Malicious code in doitoml (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c92ab9b950fef1f567faa52993a2c800c38e041919a32cd64538a9aef8ecb16 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1651 Malicious code in local_editor_top (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 76950599e5b37eafb90ddff61774b4fc890522176ea70d8e9b18b99b7545f9ec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in onyx-ssi-sdk-examples (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 46a5cdb0edf65e0650f15c2a00e379442b620823ea1ed315afb6946edc3a4268 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in esm-appdynamics-grafana-react-datasource (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 18f395665c4d165d336c17cf90f183b9da91013f0d72574f6b2875830ed057d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1566 Malicious code in eslint-plugin-externalincludes (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 09b1ebe297181abc6e2efc2e9452146ffd0b49dd6f09b94bb3ebb1481ff9b9a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tablegen (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3570d8e35e0d101811baef90ca7f5697fcb57be4cf3d82558480a54fb37d99d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in synapse-contracts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2f22e2f65543683192030203ce08eecf0c137c3bc94f711cf9dd5c143dd1bd19 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1564 Malicious code in synapse-contracts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2f22e2f65543683192030203ce08eecf0c137c3bc94f711cf9dd5c143dd1bd19 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Emily Heath’s 5 Key Questions CISOs Should Ask Before Board Meetings

Experts share a powerful framework and strategies for effective board meeting preparation and communication...

MAL-2025-1563 Malicious code in webbundle-plugins (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c94c458984a089f14be87d45c3ac4355e1ba06610c50abbcbb0f172160e5a38e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-22270

CVE-2025-22270 affects CyberArk Endpoint Privilege Manager (EPM) SaaS 24.7.1. An attacker with admin access to the Role Management UI can inject code by adding a new role in the name field. The risk is mitigated by an additional error that bypasses CSP, which prevents JavaScript execution but all...

SUSE CVE-2025-21735

In the Linux kernel, the following vulnerability has been resolved: NFC: nci: Add bounds checking in ncihcicreatepipe The "pipe" variable is a u8 which comes from the network. If it's more than 127, then it results in memory corruption in the caller, ncihciconnectgate...

How to Use Slack for Business: Workplace Communication

Do you want to have the best communication system at your workplace? Learn how to maximize the benefits…...

Malicious code in fluentui-repo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a946d5d0851f29bedadf8857d3b954ecf93da7aaa8b01cc198063141c739169d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

UBUNTU-CVE-2025-21735

In the Linux kernel, the following vulnerability has been resolved: NFC: nci: Add bounds checking in ncihcicreatepipe The "pipe" variable is a u8 which comes from the network. If it's more than 127, then it results in memory corruption in the caller, ncihciconnectgate...

SUSE CVE-2022-49059

In the Linux kernel, the following vulnerability has been resolved: nfc: nci: add flushworkqueue to prevent uaf Our detector found a concurrent use-after-free bug when detaching an NCI device. The main reason for this bug is the unexpected scheduling between the used delayed mechanism timer and...

SUSE CVE-2022-49331

In the Linux kernel, the following vulnerability has been resolved: nfc: st21nfca: fix memory leaks in EVTTRANSACTION handling Error paths do not free previously allocated memory. Add devmkfree to those failure paths...

CVE-2025-25728

CVE-2025-25728 involves Bosscomm IF740 firmware (versions 11001.7078 and v11001.0000) and System versions 6.25 and 6.00 where the device’s update API traffic is sent in plaintext, enabling MITM access to sensitive information. Related Red Hat advisories describe additional issues in the same prod...

CVE-2025-25728

Bosscomm IF740 Firmware versions:11001.7078 & v11001.0000 and System versions: 6.25 & 6.00 were discovered to send communications to the update API in plaintext, allowing attackers to access sensitive information via a man-in-the-middle attack...

DEBIAN-CVE-2022-49505

In the Linux kernel, the following vulnerability has been resolved: NFC: NULL out the dev-rfkill to prevent UAF Commit 3e3b5dfcd16a "NFC: reorder the logic in nfcun,registerdevice" assumes the deviceisregistered in function nfcdevup will help to check when the rfkill is unregistered. However, thi...