Malicious code in assert-new-compress-mu-key (npm)

The package assert-new-compress-mu-key was found to contain malicious code...

MAL-2025-26649 Malicious code in monitor-eta-decode-cold-assert (npm)

The package monitor-eta-decode-cold-assert was found to contain malicious code...

MAL-2025-14985 Malicious code in async-boolean-emulate-assert-gamma (npm)

The package async-boolean-emulate-assert-gamma was found to contain malicious code...

MAL-2025-14940 Malicious code in assert-tau-eta-good-earth (npm)

The package assert-tau-eta-good-earth was found to contain malicious code...

MAL-2025-15329 Malicious code in bad-spy-shell-report-assert (npm)

The package bad-spy-shell-report-assert was found to contain malicious code...

MAL-2025-22664 Malicious code in hot-air-thread-minify-assert (npm)

The package hot-air-thread-minify-assert was found to contain malicious code...

MAL-2025-14988 Malicious code in async-deserialize-xi-assert-shell (npm)

The package async-deserialize-xi-assert-shell was found to contain malicious code...

CVE-2025-1394 Denial of Service (DoS) vulnerabilitiey in Zigbee library

The Ember ZNet stack’s packet buffer manager may read out of bound memory leading to an assert, causing a Denial of Service DoS...

CVE-2025-1394

The Ember ZNet stack’s packet buffer manager may read out of bound memory leading to an assert, causing a Denial of Service DoS...

CVE-2025-1394: Unchecked Return Value

The Ember ZNet stack’s packet buffer manager may read out of bound memory leading to an assert, causing a Denial of Service DoS...

RockyLinux 8 : glibc (RLSA-2025:3828)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:3828 advisory. glibc: buffer overflow in the GNU C Library's assert CVE-2025-0395 Tenable has extracted the preceding description block directly from the RockyLinux security...

CVE-2025-38461

In the Linux kernel, the following vulnerability has been resolved: vsock: Fix transport TOCTOU Transport assignment may race with module unload. Protect newtransport from becoming a stale pointer. This also takes care of an insecure call in vsockuselocaltransport; add a lockdep assert. BUG: unab...

UBUNTU-CVE-2025-38461

In the Linux kernel, the following vulnerability has been resolved: vsock: Fix transport TOCTOU Transport assignment may race with module unload. Protect newtransport from becoming a stale pointer. This also takes care of an insecure call in vsockuselocaltransport; add a lockdep assert. BUG: unab...

The vulnerability of the Demon Routing Protocol Daemon (RPD) in Juniper Networks’ Junos OS and Junos OS Evolved operating systems allows a attacker to cause a service failure.

The vulnerability of the Demon Routing Protocol Daemon RPD in Juniper Networks’ Junos OS and Junos OS Evolved operating systems is related to the use of the assert function. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

The vulnerability of the mod_proxy_http2 function in the Apache HTTP Server allows a hacker to cause a service failure.

The vulnerability of the modproxyhttp2 function in the Apache HTTP Server is related to the use of the assert function or similar operators. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.

...

wifi: plfxlc: Remove erroneous assert in plfxlc_mac_release

...

CVE-2025-38287

Technical details about CVE-2025-38287 are not publicly provided in the supplied documents. Monitor official advisories for updates, affected products, and fixes.

CVE-2025-38287 IB/cm: Drop lockdep assert and WARN when freeing old msg

In the Linux kernel, the following vulnerability has been resolved: IB/cm: Drop lockdep assert and WARN when freeing old msg The send completion handler can run after cmid has advanced to another message. The cmid lock is not needed in this case, but a recent change re-used cmfreeprivmsg, which...

CVE-2025-38287: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: IB/cm: Drop lockdep assert and WARN when freeing old msg The send completion handler can run after cmid has advanced to another message. The cmid lock is not needed in this case, but a recent change re-used cmfreeprivmsg, which...