DEBIAN-CVE-2025-40094

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: facm: Refactor bind path to use free After an bind/unbind cycle, the acm-notifyreq is left stale. If a subsequent bind fails, the unified error label attempts to free this stale request, leading to a NULL pointer...

CVE-2025-40099

In the Linux kernel, the following vulnerability has been resolved: cifs: parsedfsreferrals: prevent oob on malformed input Malicious SMB server can send invalid reply to FSCTLDFSGETREFERRALS - reply smaller than sizeofstruct getdfsreferralrsp - reply with number of referrals smaller than...

apache-airflow (>=3.0.0, <=3.0.5rc3), apache-airflow-providers-cohere (>=1.1.3rc1, <=1.4.0) +3 more potentially affected by CVE-2025-54941 via apache-airflow-core (>=3.0.0, <=3.0.5rc3)

apache-airflow-core PYPI version =3.0.0, =3.0.0, =1.1.3rc1, =1.0.0, =1.0.6, =1.0.9 Source cves: CVE-2025-54941 Source advisory: MEND:CVE-2025-54941...

Malicious Package

Overview esg-odf-common is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2025-49083 Malicious code in esg-odf-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55bab458b0a0de6c4110ff28d0306c52de1e31805de0c76f8f188e2c823b28b7 The package esg-odf-common was found to contain malicious code. Source: ghsa-malware 610621a777be160598ba0a95213ed5f2e5645ce0806077fb9f2d1ef65fcdddfb...

EUVD-2025-36886

Malicious code in esg-odf-common npm...

Malicious code in esg-odf-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55bab458b0a0de6c4110ff28d0306c52de1e31805de0c76f8f188e2c823b28b7 The package esg-odf-common was found to contain malicious code. Source: ghsa-malware 610621a777be160598ba0a95213ed5f2e5645ce0806077fb9f2d1ef65fcdddfb...

DEBIAN-CVE-2025-58187

Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate. This affects programs which validate arbitrary certificate chains...

Malicious Package

Overview ucbuzz-web-common is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2025-49062 Malicious code in ucbuzz-web-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 822537afdb770182527cdfc92395d4fcc57ab88a98e6958ba68f93eb84f119ef The package ucbuzz-web-common was found to contain malicious code. Source: ghsa-malware...

Malicious code in ucbuzz-web-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 822537afdb770182527cdfc92395d4fcc57ab88a98e6958ba68f93eb84f119ef The package ucbuzz-web-common was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-36845

Malicious code in ucbuzz-web-common npm...

Experts Reports Sharp Increase in Automated Botnet Attacks Targeting PHP Servers and IoT Devices

Cybersecurity researchers are calling attention to a spike in automated attacks targeting PHP servers, IoT devices, and cloud gateways by various botnets such as Mirai, Gafgyt, and Mozi. "These automated campaigns exploit known CVE vulnerabilities and cloud misconfigurations to gain control over...

BELL-CVE-2025-40052

Bulletin has no description...

CVE-2025-62798

creationtimestamp| type| source ---|---|--- 2025-10-29 00:08:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4c5rqoabv2b...

CVE-2025-11705

creationtimestamp| type| source ---|---|--- 2025-10-28 17:02:54+00:00| seen| https://gist.github.com/Darkcrai86/4259b3a6416596ae48eb004f07020102 2025-10-29 05:45:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4cqmsbnhr2n 2025-10-30 06:18:05+00:00| seen|...

EUVD-2025-36515

IPFire versions prior to 2.29 Core Update 198 contain a stored cross-site scripting XSS vulnerability that allows an authenticated attacker to inject arbitrary JavaScript code through the TLSHOSTNAME parameter when adding a new DNS entry. When a user adds a DNS entry, the application issues an HT...

Around 70 countries sign new UN Cybercrime Convention—but not everyone’s on board

Around 70 countries have signed the new United Nations UN Convention against Cybercrime—the first global treaty designed to combat cybercrime through unified international rules and cooperation. The treaty needs at least 40 UN member states to ratify it before it becomes international law. Once t...

DEBIAN-CVE-2025-40064

In the Linux kernel, the following vulnerability has been resolved: smc: Fix use-after-free in pnetfindbasendev. syzbot reported use-after-free of netdevice in pnetfindbasendev, which was called during connect. 0 smcpnetfindismresource fetches skdstgetsk-dev and passes down to pnetfindbasendev,...

PT-2025-48275

Name of the Vulnerable Software and Affected Versions Mattermost versions 10.5.x through 10.5.12 Mattermost versions 10.11.x through 10.11.4 Mattermost versions 10.12.x through 10.12.1 Mattermost versions 11.0.x through 11.0.2 Description The software does not properly restrict access to team ema...