UBUNTU-CVE-2025-0938

The Python standard library functions urllib.parse.urlsplit and urlparse accepted domain names that included square brackets which isn't valid according to RFC 3986. Square brackets are only meant to be used as delimiters for specifying IPv6 and IPvFuture hosts in URLs. This could result in...

Reddit: Exposed proxy allows to access internal reddit domains

An exposed proxy at 52.90.28.77:30920 was found to allow access to internal reddit domains, such as snoo.dev, which were used by Reddit employees...

MAL-2025-494 Malicious code in iberia-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bd156a21b883727d9e4bc5b820a01196330a53b28b1227abd237c16e5a8e90a5 The OpenSSF Package Analysis project identified 'iberia-service' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-479 Malicious code in google-connect (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b73909cac81405458f9e1a50331aa80aed75bf630379f2eebdb3d06801457d56 The OpenSSF Package Analysis project identified 'google-connect' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-464 Malicious code in godaddy-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a831fefea0c5771192bebaece0827298d91442a48534ade0725c8b7a30b08058 The OpenSSF Package Analysis project identified 'godaddy-event' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-451 Malicious code in epicagames-payment (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d53329bfb1e56501de94ad5d9e0627736fb16fd960066b61ed26df8e83ff5afc The OpenSSF Package Analysis project identified 'epicagames-payment' @ 999.9.9 npm as malicious. It is considered malicious because: - The packa...

Malicious code in bookingcom-api-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab2ea2b7b235a47a2460539376dab8e2ab9b4021eaec754934cc11c7e2636672 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-380 Malicious code in amazon-internal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 37b343f6247424c351b1652a4790cc2f86d3901894612c95b676ed5bf3f96300 The OpenSSF Package Analysis project identified 'amazon-internal' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-352 Malicious code in no-style-dependency (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e9044d80b8ff33b0d2a50511386c0fed003004f9452211938b949aca211b0866 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-326 Malicious code in bigcommerce.github.io (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f610f94d4adf4f1e09e9727a8c6960c6b9c0bef8733be71242a3bfdad135f55 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-22348

IBM DevOps Velocity 5.0.0 and IBM UrbanCode Velocity 4.0.0 through 4.0. 25 uses Cross-Origin Resource Sharing CORS which could allow an attacker to carry out privileged actions and retrieve sensitive information as the domain name is not being limited to only trusted domains...

MAL-2025-135 Malicious code in cumulus-dashboard (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0f1f8e685a786d680773dae17f3fdca813dc627d1a031200036521aef32b1566 The OpenSSF Package Analysis project identified 'cumulus-dashboard' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Scammers Exploit California Wildfires, Posing as Fire Relief Services

Cybercriminals are exploiting the California wildfires by launching phishing scams. Learn how hackers are targeting victims with fake domains and deceptive tactics, and how to protect yourself from these cyber threats...

Expired Domains Allowed Control Over 4,000 Backdoors on Compromised Systems

No less than 4,000 unique web backdoors previously deployed by various threat actors have been hijacked by taking control of abandoned and expired infrastructure for as little as $20 per domain. Cybersecurity company watchTowr Labs said it pulled off the operation by registering over 40 domain...

Thousands of Live Hacker Backdoors Found in Expired Domains

SUMMARY Cybersecurity researchers at watchTowr have identified over 4,000 live hacker backdoors, exploiting abandoned infrastructure and expired domains.…...

Medium: curl

Issue Overview: When curl is asked to use HSTS, the expiry time for a subdomain might overwrite a parent domain's cache entry, making it end sooner or later than otherwise intended. This affects curl using applications that enable HSTS and use URLs with the insecure HTTP:// scheme and perform...

Neglected Domains Used in Malspam to Evade SPF and DMARC Security Protections

Cybersecurity researchers have found that bad actors are continuing to have success by spoofing sender email addresses as part of various malspam campaigns. Faking the sender address of an email is widely seen as an attempt to make the digital missive more legitimate and get past security...

CVE-2024-56760

In the Linux kernel, the following vulnerability has been resolved: PCI/MSI: Handle lack of irqdomain gracefully Alexandre observed a warning emitted from pcimsisetupmsiirqs on a RISCV platform which does not provide PCI/MSI support: WARNING: CPU: 1 PID: 1 at drivers/pci/msi/msi.h:121...

CVE-2024-56580

In the Linux kernel, the following vulnerability has been resolved: media: qcom: camss: fix error path on configuration of power domains There is a chance to meet runtime issues during configuration of CAMSS power domains, because on the error path devpmdomaindetach is unexpectedly called with NU...

SUSE CVE-2024-56580

In the Linux kernel, the following vulnerability has been resolved: media: qcom: camss: fix error path on configuration of power domains There is a chance to meet runtime issues during configuration of CAMSS power domains, because on the error path devpmdomaindetach is unexpectedly called with NU...