CVE-2025-49810 Thread summarization allows persistent access to channel

Mattermost versions 10.5.x = 10.5.8 fail to validate access controls at time of access which allows user to read a thread via AI posts...

SUSE CVE-2025-38552

In the Linux kernel, the following vulnerability has been resolved: mptcp: plug races between subflow fail and subflow creation We have races similar to the one addressed by the previous patch between subflow failing and additional subflow creation. They are just harder to trigger. The solution i...

CVE-2025-38552

In the Linux kernel, the following vulnerability has been resolved: mptcp: plug races between subflow fail and subflow creation We have races similar to the one addressed by the previous patch between subflow failing and additional subflow creation. They are just harder to trigger. The solution i...

Linux Distros Unpatched Vulnerability : CVE-2020-29482

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Xen through 4.14.x. A guest may access xenstore paths via absolute paths containing a full pathname, or via a relative path, which...

CVE-2025-38552

In the Linux kernel, the following vulnerability has been resolved: mptcp: plug races between subflow fail and subflow creation We have races similar to the one addressed by the previous patch between subflow failing and additional subflow creation. They are just harder to trigger. The solution i...

CVE-2025-38552 mptcp: plug races between subflow fail and subflow creation

In the Linux kernel, the following vulnerability has been resolved: mptcp: plug races between subflow fail and subflow creation We have races similar to the one addressed by the previous patch between subflow failing and additional subflow creation. They are just harder to trigger. The solution i...

CVE-2025-38552

In the Linux kernel, the following vulnerability has been resolved: mptcp: plug races between subflow fail and subflow creation We have races similar to the one addressed by the previous patch between subflow failing and additional subflow creation. They are just harder to trigger. The solution i...

CVE-2025-38552

The CVE-2025-38552 entry concerns a race in Multipath TCP (mptcp) within the Linux kernel, where subflow creation could race with subflow failure. The reported fix uses a separate flag, protected by the socket fallback lock, to track the condition that prevents any additional subflow creation, wi...

CVE-2025-38531

In the Linux kernel, the following vulnerability has been resolved: iio: common: stsensors: Fix use of uninitialize device structs Throughout the various probe functions &indiodev-dev is used before it is initialized. This caused a kernel panic in stsensorspowerenable when the call to...

Malicious code in no-deps-scripted-to-fail (npm)

The package no-deps-scripted-to-fail was found to contain malicious code...

MAL-2025-27585 Malicious code in no-deps-scripted-to-fail (npm)

The package no-deps-scripted-to-fail was found to contain malicious code...

A Comprehensive Analysis of HijackLoader and its Infection Chain

A Comprehensive Analysis of HijackLoader and Its Infection Chain By Ryan Weil · August 14, 2025 Initial contact Dodi Repacks is a website that distributes pirated games. The site is listed as safe/trusted on various piracy forums, and users say that "as long as you have an adblocker installed suc...

Linux Distros Unpatched Vulnerability : CVE-2025-22047

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: x86/microcode/AMD: Fix applymicrocodeamd's return value When verifysha256digest fails,...

Linux Distros Unpatched Vulnerability : CVE-2023-52708

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mmc: mmcspi: fix error handling in mmcspiprobe If mmcaddhost fails, it doesn't need to call mmcremovehost, or it will cause null-ptr-deref, because of deleting ...

Linux Distros Unpatched Vulnerability : CVE-2010-3192

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Certain run-time memory protection mechanisms in the GNU C Library aka glibc or libc6 print argv0 and backtrace information, which might allow context-dependent...

Malicious code in @sme-configs/karma-coverage (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 650b31b0f3209c6ac44a7187c6a39bf6f634660ded19dc4dffd69f7f906dc285 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in exceljs-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 542e79c60c18aa779332620c884952b318f885c798a0ac8c2d3bf87bfad26950 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in query-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed848ba7a41198ae72f2a0c36d31e627fe5ca7503bae293fe204e3a3dff65620 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in scheduler-experimental-builtin (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5c381d132dddf957ca46bcbb357f4d138089323733e00e65f2e13d7ac84fc23 Any computer that has this package installed or running should be considered...

Malicious code in @googlesitekit/assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 24f7823f5a513a40959c5bd9912593b27c89fb7f0d627ed9a66417d0f0707472 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...