MAL-2025-149225 Malicious code in vulcan-browserify-non-blocking-relay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44f75a901684e76d93228851b85ee37e80b481a39a673e1769eefa38f79d23ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124300

Malicious code in non-blocking-sqlite-comet-eclipse npm...

MAL-2025-148992 Malicious code in update-chai-non-blocking-jwt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edf2732f6a507f3ea2e09ca7ff7251f8705a48a4d88fad8e4c2827383fd31c15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147807 Malicious code in selenium-module-non-blocking-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21618fc4ab8833e077bca53b682ff77591bb0149adb8ef2c46b01844066d24d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

QNAP File Station 5 Unlimited or Unthrottled Resource Allocation Vulnerability (CNVD-2025-30286)

QNAP File Station 5 is a core file management application developed by Qualcomm Technologies QNAP for its networked storage NAS devices. QNAP File Station 5 suffers from an Unlimited or Unthrottled Resource Allocation vulnerability, which can be exploited by an attacker to prevent other systems,...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a PM runtime enablement that causes tasks to block, potentially leading to a system hang...

CVE-2025-53409

An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing the same type of resource. We ha...

CVE-2025-53413

An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing the same type of resource. We ha...

The vulnerability in the `drivers/gpu/drm/vc4/vc4_dsi.c` driver code allows a hacker to cause a system failure by exploiting vulnerabilities in the Linux operating system’s Direct Rendering Infrastructure (DRI) driver.

The vulnerability in the drivers/gpu/drm/vc4/vc4dsi.c driver of the Direct Rendering Infrastructure DRI support in the Linux operating system is related to incorrect resource blocking. Exploiting this vulnerability can allow an attacker to cause a service failure...

tty: n_gsm: Don't block input queue by waiting MSC

...

CVE-2025-40071

In the Linux kernel, the following vulnerability has been resolved: tty: ngsm: Don't block input queue by waiting MSC Currently gsmqueue processes incoming frames and when opening a DLC channel it calls gsmdlciopen which calls gsmmodemupdate. If basic mode is used it calls gsmmodemupdviamsc and i...

[SECURITY] Fedora 43 Update: squid-7.2-1.fc43

Squid is a high-performance proxy caching server for Web clients, supporting FTP and HTTP data objects. Unlike traditional caching software, Squid handles all requests in a single, non-blocking, I/O-driven process. Squid keeps meta data and especially hot objects cached in RAM, caches DNS lookups...

The vulnerability of the `nvme_mpath_add_sysfs_link()` function in the Linux kernel’s `nvme-multipath` component allows a attacker to cause a service failure.

The vulnerability of the nvmempathaddsysfslink function in the Linux kernel’s nvme-multipath component is related to resource blocking issues. Exploiting this vulnerability could allow an attacker to cause service failures...

Linux Distros Unpatched Vulnerability : CVE-2025-40071

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tty: ngsm: Don't block input queue by waiting MSC Currently gsmqueue processes incoming frames and when opening a DLC channel it calls gsmdlciopen which calls...

[SECURITY] Fedora 42 Update: squid-6.14-1.fc42

Squid is a high-performance proxy caching server for Web clients, supporting FTP and HTTP data objects. Unlike traditional caching software, Squid handles all requests in a single, non-blocking, I/O-driven process. Squid keeps meta data and especially hot objects cached in RAM, caches DNS lookups...

The vulnerability of LoongArch’s kernel component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the LoongArch component in the Linux operating system’s kernel is related to incorrect blocking of resources in the file arch/loongarch/include/asm/io.h. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the netfilter component in the Linux operating system’s kernel allows a hacker to induce a service failure.

The vulnerability of the netfilter component in the Linux operating system’s kernel is related to improper blocking of resources. Exploiting this vulnerability can allow a perpetrator to cause a service failure...

cybersec-ids

cybersec-ids Full-stack AI-driven Web App Intrusion Detection...

The vulnerability of the btrfs component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the btrfs component in the Linux operating system’s kernel is related to improper blocking in the clearextentuptodate function. Exploiting this vulnerability can allow an attacker to cause a service failure...

Mediawiki GlobalBlocking Extension 安全漏洞

Mediawiki GlobalBlocking Extension is an extension of the Wikimedia Foundation USA. A security vulnerability exists in Mediawiki GlobalBlocking Extension versions 1.43 and 1.44, which stems from improper input neutralization and could lead to a stored cross-site scripting attack...