Apple Safari IPC Connection Invalidation Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple Safari. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling ...

Malicious code in tml-navigation (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-47434 Malicious code in eslint-plugin-whatever (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in lynx-explorer (npm)

The package communicates with a domain associated with malicious activity...

DragonFly's tiny file download uses hard coded HTTP protocol

The code in the scheduler for downloading a tiny file is hard coded to use the HTTP protocol, rather than HTTPS. This means that an attacker could perform a Man-in-the-Middle attack, changing the network request so that a different piece of data gets downloaded. Due to the use of weak integrity...

chromium -- multiple security fixes

Chrome Releases reports: This update includes 4 security fixes: 445380761 High CVE-2025-10585: Type Confusion in V8. Reported by Google Threat Analysis Group on 2025-09-16 435875050 High CVE-2025-10500: Use after free in Dawn. Reported by Giunash Gyujeong Jin on 2025-08-03 440737137 High...

Malicious code in kreme-circuits (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 115a80b8aadb1029e4fdf7ec27a30991a73af718770b70a89211f740bbad9c40 Any computer that has this package installed or running should be considered...

Malicious code in igame (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 92630c29a80ab3e4195e1528efb3bd2de3c21723225eeec79687f40648f15b42 Any computer that has this package installed or running should be considered...

MAL-2025-47401 Malicious code in igame (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 92630c29a80ab3e4195e1528efb3bd2de3c21723225eeec79687f40648f15b42 Any computer that has this package installed or running should be considered...

Malicious code in oss-fuzz (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ea9bd1245381fc2e4b2f1e2d2ce20ef200636db74be623613eb4498ab3ea0ad Any computer that has this package installed or running should be considered...

Malicious code in moduletestsimpletest5 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

Malicious code in @gc-crm/gc-crm-lib (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf39ace819686baffe9455922e74af791567817ba9cce482693ba58166e35ed8 Any computer that has this package installed or running should be considered...

MAL-2025-47411 Malicious code in stolbovsaseeminglyinnocentpackage5 (npm)

The package communicates with a domain associated with malicious activity...

CVE-2025-55112

Out-of-support Control-M/Agent versions 9.0.18 to 9.0.20 and potentially earlier unsupported versions that are configured to use the non-default Blowfish cryptography algorithm use a hardcoded key. An attacker with access to network traffic and to this key could decrypt network traffic between th...

CVE-2023-53298

In the Linux kernel, the following vulnerability has been resolved: nfc: fix memory leak of seio context in nfcgenlseio The callback context for sending/receiving APDUs to/from the selected secure element is allocated inside nfcgenlseio and supposed to be eventually freed in seiocb callback...

UBUNTU-CVE-2023-53298

In the Linux kernel, the following vulnerability has been resolved: nfc: fix memory leak of seio context in nfcgenlseio The callback context for sending/receiving APDUs to/from the selected secure element is allocated inside nfcgenlseio and supposed to be eventually freed in seiocb callback...

CVE-2023-53298

CVE-2023-53298 – Linux kernel : The issue is a memory leak in the NFC subsystem. The se_io callback context allocated inside nfc_genl_se_io is not always freed on several error paths, risking a leak. The patch adds explicit cb_context freeing on those error paths. No exploit details are provided ...

CVE-2023-53298 nfc: fix memory leak of se_io context in nfc_genl_se_io

In the Linux kernel, the following vulnerability has been resolved: nfc: fix memory leak of seio context in nfcgenlseio The callback context for sending/receiving APDUs to/from the selected secure element is allocated inside nfcgenlseio and supposed to be eventually freed in seiocb callback...

CVE-2023-53298

In the Linux kernel, the following vulnerability has been resolved: nfc: fix memory leak of seio context in nfcgenlseio The callback context for sending/receiving APDUs to/from the selected secure element is allocated inside nfcgenlseio and supposed to be eventually freed in seiocb callback...

Malicious code in cucumber-js-browserstack (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c2f1891754984c705408dd02f9fb37660e1d4d84780ad4be25a83910d1eb789d Any computer that has this package installed or running should be considered...