MAL-2025-35658 Malicious code in test-mlw2-leads-songs (npm)

The package test-mlw2-leads-songs was found to contain malicious code...

Malicious code in new-al-bum-av-ailable-532141-nothing-special-3hobm-scpavd (npm)

The package new-al-bum-av-ailable-532141-nothing-special-3hobm-scpavd was found to contain malicious code...

Malicious code in cubyn-angular-core (npm)

The package cubyn-angular-core was found to contain malicious code...

Malicious code in octopus-sequoia-elc401-project (npm)

The package octopus-sequoia-elc401-project was found to contain malicious code...

MAL-2025-9717 Malicious code in @zalastax/nolb-_acq (npm)

The package @zalastax/nolb-acq was found to contain malicious code...

MAL-2025-36072 Malicious code in test-mlw2-quipu-monas (npm)

The package test-mlw2-quipu-monas was found to contain malicious code...

Vulnerability fixed in WinRAR

Rarlab has fixed a vulnerability in WinRAR. The vulnerability is in the Windows version of WinRAR and involves a path traversal. This flaw allows attackers to execute arbitrary code using malicious archive files. This can lead to unauthorized access and control of affected systems. Public sources...

Linux Distros Unpatched Vulnerability : CVE-2025-37764

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/imagination: fix firmware memory leaks Free the memory used to hold the results of...

CVE-2025-45764

CVE-2025-45764 relates to jsrsasign v11.1.0, where the vulnerability described is a weakness due to weak encryption/cryptographic primitives. Multiple sources (NVD, CVE lists, RH advisory, PT-Security entry) confirm the issue but do not provide a confirmed fix version. The Red Hat entry notes mit...

CVE-2025-52169

creationtimestamp| type| source ---|---|--- 2025-07-22 03:54:24+00:00| seen| MISP/a3c5beab-b790-4171-8b4c-02c8a9678071 2025-09-09 11:53:43+00:00| seen| MISP/a3c5beab-b790-4171-8b4c-02c8a9678071...

CVE-2025-49831

creationtimestamp| type| source ---|---|--- 2025-07-18 17:07:27+00:00| seen| https://bsky.app/profile/buherator.bsky.social/post/3luawokctxi23 2025-08-07 13:45:02+00:00| published-proof-of-concept| https://t.me/truesecator/7307 2025-09-09 20:56:47+00:00| seen|...

GHSA-V62J-CXHH-FQ22

creationtimestamp| type| source ---|---|--- 2025-07-16 20:10:13+00:00| seen| https://gist.github.com/safer-bot/e99c53adf7d0285b48dff97d88c6c48e...

GHSA-V2XM-76PQ-PHCF

creationtimestamp| type| source ---|---|--- 2025-07-16 06:27:33+00:00| seen| https://gist.github.com/safer-bot/dcba38acd7b3b589f657659fa2a6b641...

MAL-2025-5918 Malicious code in grabcad-ui-elements (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ee52ce65db4a7eae9515a5809a148be63f55d250702390c261cd05e173132799 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-38194

In the Linux kernel, the following vulnerability has been resolved: jffs2: check that raw node were preallocated before writing summary Syzkaller detected a kernel bug in jffs2linknoderef, caused by fault injection in jffs2preallocrawnoderefs. jffs2sumwritesumnode doesn't check return value of...

CVE-2025-48952

creationtimestamp| type| source ---|---|--- 2025-07-04 23:15:32+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114797506148304132 2025-07-07 19:39:48+00:00| published-proof-of-concept| https://t.me/TheDarkWebInformer/18826 2025-07-07 19:40:08+00:00| seen|...

CVE-2025-38194 jffs2: check that raw node were preallocated before writing summary

In the Linux kernel, the following vulnerability has been resolved: jffs2: check that raw node were preallocated before writing summary Syzkaller detected a kernel bug in jffs2linknoderef, caused by fault injection in jffs2preallocrawnoderefs. jffs2sumwritesumnode doesn't check return value of...

CVE-2025-38194

CVE-2025-38194 affects the Linux kernel’s JFFS2 file system. The issue arises when jffs2_sum_write_sumnode does not validate the return value of jffs2_prealloc_raw_node_refs, allowing an preallocation error to propagate into jffs2_link_node_ref and potentially cause a kernel BUG at fs/jffs2/nodel...

Ubuntu: Security Advisory (USN-7615-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Malicious code in com.razer.chromasdk (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b1ad926ddbb6413d05a3f45c0e214d6021452a02c31c62dc6b70cffd2c36c087 Any computer that has this package installed or running should be considered...