RockyLinux 9 : kernel (RLSA-2025:16880)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:16880 advisory. kernel: netfilter: nfconntrack: fix crash due to removal of uninitialised entry CVE-2025-38472 kernel: smb: client: fix use-after-free in cifsoplockbrea...

MAL-2025-48262 Malicious code in mad-5.0.0.2.2.8. (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d2e95f4e16bcfc6e45425aaca89a6cd7eef9fe693c5ffc0b34270497980e9dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE CVE-2025-39958

In the Linux kernel, the following vulnerability has been resolved: iommu/s390: Make attach succeed when the device was surprise removed When a PCI device is removed with surprise hotplug, there may still be attempts to attach the device to the default domain as part of tear down via...

Malicious code in redirect-iocz0a (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ad74b3db117b60fc0bbc25bfe553def04f2261766313c4b245c4c88c657d1573 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-57j5wb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1d73657b4f9f61a0b3a6e7bee705c52a3394efb6c4c65cfc4d1807ad9da91091 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48201 Malicious code in redirect-o92d2h (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 77f3c6a2ba50a265c6c612f8d9982534cea0e6b9441dec88bd1a7f428adfa8af Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48181 Malicious code in redirect-kz5pf4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2bc86fafc96a4a904d66dff816670e4e6fab529a6f1cc9b9179bcd6137f12f2f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-sormfb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5077214a1a7b6d8085d3e85f9e33151aa5ec8c2525c22648b00fa637e46bde67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48228 Malicious code in redirect-whb6rt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fd0987c4c2d53a1a9a65785c5954913491bde650e384e279698367c4c8261ff0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CLSA-2025-1760024944 Fix CVE(s): CVE-2025-6297

SECURITY UPDATE: Fix directory cleanup vulnerability - dpkg-deb/info.c: Fix cleanup for control member with restricted directories - Add treewalk to set proper permissions before removal for non-root users - CVE-2025-6297...

EUVD-2025-33325

In the Linux kernel, the following vulnerability has been resolved: iommu/s390: Make attach succeed when the device was surprise removed When a PCI device is removed with surprise hotplug, there may still be attempts to attach the device to the default domain as part of tear down via...

CVE-2025-39958

In the Linux kernel, the following vulnerability has been resolved: iommu/s390: Make attach succeed when the device was surprise removed When a PCI device is removed with surprise hotplug, there may still be attempts to attach the device to the default domain as part of tear down via...

UBUNTU-CVE-2025-39958

In the Linux kernel, the following vulnerability has been resolved: iommu/s390: Make attach succeed when the device was surprise removed When a PCI device is removed with surprise hotplug, there may still be attempts to attach the device to the default domain as part of tear down via...

CVE-2025-39958

CVE-2025-39958 concerns the Linux kernel IOMMU on s390: when a PCI device is surprise-removed, teardown may still attempt to attach to the default domain, causing zpci_register_ioat() to fail and s390_iommu_attach_device() to error out. The fix changes the attach path to proceed as if registratio...

CVE-2025-39958 iommu/s390: Make attach succeed when the device was surprise removed

In the Linux kernel, the following vulnerability has been resolved: iommu/s390: Make attach succeed when the device was surprise removed When a PCI device is removed with surprise hotplug, there may still be attempts to attach the device to the default domain as part of tear down via...

Malicious code in @testcarrot/supply3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ecbc24cc97adb2847161caf543bbb337374513e26dd4d6d2c83b6d306df7f45d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48100 Malicious code in @testcarrot/supply5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1f18175c030df85202e86f90a2f44bcc72e87ad7ebf6cfd7e053c30fb7d76664 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

FortiOS Privilege Escalation

The vulnerability of the FortiOS operating systems and the FortiProxy proxy server for protection against Internet attacks is related to incomplete cleaning of temporary or auxiliary resources. Exploiting this vulnerability can allow attackers to increase their privileges...

WordPress plugin Betheme has a cross-site scripting vulnerability

WordPress Betheme plugin is a WordPress multipurpose theme that is mainly used to quickly build different types of websites such as corporate, blog, e-commerce and so on. WordPress Betheme plugin suffers from a cross-site scripting vulnerability that stems from insufficient input cleanup and outp...

AlmaLinux 10 : kernel (ALSA-2025:16904)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:16904 advisory. kernel: fs: export anoninodemakesecureinode and fix secretmem LSM bypass CVE-2025-38396 kernel: smb: client: fix use-after-free in cifsoplockbreak...