Malicious code in @strapbuild/react-native-date-time-picker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5a0237f0f0916f69a132f28afefe58f6c681c43c8dd6d3ca62ae2a3c2d6af45 The package @strapbuild/react-native-date-time-picker was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-198852

Malicious code in @strapbuild/react-native-date-time-picker npm...

CVE-2025-12628

creationtimestamp| type| source ---|---|--- 2025-11-24 13:23:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6ewdhi3iw2b 2025-11-24 15:16:16+00:00| seen| https://gist.github.com/Darkcrai86/0942399b2da463ce374c007e9bc388bc...

CVE-2025-13579

creationtimestamp| type| source ---|---|--- 2025-11-24 05:53:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6e56sgouy2b...

CVE-2025-13577

creationtimestamp| type| source ---|---|--- 2025-11-24 05:24:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6e3k7m3ew26...

CVE-2025-12800

creationtimestamp| type| source ---|---|--- 2025-11-24 01:50:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6dplwp7g72n...

CVE-2025-13549

creationtimestamp| type| source ---|---|--- 2025-11-23 15:29:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6cmvt3nze2s...

CVE-2013-3783

creationtimestamp| type| source ---|---|--- 2025-11-23 14:43:53+00:00| seen| https://gist.github.com/Aggerio/10aad290a474eb5bc314c9ace3da24e8...

CVE-2025-64087

creationtimestamp| type| source ---|---|--- 2025-11-23 03:09:35+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/60527 2025-11-23 09:00:06+00:00| published-proof-of-concept| Telegram/XiVibqPdaU-xKxdI2FLNgF4JRC02jDbQsHz1BAzuEAs 2025-11-24 15:00:07+00:00| published-proof-of-concept|...

CVE-2025-65947

creationtimestamp| type| source ---|---|--- 2025-11-22 03:13:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m66td3vyzv2s 2025-11-22 07:33:41+00:00| seen| https://infosec.exchange/users/offseq/statuses/115592188412650049 2025-11-22 07:33:43+00:00| seen|...

PT-2025-51144

Name of the Vulnerable Software and Affected Versions Exim versions prior to 4.99.1 Description Exim software contains a flaw that allows for remote heap corruption. Further details about this issue will be disclosed on 2025-12-18. Recommendations Update to version 4.99.1 or later...

RockyLinux 10 : libsoup3 (RLSA-2025:21032)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:21032 advisory. libsoup: Integer Overflow in Cookie Expiration Date Handling in libsoup CVE-2025-4945 libsoup: Out-of-Bounds Read in Cookie Date Handling of libsoup HT...

RockyLinux 9 : libsoup (RLSA-2025:20959)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:20959 advisory. libsoup: Integer Overflow in Cookie Expiration Date Handling in libsoup CVE-2025-4945 libsoup: Out-of-Bounds Read in Cookie Date Handling of libsoup HTT...

CVE-2025-11931

Integer Underflow Leads to Out-of-Bounds Access in XChaCha20-Poly1305 Decrypt. This issue is hit specifically with a call to the function wcXChaCha20Poly1305Decrypt which is not used with TLS connections, only from direct calls from an application...

CVE-2025-11934

Improper input validation in the TLS 1.3 CertificateVerify signature algorithm negotiation in wolfSSL 5.8.2 and earlier on multiple platforms allows for downgrading the signature algorithm used. For example when a client sends ECDSA P521 as the supported signature algorithm the server previously...

GHSA-6XVF-4VH9-MW47

creationtimestamp| type| source ---|---|--- 2025-11-21 22:23:21+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115590024467115020...

CVE-2025-48502

creationtimestamp| type| source ---|---|--- 2025-11-21 19:57:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m662x2qzgo2s...

CVE-2025-12747

creationtimestamp| type| source ---|---|--- 2025-11-21 19:20:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m65yuvygqu2b...

libsoup3 security update

An update is available for libsoup3. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Libsoup is an HTTP library implementation in C. It was originally part of a...

RLSA-2025:20959 Important: libsoup security update

The libsoup packages provide an HTTP client and server library for GNOME. Security Fixes: libsoup: Integer Overflow in Cookie Expiration Date Handling in libsoup CVE-2025-4945 libsoup: Out-of-Bounds Read in Cookie Date Handling of libsoup HTTP Library CVE-2025-11021 For more details about the...