kernel: smb/client: fix memory leak in smb2_open_file()

A memory leak flaw was found in the Linux kernel's CIFS/SMB client. In the smb2openfile function, request buffers are not properly freed when performing direct I/O writes to a read-only SMB share. This causes slab cache objects to remain allocated, which can prevent the cifs module from unloading...

EUVD-2025-77090

Malicious code in directdragon-appteadev npm...

EUVD-2025-77089

Malicious code in directlynx-notthedev npm...

EUVD-2025-79416

Malicious code in directclownfishz3n npm...

Malicious code in direct_clownfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77cfd1e71a8d20fd032e9ba6867adcd72048997339a5b51d769e92d0248cdcc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101585 Malicious code in direct_clownfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77cfd1e71a8d20fd032e9ba6867adcd72048997339a5b51d769e92d0248cdcc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-82205

Malicious code in directsole0xrequest npm...

EUVD-2025-82206

Malicious code in directmitedumbs npm...

EUVD-2025-60928

The The Total Book Project plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.0 via several functions due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with Contributor-level access a...

EUVD-2025-64519

Malicious code in directalpacaz3n npm...

EUVD-2025-64515

Malicious code in directparrotfishz3n npm...

EUVD-2025-64516

Malicious code in directmeadowlarkz3n npm...

CVE-2025-12126

CVE-2025-12126 affects The Total Book Project WordPress plugin (versions ≤ 1.0). Root cause: insecure direct object reference due to missing validation of a user-controlled key, enabling authenticated users with Contributor+ privileges to move/delete/create chapters in books not owned by them. Im...

CVE-2025-11532

CVE-2025-11532 affects the Wisly WordPress plugin (versions

CVE-2025-11532 Wisly <= 1.0.0 - Insecure Direct Object Reference to Unauthenticated Wishlist Manipulation

The Wisly plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.0.0 due to missing validation on the 'wishlistid' user controlled key. This makes it possible for unauthenticated attackers to remove and add items to other user's wishlists...

Malicious code in direct-rose-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e116832e7747d6637d84e2be364e075e4b9f25a332e8a84bae80c27642108c5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-54885

Malicious code in direct-aqua-beetle npm...

EUVD-2025-54882

Malicious code in direct-turquoise-felidae npm...

EUVD-2025-54883

Malicious code in direct-rose-wolf npm...

Malicious code in direct-rose-primate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41eabef9e4528b0703f8da8a80686dd829da3c1a345d6483a15f39c5264831d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...