MAL-2025-15185 Malicious code in avalon-plugin-socketio (npm)

The package avalon-plugin-socketio was found to contain malicious code...

MAL-2025-15190 Malicious code in avalon-plugin-xmlhttprequest (npm)

The package avalon-plugin-xmlhttprequest was found to contain malicious code...

MAL-2025-15167 Malicious code in avalon-cli-build-ios (npm)

The package avalon-cli-build-ios was found to contain malicious code...

MAL-2025-15183 Malicious code in avalon-plugin-physics3d (npm)

The package avalon-plugin-physics3d was found to contain malicious code...

MAL-2025-15188 Malicious code in avalon-plugin-ui (npm)

The package avalon-plugin-ui was found to contain malicious code...

MAL-2025-15171 Malicious code in avalon-cli-prepare-ios (npm)

The package avalon-cli-prepare-ios was found to contain malicious code...

MAL-2025-15181 Malicious code in avalon-plugin-navmesh (npm)

The package avalon-plugin-navmesh was found to contain malicious code...

MAL-2025-15189 Malicious code in avalon-plugin-websocket (npm)

The package avalon-plugin-websocket was found to contain malicious code...

MAL-2025-15166 Malicious code in avalon-cli (npm)

The package avalon-cli was found to contain malicious code...

CVE-2023-22808

An issue was discovered in the Arm Android Gralloc Module. A non-privileged user can read a small portion of the allocator process memory. This affects Bifrost r24p0 through r41p0 before r42p0, Valhall r24p0 through r41p0 before r42p0, and Avalon r41p0 before r42p0...

CVE-2022-46394

An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing operations to gain access to already freed memory. This affects Valhall r39p0 through r41p0 before r42p0, and Avalon r41p0 before r42p0...

CVE-2022-46781

An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU memory processing operations to access a limited amount outside of buffer bounds. This affects Valhall r29p0 through r41p0 before r42p0 and Avalon r41p0 before r42p0...

CVE-2022-46396

An issue was discovered in the Arm Mali Kernel Driver. A non-privileged user can make improper GPU memory processing operations to access a limited amount outside of buffer bounds. This affects Valhall r29p0 through r41p0 before r42p0 and Avalon r41p0 before r42p0...

CVE-2022-36604

An access control issue in Canaan Avalon ASIC Miner 2020.3.30 and below allows unauthenticated attackers to arbitrarily change user passwords via a crafted POST request...

avalon-pockets.com Cross Site Scripting vulnerability OBB-3906208

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

[SECURITY] Fedora 40 Update: apache-commons-logging-1.3.0-5.fc40

The commons-logging package provides a simple, component oriented interface org.apache.commons.logging.Log together with wrappers for logging systems. The user can choose at runtime which system they want to use. In addition, a small number of basic implementations are provided to allow users to...

Exploit for Use After Free in Arm Avalon_Gpu_Kernel_Driver

Exploit for CVE-2022-46395 to run on FireTV 2nd gen Cube Thi...

CVE-2023-22808

An issue was discovered in the Arm Android Gralloc Module. A non-privileged user can read a small portion of the allocator process memory. This affects Bifrost r24p0 through r41p0 before r42p0, Valhall r24p0 through r41p0 before r42p0, and Avalon r41p0 before r42p0...

CVE-2023-22808

An issue was discovered in the Arm Android Gralloc Module. A non-privileged user can read a small portion of the allocator process memory. This affects Bifrost r24p0 through r41p0 before r42p0, Valhall r24p0 through r41p0 before r42p0, and Avalon r41p0 before r42p0...

CVE-2022-46396

An issue was discovered in the Arm Mali Kernel Driver. A non-privileged user can make improper GPU memory processing operations to access a limited amount outside of buffer bounds. This affects Valhall r29p0 through r41p0 before r42p0 and Avalon r41p0 before r42p0...