EUVD-2025-199327

Malicious code in @commute/bloom npm...

Malicious code in @commute/bloom (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72a8d3f37c021b587ff0a29256071f77c00a9cd9c0ac896a95eadefc849dba2f The package @commute/bloom was found to contain malicious code. Source: ghsa-malware f0fc74d77b27b5b9dd2fea4b44706142694d54536db65dad741286d4c1653ca3...

MAL-2025-191207 Malicious code in @commute/bloom (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72a8d3f37c021b587ff0a29256071f77c00a9cd9c0ac896a95eadefc849dba2f The package @commute/bloom was found to contain malicious code. Source: ghsa-malware f0fc74d77b27b5b9dd2fea4b44706142694d54536db65dad741286d4c1653ca3...

EUVD-2013-5537

Malware in sbrugna...

EUVD-2016-1994

Malware in sbrugna...

EUVD-2023-0456

Malicious code in bioql PyPI...

MAL-2025-43515 Malicious code in aroma_cnqff_npir4_bloom (npm)

The package aromacnqffnpir4bloom was found to contain malicious code...

SUSE SLES15: tomcat10 / tomcat10-admin-webapps / tomcat10-doc / etc (SUSE-SU-2025:03006-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:03006-1 advisory. Updated to Tomcat 10.1.44: - CVE-2025-48989: Fixed 'MadeYouReset' DoS in HTTP/2 due to client triggered stream reset bsc12438...

Security update for tomcat10

This update for tomcat10 fixes the following issues: Updated to Tomcat 10.1.44: CVE-2025-48989: Fixed "MadeYouReset" DoS in HTTP/2 due to client triggered stream reset bsc1243895 Other fixes: Catalina Fix: Fix bloom filter population for archive indexing when using a packed WAR containing one or...

Malicious code in bloom-lang (npm)

The package bloom-lang was found to contain malicious code...

Malicious code in aroma_7a5jh_i2iev_bloom (npm)

The package aroma7a5jhi2ievbloom was found to contain malicious code...

Malicious code in bloom-web (npm)

The package bloom-web was found to contain malicious code...

MAL-2025-15844 Malicious code in bloom-web (npm)

The package bloom-web was found to contain malicious code...

MAL-2025-8506 Malicious code in @malware-test-bloom-brims-forbs-pesos/test-mlw3-bloom-brims-forbs-pesos (npm)

The package @malware-test-bloom-brims-forbs-pesos/test-mlw3-bloom-brims-forbs-pesos was found to contain malicious code...

MAL-2025-15843 Malicious code in bloom-lang (npm)

The package bloom-lang was found to contain malicious code...

Linux Distros Unpatched Vulnerability : CVE-2022-0433

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A NULL pointer dereference flaw was found in the Linux kernel's BPF subsystem in the way a user triggers the mapgetnextkey function of the BPF bloom filter. Thi...

MFAz: Historical Access Based Multi-Factor Authorization

Unauthorized access remains one of the critical security challenges in the realm of cybersecurity. With the increasing sophistication of attack techniques, the threat of unauthorized access is no longer confined to the conventional ones, such as exploiting weak access control policies. Instead,...

The vulnerability in the bloom_filter.c and bloom_filter_map.c components of the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability in the bloomfilter.c and bloomfiltermap.c components of the Linux operating system is related to errors during resource release. Exploiting this vulnerability can allow an attacker to cause a service failure...

A Private Smart Wallet with Probabilistic Compliance

We propose a privacy-preserving smart wallet with a novel invitation-based private onboarding mechanism. The solution integrates two levels of compliance in concert with an authority party: a proof of innocence mechanism and an ancestral commitment tracking system using bloom filters for...

RedisBloom 2.6.12 Integer Overflow

There is an integer overflow vulnerability in RedisBloom version 2.6.12, which is a module used in redis. The integer overflow vulnerability allows an attacker a redis client which knows the password to allocate memory in the heap lesser than the required memory due to wraparound. Then read and...