EulerOS 2.0 SP12 : iputils (EulerOS-SA-2025-2011)

According to the versions of the iputils package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : ping in iputils before 20250602 allows a denial of service application error in adaptive ping mode or incorrect data collection via a crafted ICMP...

MAL-2025-44828 Malicious code in juliet-echo-nectarine-irosa (npm)

The package juliet-echo-nectarine-irosa was found to contain malicious code...

MAL-2025-44457 Malicious code in grape-echo-tangerine-xtwns (npm)

The package grape-echo-tangerine-xtwns was found to contain malicious code...

MAL-2025-44086 Malicious code in echo-golf-papa-qmmfl (npm)

The package echo-golf-papa-qmmfl was found to contain malicious code...

Malicious code in echo-golf-papa-qmmfl (npm)

The package echo-golf-papa-qmmfl was found to contain malicious code...

Malicious code in echo-kilo-elderberry-dwkcs (npm)

The package echo-kilo-elderberry-dwkcs was found to contain malicious code...

Malicious code in echo-watermelon-mango-nkzyn (npm)

The package echo-watermelon-mango-nkzyn was found to contain malicious code...

Malicious code in echo-whiskey-cherry-cmnzr (npm)

The package echo-whiskey-cherry-cmnzr was found to contain malicious code...

Malicious code in grape-echo-tangerine-xtwns (npm)

The package grape-echo-tangerine-xtwns was found to contain malicious code...

Malicious code in juliet-echo-nectarine-irosa (npm)

The package juliet-echo-nectarine-irosa was found to contain malicious code...

MAL-2025-44611 Malicious code in honeydew-echo-raspberry-liuag (npm)

The package honeydew-echo-raspberry-liuag was found to contain malicious code...

MAL-2025-44087 Malicious code in echo-kilo-elderberry-dwkcs (npm)

The package echo-kilo-elderberry-dwkcs was found to contain malicious code...

MAL-2025-44088 Malicious code in echo-watermelon-mango-nkzyn (npm)

The package echo-watermelon-mango-nkzyn was found to contain malicious code...

MAL-2025-44089 Malicious code in echo-whiskey-cherry-cmnzr (npm)

The package echo-whiskey-cherry-cmnzr was found to contain malicious code...

OESA-2025-2159 iputils security update

The iputils package contains basic utilities for monitoring a network, including ping. The ping command sends a series of ICMP protocol ECHOREQUEST packets to a specified network host to discover whether the target machine is alive and receiving network traffic. Security Fixes: ping in iputils...

OESA-2025-2157 iputils security update

The iputils package contains basic utilities for monitoring a network, including ping. The ping command sends a series of ICMP protocol ECHOREQUEST packets to a specified network host to discover whether the target machine is alive and receiving network traffic. Security Fixes: ping in iputils...

OESA-2025-2158 iputils security update

The iputils package contains basic utilities for monitoring a network, including ping. The ping command sends a series of ICMP protocol ECHOREQUEST packets to a specified network host to discover whether the target machine is alive and receiving network traffic. Security Fixes: ping in iputils...

OESA-2025-2156 iputils security update

The iputils package contains basic utilities for monitoring a network, including ping. The ping command sends a series of ICMP protocol ECHOREQUEST packets to a specified network host to discover whether the target machine is alive and receiving network traffic. Security Fixes: ping in iputils...

WordPress Echo theme <= 1.15.0 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Echo versions = 1.15.0...

ping in iputils before 20250602 allows a denial of service (application error in adaptive ping mode or incorrect data collection) via a crafted ICMP Echo Reply packet, because a zero timestamp can lead to large intermediate values that have an integer overflow when squared during statistics calculations. NOTE: this issue exists because of an incomplete fix for CVE-2025-47268 (that fix was only about timestamp calculations, and it did not account for a specific scenario where the original timestamp in the ICMP payload is zero).

...