Malicious code in @ctrl/deluge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d92c8c0ce4fcd72693ec79d2f5d112099c3e5d23e214a06327498cfa5b655fc4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @ctrl/react-adsense (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc78e701d6941c16bc77a99580c74125deb3045bfb62ccee9917be54177617e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47141 Malicious code in @ctrl/tinycolor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 21271c2ac161a78b2e79e14edbfba306dd2aa53c17aae63f3b009ba9288e1ddb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Embedded Malicious Code

Overview @ctrl/ngx-csv is a package to easily generate a CSV download in the browser with Angular Affected versions of this package are vulnerable to Embedded Malicious Code. Compromised versions of this package contain a file called bundle.js that exfiltrates secrets from the user's accounts,...

Embedded Malicious Code

Overview @ctrl/ngx-codemirror is a Codemirror Wrapper for Angular Affected versions of this package are vulnerable to Embedded Malicious Code. Compromised versions of this package contain a file called bundle.js that exfiltrates secrets from the user's accounts, including credentials and API...

Embedded Malicious Code

Overview @ctrl/magnet-link is a package that parses a magnet URI into an object Affected versions of this package are vulnerable to Embedded Malicious Code. Compromised versions of this package contain a file called bundle.js that exfiltrates secrets from the user's accounts, including credential...

CVE-2025-38705

In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: fix null pointer access Writing a string without delimiters ' ', '\n', '\0' to the under gpuod/fanctrl sysfs or pppowerprofilemode for the CUSTOM profile will result in a null pointer dereference...

MAL-2025-30980 Malicious code in q-ctrl (npm)

The package q-ctrl was found to contain malicious code...

MAL-2025-25698 Malicious code in luster-ctrl (npm)

The package luster-ctrl was found to contain malicious code...

Malicious code in q-ctrl (npm)

The package q-ctrl was found to contain malicious code...

Malicious code in luster-ctrl (npm)

The package luster-ctrl was found to contain malicious code...

Malicious code in dd-transcode-ctrl (npm)

The package dd-transcode-ctrl was found to contain malicious code...

MAL-2025-18113 Malicious code in dd-transcode-ctrl (npm)

The package dd-transcode-ctrl was found to contain malicious code...

The vulnerability of the nvmet_alloc_ctrl() function in the drivers/nvme/target/core.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the nvmetallocctrl function in the drivers/nvme/target/core.c module of the Linux operating system is related to security configuration errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

WormGPT Makes a Comeback Using Jailbroken Grok and Mixtral Models

Cato CTRL uncovers new WormGPT variants on Telegram powered by jailbroken Grok and Mixtral. Learn how cybercriminals jailbreak top LLMs for uncensored, illegal activities in this latest threat research...

SUSE-SU-2025:20394-1 Security update for less

This update for less fixes the following issues: - Updated to version 668 Fixed crash when using --header on command line Fixed possible crash when scrolling left/right or toggling -S Fixed bug when using stop in a lesskey file Fixed bug when using --shift or --match-shift on command line with a...

CVE-2021-30464

OMICRON StationGuard before 1.10 allows remote attackers to cause a denial of service connectivity outage via crafted tcp/20499 packets to the CTRL Ethernet port...

SUSE CVE-2025-37966

In the Linux kernel, the following vulnerability has been resolved: riscv: Fix kernel crash due to PRSETTAGGEDADDRCTRL When userspace does PRSETTAGGEDADDRCTRL, but Supm extension is not available, the kernel crashes: Oops - illegal instruction 1 snip epc : settaggedaddrctrl+0x112/0x15a ra :...

PT-2025-22227 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A kernel crash issue has been identified in the Linux kernel. The crash occurs when userspace invokes PR SET TAGGED ADDR CTRL, but the Supm extension is not available. This results in ...

UBUNTU-CVE-2025-39778

In the Linux kernel, the following vulnerability has been resolved: objtool, nvmet: Fix out-of-bounds stack access in nvmetctrlstateshow The cstsstatenames array only has six sparse entries, but the iteration code in nvmetctrlstateshow iterates seven, resulting in a potential out-of-bounds stack...