Malware in @js-to-lua/lua-conversion-utils

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in @js-to-lua/lua-conversion-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 91ebd24fd672684df83e5fcae05558a53e1c39f90617cac87401a555dda40811 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview @js-to-lua/lua-conversion-utils is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and th...

MAL-2025-47007 Malicious code in @js-to-lua/lua-conversion-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 91ebd24fd672684df83e5fcae05558a53e1c39f90617cac87401a555dda40811 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The vulnerability of the Defender Firewall Service for Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the Defender Firewall Service for Windows operating systems is related to data type conversion errors. Exploiting this vulnerability can allow attackers to increase their privileges...

The vulnerability of the Defender Firewall Service for Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the Defender Firewall Service for Windows operating systems is related to data type conversion errors. Exploiting this vulnerability can allow attackers to increase their privileges...

The vulnerability of the command-line PDF conversion tool QPDF, related to buffer overflow attacks, allows attackers to trigger a service denial-of-service attack.

The vulnerability of the command-line PDF conversion tool QPDF is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to cause a service failure...

Incorrect Conversion between Numeric Types

Overview Affected versions of this package are vulnerable to Incorrect Conversion between Numeric Types via the TTL function, which casts the 64-bit etcd lease ID to a uint32 and uses it as the TTL. An attacker can cause prolonged caching of DNS records and disrupt DNS resolution by supplying lar...

Linux Distros Unpatched Vulnerability : CVE-2025-38713

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hfsplus: fix slab-out-of-bounds read in hfsplusuni2asc The hfsplusreaddir method is capable to crash by calling hfsplusuni2asc: 667.121659 T9805...

HID: core: Harden s32ton() against conversion to 0 bits

...

HDF5 Type Conversion Logic H5T__bit_copy heap-based overflow

...

Incorrect code generation could have led to unexpected numeric conversions and potential undefined behavior.*Note:* This issue only affects 32-bit ARM devices. This vulnerability affects Firefox < 123, Firefox ESR < 115.8, and Thunderbird < 115.8.

...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from hfsplus not checking Unicode conversion boundaries...

VulnCheck KEV: CVE-2025-32970

XWiki is a generic wiki platform. In versions starting from 13.5-rc-1 to before 15.10.13, from 16.0.0-rc-1 to before 16.4.4, and from 16.5.0-rc-1 to before 16.8.0, an open redirect vulnerability in the HTML conversion request filter allows attackers to construct URLs on an XWiki instance that...

Linux Distros Unpatched Vulnerability : CVE-2018-20584

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - JasPer 2.0.14 allows remote attackers to cause a denial of service application hang via an attempted conversion to the jp2 format. CVE-2018-20584 Note that Ness...

K000154579: ImageMagick vulnerability CVE-2025-53015

Security Advisory Description ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to 7.1.2-0, infinite lines occur when writing during a specific XMP file conversion command. Version 7.1.2-0 fixes the issue. CVE-2025-53015 Impact There ...

Linux Distros Unpatched Vulnerability : CVE-2022-0529

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Unzip. The vulnerability occurs during the conversion of a wide string to a local string that leads to a heap of out-of-bound write. This fl...

Linux Distros Unpatched Vulnerability : CVE-2025-38580

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ext4: fix inode use after free in ext4endiorsvwork In ext4ioenddefercompletion, check if...

Linux Distros Unpatched Vulnerability : CVE-2022-0530

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Unzip. The vulnerability occurs during the conversion of a wide string to a local string that leads to a heap of out-of-bound write. This fl...

Linux Distros Unpatched Vulnerability : CVE-2025-55005

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-1, when preparing to transform from Log to...