MAL-2025-27717 Malicious code in non-blocking-wolf-umbra-gacrux (npm)

The package non-blocking-wolf-umbra-gacrux was found to contain malicious code...

Malicious code in astrochemistry-warp-non-blocking-thermochronology (npm)

The package astrochemistry-warp-non-blocking-thermochronology was found to contain malicious code...

MAL-2025-17600 Malicious code in corvus-ariel-non-blocking-webdriver-mocha (npm)

The package corvus-ariel-non-blocking-webdriver-mocha was found to contain malicious code...

Malicious code in non-blocking-wolf-umbra-gacrux (npm)

The package non-blocking-wolf-umbra-gacrux was found to contain malicious code...

MAL-2025-14978 Malicious code in astrochemistry-warp-non-blocking-thermochronology (npm)

The package astrochemistry-warp-non-blocking-thermochronology was found to contain malicious code...

MAL-2025-15075 Malicious code in australis-jsonp-janus-non-blocking (npm)

The package australis-jsonp-janus-non-blocking was found to contain malicious code...

MAL-2025-25409 Malicious code in lint-staged-ceres-metalsmith-non-blocking (npm)

The package lint-staged-ceres-metalsmith-non-blocking was found to contain malicious code...

MAL-2025-32867 Malicious code in search-npm-blocking-manager (npm)

The package search-npm-blocking-manager was found to contain malicious code...

Malicious code in version-elara-gravitationalwave-non-blocking (npm)

The package version-elara-gravitationalwave-non-blocking was found to contain malicious code...

Linux Distros Unpatched Vulnerability : CVE-2021-47169

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - serial: rp2: use 'requestfirmware' instead of 'requestfirmwarenowait' In 'rp2probe', the driver registers 'rp2uartinterrupt' then calls 'rp2fwcb' through...

Linux Distros Unpatched Vulnerability : CVE-2021-46939

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tracing: Restructure traceclockglobal to never block It was reported that a fix to the ring buffer recursion detection would cause a hung machine when performin...

The vulnerability of the user blocking mechanism of the Vault Enterprise and Vault Community Edition corporate information archiving platforms allows attackers to circumvent existing security restrictions.

The vulnerability of the user blocking mechanism in the Vault Enterprise and Vault Community Edition corporate information archiving platforms is related to insufficient restrictions on authentication attempts. Exploiting this vulnerability allows a malicious actor to circumvent existing security...

Linux Distros Unpatched Vulnerability : CVE-2025-21986

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: switchdev: Convert blocking notification chain to a raw one A blocking notification chain uses a read-write semaphore to protect the integrity of the chai...

Linux Distros Unpatched Vulnerability : CVE-2020-1938

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When using the Apache JServ Protocol AJP, care must be taken when trusting incoming connections to Apache Tomcat. Tomcat treats AJP connections as having higher...

dm cache: prevent BUG_ON by blocking retries on failed device resumes

...

The vulnerability of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server, related to mutual flow blocking, allows a attacker to cause service failures.

The vulnerability of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server is related to mutual blocking of execution streams. Exploiting this vulnerability can allow an attacker to cause service interruptions...

PT-2025-30951

Name of the Vulnerable Software and Affected Versions Anubis versions 1.21.2 and below Description Anubis is a Web AI Firewall Utility designed to protect upstream resources from scraper bots. Attackers can craft malicious pass-challenge pages that cause a user to execute arbitrary JavaScript cod...

Denial Of Service (DoS)

Starlette is vulnerable to Denial Of Service DoS. The vulnerability is due to blocking of the main event thread caused by improper handling of large multipart file uploads, where a bug in the UploadFile logic fails to anticipate memory rollover, blocking the application from accepting new...

WordPress plugin Security Ninja 安全漏洞

WordPress Security Ninja is a plugin that focuses on website security protection, providing automated security scanning, login protection, IP blocking, and two-factor authentication to help users proactively identify security risks and prevent hacker attacks. WordPress Security Ninja has an...

The vulnerability of the nfs_return_empty_folio() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the nfsreturnemptyfolio function in the Linux operating system is related to errors during thread blocking. Exploiting this vulnerability can allow an attacker to cause a service failure...