CVE-2025-58437: Insufficient Session Expiration

Coder allows organizations to provision remote development environments via Terraform. In versions 2.22.0 through 2.24.3, 2.25.0 and 2.25.1, Coder can be compromised through insecure session handling in prebuilt workspaces. Coder automatically generates a session token for a user when a workspace...

Malicious code in astrobiology-spawn-development-typeorm (npm)

The package astrobiology-spawn-development-typeorm was found to contain malicious code...

Malicious code in dione-ultra-nestjs-development (npm)

The package dione-ultra-nestjs-development was found to contain malicious code...

Malicious code in apollo-development-eridanus-babel (npm)

The package apollo-development-eridanus-babel was found to contain malicious code...

MAL-2025-43530 Malicious code in astrobiology-spawn-development-typeorm (npm)

The package astrobiology-spawn-development-typeorm was found to contain malicious code...

Malicious code in development-else-especially (npm)

The package development-else-especially was found to contain malicious code...

MAL-2025-44025 Malicious code in dione-ultra-nestjs-development (npm)

The package dione-ultra-nestjs-development was found to contain malicious code...

MAL-2025-45277 Malicious code in nashira-warp-electron-development (npm)

The package nashira-warp-electron-development was found to contain malicious code...

MAL-2025-43980 Malicious code in development-else-especially (npm)

The package development-else-especially was found to contain malicious code...

MAL-2025-46548 Malicious code in vortex-equinox-development-ultra (npm)

The package vortex-equinox-development-ultra was found to contain malicious code...

MAL-2025-46559 Malicious code in wasat-frontend-browserify-development (npm)

The package wasat-frontend-browserify-development was found to contain malicious code...

Malicious code in windows-sdks (npm)

The package windows-sdks was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

IBM MQ 9.1 < 9.1.0.31 LTS / 9.2 < 9.2.0.37 LTS / 9.3 < 9.3.0.31 LTS / 9.3 < 9.4.3.1 CD / 9.4 < 9.4.0.15 LTS / 9.4.3.1 (7243799)

The version of IBM MQ Server running on the remote host is affected by multiple vulnerabilities as referenced in the 7243799 advisory. - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: 2D. Supported versions that...

DEBIAN-CVE-2025-23259

NVIDIA Mellanox DPDK contains a vulnerability in Poll Mode Driver PMD, where an attacker on a VM in the system might be able to cause information disclosure and denial of service on the network interface...

CVE-2025-23259

NVIDIA Mellanox DPDK contains a vulnerability in Poll Mode Driver PMD, where an attacker on a VM in the system might be able to cause information disclosure and denial of service on the network interface...

A vulnerability was found in DPDK versions 18.11 and above

...

An unlimited recursion in DxeCore in EDK II.

...

NVIDIA Mellanox DPDK 竞争条件问题漏洞

NVIDIA Mellanox DPDK is a data plane development kit from NVIDIA. NVIDIA Mellanox DPDK suffers from a Competitive Condition Issue vulnerability that stems from the Poll Mode Driver could lead to information disclosure and denial of service attacks...

PT-2025-35819

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. affected versions not specified Description The vulnerability is a BYOVD Bring Your Own Vulnerable Driver case involving a kernel driver with unrestricted process termination capabilities. This allows...

Sunnet eHRD CTMS 跨站脚本漏洞

Sunnet eHRD CTMS is a Human Resource Development and Clinical Training Management System from Sunnet China Sunnet. A cross-site scripting vulnerability exists in Sunnet eHRD CTMS that stems from a reflective cross-site scripting issue that could lead to arbitrary JavaScript code execution...