kernel: KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN

In the Linux kernel, the following vulnerability has been resolved: KVM: VMX: Bury Intel PT virtualization guest/host mode behind CONFIGBROKEN Hide KVM's ptmode module param behind CONFIGBROKEN, i.e. disable support for virtualizing Intel PT via guest/host mode unless BROKEN=y. There are myriad...

EUVD-2025-77396

Malicious code in brokenhawk-appteadev npm...

EUVD-2025-77395

Malicious code in brokensilverfish-teagooddev npm...

EUVD-2025-79685

Malicious code in brokenrhinocerosz3n npm...

EUVD-2025-79683

Malicious code in brokentunaz3n npm...

MAL-2025-100131 Malicious code in broken_junglefowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cf6dd8a08fe225b2c7877672777123e45e4239ed06e1866897fe7d8c089e5a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-79686

Malicious code in brokenjunglefowlz3n npm...

EUVD-2025-65106

Malicious code in brokenunicornz3n npm...

EUVD-2025-65109

Malicious code in brokenbobcatz3n npm...

Malicious code in broken_moth_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11e61cc30b2304288e1229ad42f7681d0799bea4ff4b2058805e9b9575aaf33e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

WordPress Classified Listing plugin <= 5.2.0 - Missing Authorization to Authenticated (Subscriber+) Listing Types Tampering vulnerability

Missing Authorization to Authenticated Subscriber+ Listing Types Tampering vulnerability discovered by Rafshanzani Suhada in WordPress Plugin Classified Listing versions = 5.2.0...

WordPress Hydra Booking plugin <= 1.1.27 - Unauthenticated Arbitrary Booking Cancellation via Weak Hash Generation vulnerability

Unauthenticated Arbitrary Booking Cancellation via Weak Hash Generation vulnerability discovered by Ahmad Salem a7mad.cc in WordPress Plugin Hydra Booking versions = 1.1.27...

EUVD-2025-55570

Malicious code in broken-aquamarine-booby npm...

EUVD-2025-55569

Malicious code in broken-emerald-locust npm...

EUVD-2025-55567

Malicious code in broken-orange-mastodon npm...

MAL-2025-67080 Malicious code in broken-emerald-locust (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb71e92456b15c3f9c80619c59a7f309a18c65d41f506f07108381cd5c058054 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55568

Malicious code in broken-olive-fowl npm...

EUVD-2025-55566

Malicious code in broken-purple-moth npm...

Malicious code in broken-emerald-locust (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb71e92456b15c3f9c80619c59a7f309a18c65d41f506f07108381cd5c058054 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

WordPress Add Multiple Marker plugin <= 1.2 - Missing Authorization to Unauthenticated Settings Update vulnerability

Missing Authorization to Unauthenticated Settings Update vulnerability discovered by Bhayanak Atma in WordPress Plugin Add Multiple Marker versions = 1.2...