Malicious code in forward_cat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 472473cc31e61f0741a882b23056a0de2f34a3497fabf612a368ebc574a94664 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102884 Malicious code in forward_cat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 472473cc31e61f0741a882b23056a0de2f34a3497fabf612a368ebc574a94664 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-63968

Malicious code in forwardorangutanz3n npm...

EUVD-2025-63967

Malicious code in forwardpeacockz3n npm...

EUVD-2025-63971

Malicious code in forwardclownfishz3n npm...

Malicious code in forward-coral-wren (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4163e4c6e52845a94770049fbce8c5cd88195435dfc76afdfc3b66decb1a516b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-54246

Malicious code in forward-coral-wren npm...

EUVD-2025-54245

Malicious code in forward-green-wombat npm...

MAL-2025-68404 Malicious code in forward-green-wombat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d84f0d46265071803cd16aaffd5a7f748dda694f2c4ba88ecdc8f6793451115 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-50166

Malicious code in forwardmitez3n npm...

EUVD-2025-50167

Malicious code in forwardhippopotamusz3n npm...

PT-2026-2501

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.18.0-rc2+ 721 Description An issue exists in the Linux kernel's F2FS filesystem implementation where an incorrect return value from the f2fs recover fsync data function can lead to a kernel panic. Specifically,...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989172)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989172 advisory. In the Linux kernel, the following vulnerability has been resolved: ip: Fix data-races around sysctlipfwdusepmtu. While reading sysctlipfwdusepmtu, it can be changed...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988836)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988836 advisory. In the Linux kernel, the following vulnerability has been resolved: mac80211-hwsim: fix late beacon hrtimer handling Thomas explained in...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988797)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988797 advisory. In the Linux kernel, the following vulnerability has been resolved: ip: Fix data-races around sysctlipfwdupdatepriority. While reading sysctlipfwdupdatepriority, it...

Use-After-Free

github.com/envoyproxy/envoy is vulnerable to a Use-After-Free. The vulnerability is due to improper handling of DNS cache operations in the Dynamic Forward Proxy implementation, where a completion callback can trigger new or remove existing DNS resolutions, which allows an attacker to cause...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: TCP: Proper signedness in the calculation of remaining space in an skb object. Syzkaller reported a bug 1 where sk-skforwardalloc could overflow. When we send data, if an skb object exists at the end of the write queue, the kerne...

CVE-2025-34305

IPFire versions prior to 2.29 Core Update 198 contain multiple stored cross-site scripting XSS vulnerabilities caused by a bug in the cleanhtml function /var/ipfire/header.pl that fails to apply HTML-entity encoding to user input. When an authenticated user submits data to affected endpoints - fo...

Siemens SIMATIC Devices Race Condition (CVE-2024-53124)

net: fix data-races around sk skforwardalloc. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid503783; scriptversion"1.2";...

CVE-2025-34305

IPFire versions prior to 2.29 Core Update 198 contain multiple stored cross-site scripting XSS vulnerabilities caused by a bug in the cleanhtml function /var/ipfire/header.pl that fails to apply HTML-entity encoding to user input. When an authenticated user submits data to affected endpoints - fo...