EUVD-2025-54727

Malicious code in early-salmon-whale npm...

EUVD-2025-54728

Malicious code in early-orange-mule npm...

EUVD-2025-54729

Malicious code in early-chocolate-whale npm...

EUVD-2025-50335

Malicious code in earlymolluskz3n npm...

EUVD-2025-50336

Malicious code in earlybeaverz3n npm...

Malicious code in early_mollusk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f682f24ecefe1552aefb17fb8ccafdf1bc2ca16fc56e35a5e318551d40399398 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989537)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989537 advisory. In the Linux kernel, the following vulnerability has been resolved: efi: Do not import certificates from UEFI Secure Boot for T2 Macs On Apple T2 Macs, when Linux...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989598)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989598 advisory. In the Linux kernel, the following vulnerability has been resolved: tracing: Make sure traceprintk can output as soon as it can be used Currently traceprintk can be...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990380)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990380 advisory. In the Linux kernel, the following vulnerability has been resolved: tracing: Make sure traceprintk can output as soon as it can be used Currently traceprintk can be...

Temporal Analysis Framework for Intrusion Detection Systems: A Novel Taxonomy for Time-Aware Cybersecurity

Most intrusion detection systems still identify attacks only after significant damage has occurred, detecting late-stage tactics rather than early indicators of compromise. This paper introduces a temporal analysis framework and taxonomy for time-aware network intrusion detection. Through a...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989163)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989163 advisory. In the Linux kernel, the following vulnerability has been resolved: IB/hfi1: Fix AIP early init panic An early failure in hfi1ipoibsetuprn can lead to the following...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989386)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989386 advisory. In the Linux kernel, the following vulnerability has been resolved: tcp: Fix a data-race around sysctltcpearlyretrans. While reading sysctltcpearlyretrans, it can be...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990303)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990303 advisory. In the Linux kernel, the following vulnerability has been resolved: udp: Set SOCKRCUFREE earlier in udplibgetport. syzkaller triggered the warning 0 in...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989003)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989003 advisory. In the Linux kernel, the following vulnerability has been resolved: powerpc/kasan: Fix early region not updated correctly The shadow's page table is not updated when...

PT-2025-49095

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.18.0-rc2+ 38 Description The Linux kernel had a flaw related to vfat filesystem handling when emulating an nvme device on qemu with specific block size settings. Specifically, when both logical block size and...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: x86/cpu/hygon: Added resctrlcpudetect to the bspinit helper. Since 923f3a2b48bd “x86/resctrl: Query LLC monitoring properties once during boot”, resctrlcpudetect has been moved from the common CPU initialization code to the...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: ACPICA: fixed the ACPI operand cache leak in dswstate.c ACPICA commit: 987a3b5cf7175916e2a4b6ea5b8e70f830dfe732 I discovered a ACPI cache leak in cases where ACPI early termination occurs and the boot process continues. When earl...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: net/sched: Abort tcmodifyqdisc if parent class does not exist Lion’s patch 1 uncovered an ancient bug in the qdisc API. Whenever a user creates or modifies a qdisc with another qdisc as its parent, the qdisc API will detect that...

CVE-2025-40106

In CVE-2025-40106, the Linux kernel’s comedi_buf_munge() could divide by zero when chanlist_len is zero, since it performed async->munge_chan %= async->cmd.chanlist_len without a prior check. The fix adds an explicit zero-check at the start of comedi_buf_munge(), mirrors existing checks for...

Azure Access Technology BLU-IC2和Azure Access Technology BLU-IC4 安全漏洞

The Azure Access Technology BLU-IC2 and Azure Access Technology BLU-IC4 are both networked access controllers from Azure Access Technology, USA. A security vulnerability exists in Azure Access Technology BLU-IC2 and Azure Access Technology BLU-IC4 that stems from a lack of authentication. An...