kernel: net_sched: hfsc: Fix a UAF vulnerability in class handling

In the Linux kernel, the following vulnerability has been resolved: netsched: hfsc: Fix a UAF vulnerability in class handling This patch fixes a Use-After-Free vulnerability in the HFSC qdisc class handling. The issue occurs due to a time-of-check/time-of-use condition in hfscchangeclass when...

RHEL 7 : kernel (RHSA-2025:21063)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:21063 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: HID: core: fix...

EUVD-2025-92050

Malicious code in fairhummingbirdz3n npm...

kernel: sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue()

A flaw was found in the HFSC queueing discipline implementation in the Linux kernel. When a packet is enqueued and the child qdisc's peek function is called before properly updating the HFSC queue's length and backlog counters, a race condition can occur. In some cases, the peek operation may...

EUVD-2025-79264

Malicious code in fairwormz3n npm...

MAL-2025-102502 Malicious code in fair_worm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31fe0176745583688bb263a9d98c6c481209217cedb83610d0b0fa97572bffd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-81948

Malicious code in fairwoodpeckerreplicateautomation npm...

Malicious code in fair_crane_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16b9ac4c993b205e6d165d9a9114000c80c5ffc1aa19061153e0dbfaac415274 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-64138

Malicious code in faircranerequirement npm...

MAL-2025-94419 Malicious code in fair_tortoise_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 165d6a8900d44329e810d6fe2dcd6f4c68fc8d55e5e39b2d2b3d44c99f22ed1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94416 Malicious code in fair_crane_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16b9ac4c993b205e6d165d9a9114000c80c5ffc1aa19061153e0dbfaac415274 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fair-jade-baboon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb8b78eef4e6eb2a2d3c5f64d51c48d06a5ca6f37811bb2ace748bf39197d3dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fair-sapphire-squirrel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57079ddacf02318f21d0a06f5a5e5c81d32e6b51296a41e355c958e3f074a6c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-54432

Malicious code in fair-salmon-rattlesnake npm...

EUVD-2025-54431

Malicious code in fair-sapphire-squirrel npm...

EUVD-2025-54435

Malicious code in fair-aqua-dove npm...

EUVD-2025-54434

Malicious code in fair-jade-baboon npm...

Malicious code in fair-lavender-earwig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 732347c8b5bb00b2554a9358eb29eb3aee4643aef04d6b44cacd3064e68c6abc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-54433

Malicious code in fair-lavender-earwig npm...

FairSketch Rise Ultimate Project Manager and CRM 跨站脚本漏洞

FairSketch Rise Ultimate Project Manager and CRM is a team management and customer relationship management system from FairSketch. A cross-site scripting vulnerability exists in FairSketch Rise Ultimate Project Manager and CRM version 3.8.1, which stems from insufficient validation of user input...