Malware in moodle-core-notification-dialogue

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-42145 Malicious code in logging-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0433a58c0d2019ba753b2ac69bc12319ce704bc3fcf7ff537ccea2164e1e8f31 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rtk-wake (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6fc493187ac88a35f426edb64ab97f58fcd188ce208058c832d5bd05143ec899 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

scsi: ufs: qcom: Only free platform MSIs when ESI is enabled

...

SQL Injection Vulnerability in Computer Sales and Inventory System (CNVD-2026-38243)

Computer Sales and Inventory System is an open-source inventory system for computer sales developed by CampCodes Corporation. The Computer Sales and Inventory System has a SQL injection vulnerability, which stems from the lack of validation for external SQL statements in the parameters cash and...

Malicious code in library-website (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 152fbdb0c3259bb6ed24b96039f38d3db3bc716822511da408febc45fc2e93a6 Any computer that has this package installed or running should be considered...

1965 Cryptanalysis Training Workbook Released by the NSA

In the early 1960s, National Security Agency cryptanalyst and cryptanalysis instructor Lambros D. Callimahos coined the term "Stethoscope" to describe a diagnostic computer program used to unravel the internal structure of pre-computer ciphertexts. The term appears in the newly declassified...

CVE-2025-9794: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in Campcodes Computer Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/postransac.php?action=add. Executing manipulation of the argument cash/firstname can lead to sql injection. The attack may be performed from remote. The explo...

[SECURITY] Fedora 42 Update: rocm-rpp-6.3.1-3.fc42

AMD ROCm Performance Primitives RPP library is a comprehensive, high-performance computer vision library for AMD processors that have HIP, OpenCL, or CPU backends...

The vulnerability of the “Load Configuration from Local PC” component of the web interface of the microprogramming software for routing and switching platforms RUGGEDCOM RST2428P, SCALANCE XC-300 Series, SCALANCE XC-400 Series, SCALANCE XCM-/XRM-/XCH-/XRH-300 Series, SCALANCE XM-400/XR-500 Series, SCALANCE XR-300 (6GK5334-xTSxx) Series, allows a attacker to compromise the integrity of protected information.

The vulnerability of the “Load Configuration from Local PC” web interface component of the microprogramming software platform for routing and switching devices, RUGGEDCOM RST2428P, SCALANCE XC-300 Series, SCALANCE XC-400 Series, SCALANCE XCM-/XRM-/XCH-/XRH-300 Series, SCALANCE XM-400/XR-500 Serie...

LLMs in the SOC: an Empirical Study of Human-AI Collaboration in Security Operations Centres

The integration of Large Language Models LLMs into Security Operations Centres SOCs presents a transformative, yet still evolving, opportunity to reduce analyst workload through human-AI collaboration. However, their real-world application in SOCs remains underexplored. To address this gap, we...

CVE-2025-53795

Improper authorization in Microsoft PC Manager allows an unauthorized attacker to elevate privileges over a network...

CVE-2025-53795 Microsoft PC Manager Elevation of Privilege Vulnerability

...

USN-7701-3 linux-iot vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Device tree and open firmware driver; - SCSI subsystem; - TTY drivers; - SMB network file system; - Bluetooth...

USN-7701-2: Linux kernel (FIPS) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Device tree and open firmware driver; - SCSI subsystem; - TTY drivers; - SMB network file system; - Bluetooth...

CVE-2025-8098

CVE-2025-8098 pertains to Lenovo PC Manager and is documented as an improper permission vulnerability that could enable local privilege escalation. Public details in connected sources consistently cite a local attack vector with low complexity and require low privileges, resulting in high confide...

CVE-2025-8098

An improper permission vulnerability was reported in Lenovo PC Manager that could allow a local attacker to escalate privileges...

PT-2025-33694

Name of the Vulnerable Software and Affected Versions: Lenovo PC Manager affected versions not specified Description: An improper permission vulnerability exists in Lenovo PC Manager that could allow a local attacker to escalate privileges. Recommendations: At the moment, there is no information...

The vulnerability of the Computer Vision component of Qualcomm’s embedded software allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Computer Vision component of Qualcomm’s embedded software systems lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow attackers to compromise the confidentiality, integrity, and accessibility of the protect...

Linux Distros Unpatched Vulnerability : CVE-2018-7713

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The validateInputImageSize function in modules/imgcodecs/src/loadsave.cpp in OpenCV 3.4.1 allows remote attackers to cause a denial of service assertion failure...