MAL-2025-34895 Malicious code in test-mlw2-array-vocab (npm)

The package test-mlw2-array-vocab was found to contain malicious code...

MAL-2025-14863 Malicious code in array-routes (npm)

The package array-routes was found to contain malicious code...

Malicious code in array-routes (npm)

The package array-routes was found to contain malicious code...

MAL-2025-38802 Malicious code in watch-array (npm)

The package watch-array was found to contain malicious code...

MAL-2025-34173 Malicious code in sun-cloud-sudo-array-benchmark (npm)

The package sun-cloud-sudo-array-benchmark was found to contain malicious code...

MAL-2025-32877 Malicious code in secure-daemon-bash-code-array (npm)

The package secure-daemon-bash-code-array was found to contain malicious code...

MAL-2025-24111 Malicious code in just-array-intersect (npm)

The package just-array-intersect was found to contain malicious code...

MAL-2025-33442 Malicious code in small-private-integer-array-deploy (npm)

The package small-private-integer-array-deploy was found to contain malicious code...

MAL-2025-14861 Malicious code in array-hash-view-balance-authenticate (npm)

The package array-hash-view-balance-authenticate was found to contain malicious code...

Malicious code in just-array-unique (npm)

The package just-array-unique was found to contain malicious code...

Malicious code in array-byte-code-reject-promise (npm)

The package array-byte-code-reject-promise was found to contain malicious code...

Malicious code in just-array-union (npm)

The package just-array-union was found to contain malicious code...

Linux Kernel Heap Buffer Overflow DoS

The vulnerability in the arch/loongarch/kvm/intc/eiointc.c module of the Linux operating system is related to incorrect array index checking. Exploiting this vulnerability could allow an attacker to cause a service failure...

(Pwn2Own) Microsoft Windows 11 vhdmp Improper Validation of Array Index Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Virtual Hard...

CISA: FY 2025 State and Local Cybersecurity Grant Program FAQs

Congress established the State and Local Cybersecurity Grant Program SLCGP to "award grants to eligible entities to address cybersecurity risks and cybersecurity threats to information systems owned or operated by, or on behalf of, state, local, or Tribal governments." Within the U.S. Department ...

Securing Educational LLMs: a Generalised Taxonomy of Attacks on LLMs and DREAD Risk Assessment

Due to perceptions of efficiency and significant productivity gains, various organisations, including in education, are adopting Large Language Models LLMs into their workflows. Educator-facing, learner-facing, and institution-facing LLMs, collectively, Educational Large Language Models eLLMs,...

Linux Distros Unpatched Vulnerability : CVE-2024-38623

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Use variable length array instead of fixed size Should fix smatch warning:...

Linux Distros Unpatched Vulnerability : CVE-2023-52599

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - jfs: fix array-index-out-of-bounds in diNewExt Syz report UBSAN: array-index-out-of-bounds in fs/jfs/jfsimap.c:2360:2 index -878706688 is out of range for type...

BIT-LIBPHP-2024-5585 Command injection via array-ish $command parameter of proc_open() (bypass CVE-2024-1874 fix)

In PHP versions 8.1. before 8.1.29, 8.2. before 8.2.20, 8.3. before 8.3.8, the fix for CVE-2024-1874 does not work if the command name includes trailing spaces. Original issue: when using procopen command with array syntax, due to insufficient escaping, if the arguments of the executed command ar...

BIT-LIBPHP-2024-1874 Command injection via array-ish $command parameter of proc_open()

In PHP versions 8.1. before 8.1.28, 8.2. before 8.2.18, 8.3. before 8.3.5, when using procopen command with array syntax, due to insufficient escaping, if the arguments of the executed command are controlled by a malicious user, the user can supply arguments that would execute arbitrary commands ...