 48. This is the destination. u8...

MAL-2025-2730 Malicious code in webhooks-contacts-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 823e5cf1e6fd5a930dbd702f998d1d88ae58e255f62e920b0262615ac2efdbbf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2019-9875

creationtimestamp| type| source ---|---|--- 2025-03-26 18:45:15+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3llcgyim6af2v 2025-03-26 19:05:08+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3llci42bxm52u 2025-03-26 21:39:21+00:00| seen|...

MAL-2025-2728 Malicious code in bagayaluzqdl159 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7811a14ef94ae6d98abe542d9f5c3d933e30c3a7d85a4f5fe707e102acbb6f2d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Report on Paragon Spyware

Citizen Lab has a new report on Paragon's spyware: Key Findings: Introducing Paragon Solutions. Paragon Solutions was founded in Israel in 2019 and sells spyware called Graphite. The company differentiates itself by claiming it has safeguards to prevent the kinds of spyware abuses that NSO Group...

MAL-2025-2623 Malicious code in corehome (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 835efaf181707862582cf58938ea26bb25e18a1d228269a42b58f12d1c250ca7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2624 Malicious code in codex-cipher (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ce020b1fc0f9d126255429ca44d4407527446d2650c546670d79bc9c84056cb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2605 Malicious code in lwc-recipes (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 92235263cd97e4d59a59394c77aeabcc20e347bda974b68b18072cf74295f12c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...