MAL-2024-10913 Malicious code in symphony-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d8ac47d747638835685ead66cf3fe6fc737f93e540093a4f94b0148b45db3c3e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-53096

In the Linux kernel, the following vulnerability has been resolved: mm: resolve faulty mmapregion error path behaviour The mmapregion function is somewhat terrifying, with spaghetti-like control flow and numerous means by which issues can arise and incomplete state, memory leaks and other...

CVE-2024-53096 mm: resolve faulty mmap_region() error path behaviour

In the Linux kernel, the following vulnerability has been resolved: mm: resolve faulty mmapregion error path behaviour The mmapregion function is somewhat terrifying, with spaghetti-like control flow and numerous means by which issues can arise and incomplete state, memory leaks and other...

MAL-2024-10899 Malicious code in cloud-functions-schedule-instance (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9d10678b76e1cf601f3ff31de7642b60bd56df7c7899eb2c23808c2ef0ebf778 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10910 Malicious code in node-commerce-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dfa533cdd1af622e3c90101a8a4cdd292f00540f515f5e264c683a2984199538 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10909 Malicious code in lunar-root (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe9a8b05cd878b17af9caf8b7741e3b99e737c24cce44b7e52942663d6f585ab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10904 Malicious code in d1-northwind (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 962330e56ce116749d23c41a6b7723d950582340889862760591e83aa4784e1e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10914 Malicious code in veworld-mock (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b4208104cfdf19567e6147c7cf429ec5ff0e3cda75b01f79cf4ac5b49252ee3c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10898 Malicious code in canvaskit-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b8fec757cb441808c4cf235ccb1ef0bcf9325ffebc3a5efcc43bc21669e0feb8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10912 Malicious code in quorumnetworktester (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 53078554fb920e847c3ddd62aaee19d43cd5b39e7348b742de169c8e73fd4c69 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10897 Malicious code in nylas-private-sounds (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 612de4025068333f24bd17ea9b89669c891d1b53d78404a37c1dfaf655126501 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10908 Malicious code in jigasi-haproxy-agent (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a84edbe7b5074454dc19154e38a0b4aaebad52cb446488862a52aa8e62db2b53 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10893 Malicious code in kiosk-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c7f59314a206c7faa0082a49930dfe6b18851236824c9539436bf92a3f71a08a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2025-9976

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A issue in the Linux kernel has been identified where the active performance monitor v3d-active perfmon is not stopped during destruction, leaving the v3d-active perfmon pointer stale...

DEBIAN-CVE-2024-52616

A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them sequentially after that. This predictable behavior facilitates DNS spoofing attacks, allowing attackers to guess transaction IDs...

CVE-2024-52616

A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them sequentially after that. This predictable behavior facilitates DNS spoofing attacks, allowing attackers to guess transaction IDs...

CVE-2024-52616 Avahi: avahi wide-area dns predictable transaction ids

A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them sequentially after that. This predictable behavior facilitates DNS spoofing attacks, allowing attackers to guess transaction IDs...

CVE-2024-52616

CVE-2024-52616 affects the Avahi-daemon. The vulnerability arises because DNS transaction IDs are initialized randomly only at startup and then incremented, making it possible for an attacker to predict IDs and perform DNS spoofing. The connected documents confirm the issue and reference the same...

CVE-2024-53085

In the Linux kernel, the following vulnerability has been resolved: tpm: Lock TPM chip in tpmpmsuspend first Setting TPMCHIPFLAGSUSPENDED in the end of tpmpmsuspend can be racy according, as this leaves window for tpmhwrngread to be called while the operation is in progress. The recent bug report...

MAL-2024-10849 Malicious code in my-wallet-backupt-decryption-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 27ce6fe7581d2cdb10673965b6fefaeef4f33c8ae7f8ab0f45e5e3341065620e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...