Malicious code in corporate-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a096b32dfa76f7e64480d72862c34ec7e644ac03db51ad09af0eb1f929d637a1 The package corporate-blocking was found to contain malicious code. Source: ossf-package-analysis...

EUVD-2026-4188

Malicious code in corporate-blocking npm...

MAL-2026-463 Malicious code in corporate-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a096b32dfa76f7e64480d72862c34ec7e644ac03db51ad09af0eb1f929d637a1 The package corporate-blocking was found to contain malicious code. Source: ossf-package-analysis...

ROS-20260121-73-0002

A vulnerability in the ip6defaultadvmss function of the ipv6/route.c component of the Linux operating system kernel is related to the lack of a blocking check. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

ROS-20260121-73-0019

A vulnerability in the syscall.c component of the Linux operating system kernel is related to thread blocking errors. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

ROS-20260120-7314

A vulnerability in the npcmi2cprobebus function drivers/i2c/busses/i2c-npcm7xx.c of the Linux operating system kernel is related to insufficient blocking. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

ROS-20260120-7327

A vulnerability in gpiorcarconfiginterruptinputmode, gpiorcarconfiggeneralinputoutputmode, gpiorcargetmultiple, gpiorcarset, gpiorcarsetmultiple, and gpiorcarprobe drivers/gpio/gpio-rcar.c of the Linux operating system kernel is due to insufficient blocking. Exploitation of the vulnerability coul...

ROS-20260120-73-0007

A vulnerability in the mhi component of the Linux operating system kernel is related to insufficient blocking. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

ROS-20260120-7312

A vulnerability in the mptcpnlremovesubflowandsignaladdr function net/mptcp/pmnetlink.c of the Linux operating system kernel is related to insufficient blocking. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

Devolutions Server security vulnerabilities

Devolutions Server is an application system developed by the Canadian company Devolutions. It provides a fully functional solution for shared accounts and password management. Versions of Devolutions Server prior to 2025.3.12 contained a security vulnerability caused by improper authorization in...

ROS-20260119-7394

A vulnerability in the teamportadd function of the drivers/net/team/teamcore.c component of the Linux operating system kernel is related to insufficient blocking. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

MiracleLinux 4 : java-1.7.0-openjdk-1.7.0.181-2.6.14.1.AXS4 (AXSA:2018-2999:02)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2018-2999:02 advisory. OpenJDK: incorrect handling of Reference clones can lead to sandbox bypass Hotspot, 8192025 CVE-2018-2814 OpenJDK: unrestricted deserialization of...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001467)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001467 advisory. A vulnerability was found in Linux kernel where non-blocking socket in llcpsockconnect leads to leak and eventually hanging-up the system. Tenable has extracted the...

Fedora 42 : composer (2026-13b4dbe546)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-13b4dbe546 advisory. Version 2.9.3 - 2025-12-30 Security: Fixed ANSI sequence injection GHSA-59pp-r3rg-353g / CVE-2025-67746 Fixed COMPOSERNOSECURITYBLOCKING env var not being...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: tty: ngsm: Do not block the input queue by waiting for the MSC response. Currently, the gsmqueue function processes incoming frames. When opening a DLC channel, it calls gsmdlciopen, which in turn calls gsmmodemupdate. If the bas...

MiracleLinux 9 : thunderbird-128.10.1-1.el9_6.ML.1 (AXSA:2025-10505:15)

The remote MiracleLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2025-10505:15 advisory. thunderbird: JavaScript Execution via Spoofed PDF Attachment and file:/// Link CVE-2025-3909 thunderbird: Sender Spoofing via Malformed From Header...

ROS-20260113-7388

A vulnerability in the rtlwifi component of the Linux operating system kernel is related to insufficient blocking. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

Fedora 43 : composer (2026-0b03072979)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-0b03072979 advisory. Version 2.9.3 - 2025-12-30 Security: Fixed ANSI sequence injection GHSA-59pp-r3rg-353g / CVE-2025-67746 Fixed COMPOSERNOSECURITYBLOCKING env var not being...

ROS-20260112-7328

A vulnerability in the pageattr.c component of the Linux operating system kernel is related to the use of blocking code in a single-threaded, non-blocking context. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

ROS-20260112-7349

A vulnerability in the ondemand.c component of the Linux operating system kernel is related to insufficient blocking. Exploitation of the vulnerability could allow an attacker to cause a denial of service...