CVE-2024-38798 Uncleared password keystrokes in circular queue can lead to information disclosure or escalation of privilege

EDK2 contains a vulnerability in BIOS where an attacker may cause “Exposure of Sensitive Information to an Unauthorized Actor” by local access. Successful exploitation of this vulnerability will lead to possible information disclosure or escalation of privilege and impact Confidentiality...

CVE-2024-38798

Summary: The CVE-2024-38798 issue in EDK2 BIOS is referenced across multiple advisories (CVE-2024-38798; also CVE-2025-2296) describing a local-access vulnerability that can lead to information disclosure and potentially privilege escalation affecting confidentiality, with corroborating coverage ...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a circular linking issue in erofs, which could lead to file locking...

EUVD-2025-199064

Malicious code in next-circular-dependency npm...

Malicious code in next-circular-dependency (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bea89df6bfd2c4f68a23ce84ab344f8d0581b90cfbf4c6e0a82570797b5cffc0 The package next-circular-dependency was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190979 Malicious code in next-circular-dependency (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bea89df6bfd2c4f68a23ce84ab344f8d0581b90cfbf4c6e0a82570797b5cffc0 The package next-circular-dependency was found to contain malicious code. Source: ghsa-malware...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

Google Chrome < 4.3.61.21 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 4.3.61.21. It is, therefore, affected by multiple vulnerabilities as referenced in the 201505stable-channel-update19 advisory. - Multiple unspecified vulnerabilities in Google Chrome before 43.0.2357.65 allow attackers ...

EUVD-2025-100518

Malicious code in circularhaddockz3n npm...

MAL-2025-125467 Malicious code in circular_haddock_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33fc39abcccb6e6eda0e7df3040c73ed448b765dab5ecd3085ad1751b603714d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125466 Malicious code in circular_boar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 844148c178b421a4e6eae7c1fc287064a37bcd3252e143ed0ff4c4ba3a64b25e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in circular_wildfowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c0c2aa109b6343eb89267b2ed7fecaa386e478e1bd6f8fd76daf95b6b22888a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in circular_lamprey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a9793ee578bc01d8912dd1cef1e9405457d69b610a14faa5de3920ddda1acd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-106128

Malicious code in circularlampreyz3n npm...

Malicious code in circular_spider-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcc591efc1ff9ffab399a029eb1701fb0b7d9b86da3c370f5dc46f323acfe527 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-77673

Malicious code in circularcrocodilebrown-100 npm...

EUVD-2025-79646

Malicious code in circularcuckooz3n npm...

EUVD-2025-82509

Malicious code in circularbobolink0xrequest npm...

EUVD-2025-71069

Malicious code in circularcatfishz3n npm...

Malicious code in circular_weasel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe5501ca039779581caaeba87422dcd511bdca427592d9197fba584135cb74ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...