Malicious code in coinbase-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f4e4f2061ccb606d0bc83d4dcdce6ed72c6c42f033fa0850cdc08d5e4cb50681 The OpenSSF Package Analysis project identified 'coinbase-test' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Oracle Critical Patch Update, January 2025 Security Update Review

Oracle released its first quarterly edition of this year’s Critical Patch Update, which received patches for 318 security vulnerabilities. Some of the vulnerabilities addressed in this update impact more than one product. These patches address vulnerabilities in various product families, includin...

MAL-2025-348 Malicious code in dell.github.io (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 615b5542a30acb872c70cdfcd28099420c22dd3edecf21285afee3a811f3e967 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Vulnerabilities fixed in Oracle Communications

Oracle has fixed several vulnerabilities in its Communications products, including Oracle Communications Unified Assurance, Oracle Communications Cloud Native Core Network Function and Oracle Communications Order and Service Management. The vulnerabilities allow unauthenticated malicious actors t...

MAL-2025-321 Malicious code in apple.github.io (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ee0a2d69b5b37d8393a5a3015d9baf3404208025ac3ce6e0d174b5b50053e34c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-21554

Vulnerability in the Oracle Communications Order and Service Management product of Oracle Communications Applications component: Security. Supported versions that are affected are 7.4.0, 7.4.1 and 7.5.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP...

CVE-2025-21554

Vulnerability in the Oracle Communications Order and Service Management product of Oracle Communications Applications component: Security. Supported versions that are affected are 7.4.0, 7.4.1 and 7.5.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP...

CVE-2025-21544

Vulnerability in the Oracle Communications Order and Service Management product of Oracle Communications Applications component: Security. Supported versions that are affected are 7.4.0, 7.4.1 and 7.5.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP ...

CVE-2025-21544

Vulnerability in the Oracle Communications Order and Service Management product of Oracle Communications Applications component: Security. Supported versions that are affected are 7.4.0, 7.4.1 and 7.5.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP ...

CVE-2025-21542

Vulnerability in the Oracle Communications Order and Service Management product of Oracle Communications Applications component: Security. Supported versions that are affected are 7.4.0, 7.4.1 and 7.5.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP ...

CVE-2025-21542

Vulnerability in the Oracle Communications Order and Service Management product of Oracle Communications Applications component: Security. Supported versions that are affected are 7.4.0, 7.4.1 and 7.5.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP ...

Oracle Communications Applications 安全漏洞

Oracle Communications Applications is an advanced communications and collaboration services application from Oracle Corporation USA. A security vulnerability exists in Oracle Communications Order and Service Management version 7.4.0, version 7.4.1, and version 7.5.0 of Oracle Communications...

PT-2025-4276 · Oracle · Oracle Communications Order/Service Management

Name of the Vulnerable Software and Affected Versions: Oracle Communications Order and Service Management versions 7.4.0 through 7.5.0 Description: The issue is related to insufficient authorization procedures in the Security component of Oracle Communications Order and Service Management. This c...

Oracle Communications Order and Service Management 安全漏洞

Oracle Communications Order and Service Management is an order management system from Oracle Corporation USA that is used to coordinate the order fulfillment functions required to complete orders. A security vulnerability exists in Oracle Communications Order and Service Management versions 7.4.0...

PT-2025-4266 · Oracle · Oracle Communications Order/Service Management

Name of the Vulnerable Software and Affected Versions: Oracle Communications Order and Service Management versions 7.4.0 through 7.5.0 Description: The issue is related to improper permission storage in the Oracle Communications Order and Service Management product, allowing a low-privileged...

PT-2025-4264 · Oracle · Oracle Communications Order/Service Management

Name of the Vulnerable Software and Affected Versions: Oracle Communications Order and Service Management versions 7.4.0 through 7.5.0 Description: The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Communications Order and Service Management. Successful...

Linphone Desktop 代码问题漏洞

Linphone Desktop is an open source software phone from Belledonne Communications for voice and video over IP calls and instant messaging. A code issue vulnerability exists in Linphone Desktop version 5.2.6, which stems from a null pointer reference vulnerability that could allow a remote attacker...

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes. The following security bugs were fixed: CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfcworkerwakeup bsc1225820. CVE-2024-27397: netfilter: nftables: use timestamp to check for set eleme...

CISA Releases Four Industrial Control Systems Advisories

CISA released four Industrial Control Systems ICS advisories on January 14, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-014-01 Hitachi Energy FOXMAN-UN ICSA-25-014-02 Schneider Electric Vijeo Designer...

PT-2025-3885 · Belledonne Communications · Linphone-Desktop

Name of the Vulnerable Software and Affected Versions: Belledonne Communications Linphone-Desktop affected versions not specified Description: The issue is a NULL Dereference vulnerability that could allow a remote attacker to create a denial-of-service condition. This vulnerability affects...