9 matches found
Malicious code in paysafe-vault (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf94daa791fb670bda071f1b90b36f5b1f89dfb2ffc7eb7ccbf798fdff8915c1 The package impersonates a Paysafe Customer Vault SDK but is a credential stealer. index.js defines an exfil routine that collects os.hostname,...
EUVD-2026-25532
In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix key reference count leak from call-key When creating a client call in rxrpcallocclientcall, the code obtains a reference to the key. This is never cleaned up and gets leaked when the call is destroyed. Fix this by...
EUVD-2025-10004
Malicious code in bioql PyPI...
CVE-2025-21423
Memory corruption occurs when handling client calls to EnableTestMode through an Escape call...
CVE-2025-21423
Memory corruption occurs when handling client calls to EnableTestMode through an Escape call...
CVE-2025-21423
Memory corruption occurs when handling client calls to EnableTestMode through an Escape call...
CVE-2025-21423
CVE-2025-21423 affects Qualcomm chipsets; memory corruption occurs when handling client calls to EnableTestMode through an Escape call. The CVSS-3.1 metrics indicate a LOCAL attack vector, LOW privileges required, no user interaction, with HIGH confidentiality, integrity, and availability impact....
CVE-2025-21423 Improper Validation of Array Index in Display
Memory corruption occurs when handling client calls to EnableTestMode through an Escape call...
UBUNTU-CVE-2024-50294
In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix missing locking causing hanging calls If a call gets aborted e.g. because kafs saw a signal between it being queued for connection and the I/O thread picking up the call, the abort will be prioritised over the connecti...