222 matches found
UBUNTU-CVE-2023-54148
In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Move representor neigh cleanup to profile cleanuptx For IP tunnel encapsulation in ECMP Equal-Cost Multipath mode, as the flow is duplicated to the peer eswitch, the related neighbour information on the peer uplink...
CVE-2023-54148 net/mlx5e: Move representor neigh cleanup to profile cleanup_tx
In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Move representor neigh cleanup to profile cleanuptx For IP tunnel encapsulation in ECMP Equal-Cost Multipath mode, as the flow is duplicated to the peer eswitch, the related neighbour information on the peer uplink...
CVE-2023-54148
Technical details for CVE-2023-54148 are not publicly provided in the supplied documents. No vendor/product/impact specifics are present here; monitor for official advisories or updates.
PT-2025-53225
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the net/mlx5e module related to the handling of neighbor information during ECMP Equal-Cost Multipath mode with IP tunnel encapsulation. Specifically,...
Session Fixation
Overview better-auth is a The most comprehensive authentication library for TypeScript. Affected versions of this package are vulnerable to Session Fixation via the constantTimeEqual function in the crypto/buffer.ts file. An attacker can cause arbitrary user sessions to be revoked by forging...
The vulnerability of the Equal() function in the crypto-x509 component of the Go programming language allows a perpetrator to trigger a service failure.
The vulnerability of the Equal function in the crypto-x509 component of the Go programming language is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures...
SoK: Security Evaluation of Wi-Fi CSI Biometrics: Attacks, Metrics, and Systemic Weaknesses
Wi-Fi Channel State Information CSI has been repeatedly proposed as a biometric modality, often with reports of high accuracy and operational feasibility. However, the field lacks a consolidated understanding of its security properties, adversarial resilience, and methodological consistency. This...
Malicious code in equal-scarlet-owl (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 865337e196bb57a9e9e0c1ee0c5f582418cbb2f57153141c708f9c6bb874d09b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-138691 Malicious code in equal-scarlet-owl (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 865337e196bb57a9e9e0c1ee0c5f582418cbb2f57153141c708f9c6bb874d09b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-117411
Malicious code in equal-scarlet-owl npm...
EUVD-2025-76957
Malicious code in equalbasilisk-appteadev npm...
MAL-2025-102157 Malicious code in equal_rooster_replicate_automation (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4416dc5e84e7dbba038eaee1e677fb56f1392afffb9c21b2cc20141f148edc47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-102151 Malicious code in equal_basilisk-appteadev (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a3e5b8565051f0f29c2989ce17640e6a440e458ab83dd46c303151cb48e5a39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in equal_termite_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2412cbf4ec138b0ead92eb6dc4c5abdd3fe288d722d307c3eee10d6b6ba73165 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-82035
Malicious code in equalalligator0xrequest npm...
EUVD-2025-82034
Malicious code in equalcoral0xrequest npm...
Malicious code in equal_alligator_0xrequest (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a5ac5fe262ed49cfedb1136c604a38ea999e6f3431ed6e156b119df6b1560aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-70636
Malicious code in equalbisonz3n npm...
MAL-2025-94279 Malicious code in equal_bear_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 154692049c60ba5744b6fbf4b8be25d9faad8b8c12e61941a86841d0f08e8a39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...