Finnish Authorities Detain Crew After Undersea Internet Cable Severed

After a sudden internet cable break between Finland and Estonia, authorities have seized the cargo ship Fitburg. With two crew members arrested and sanctioned steel found on board, investigators are now probing if this was an accident or a deliberate act of hybrid warfare...

Malicious code in orchestration-node-common-errors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d35f5a5c8b3e75118553234caeef3ebb1eb546d8a678904707d18ef47a16ab9b The package orchestration-node-common-errors was found to contain malicious code. Source: ghsa-malware...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992951)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992951 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported acpievaluateobject may retu...

PT-2025-53616

This vulnerability is: CVE-2025-34462 Found by nsm barii me This vulnerability is possible because of the fact that ble devices use services to communicate over ble. I will be looking more into this, follow for more CyberSecurity EthicalHacking https://t.co/UbGAilGo1B...

EUVD-2025-205222

In the Linux kernel, the following vulnerability has been resolved: ima: Handle error code returned by imafilterrulematch In imamatchrules, if imafilterrulematch returns -ENOENT due to the rule being NULL, the function incorrectly skips the 'if !rc' check and sets 'result = true'. The LSM rule is...

CVE-2022-50740

In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: hifusb: fix memory leak of urbs in ath9khifusbdealloctxurbs Syzkaller reports a long-known leak of urbs in ath9khifusbdealloctxurbs. The cause of the leak is that usbgeturb is called but usbfreeurb or usbputurb is no...

vulnerability-research

Vulnerability Re...

SUSE CVE-2023-53845

In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix infinite loop in nilfsmdtgetblock If the disk image that nilfs2 mounts is corrupted and a virtual block address obtained by block lookup for a metadata file is invalid, nilfsbmaplookupatlevel may return the same...

UBUNTU-CVE-2023-53845

In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix infinite loop in nilfsmdtgetblock If the disk image that nilfs2 mounts is corrupted and a virtual block address obtained by block lookup for a metadata file is invalid, nilfsbmaplookupatlevel may return the same...

EUVD-2025-201311

Kalmia CMS version 0.2.0 contains a user enumeration vulnerability in its authentication mechanism. The application returns different error messages for invalid users usernotfound versus valid users with incorrect passwords invalidpassword. This observable response discrepancy allows...

CVE-2025-65899

Kalmia CMS version 0.2.0 contains a user enumeration vulnerability in its authentication mechanism. The application returns different error messages for invalid users usernotfound versus valid users with incorrect passwords invalidpassword. This observable response discrepancy allows...

CVE-2025-65899

Kalmia CMS version 0.2.0 contains a user enumeration vulnerability in its authentication mechanism. The application returns different error messages for invalid users usernotfound versus valid users with incorrect passwords invalidpassword. This observable response discrepancy allows...

Malicious code in elf-stats-merry-cookiejar-442 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2205b339fd0b3a3399f352d8e9c75db19fcaf3558a7482f55afea84733d5172 The package elf-stats-merry-cookiejar-442 was found to contain malicious code...

MAL-2025-192168 Malicious code in elf-stats-storybook-marshmallow-729 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea9e1e445ab784bb20608d634e3d9e01c84179338478a75b8029624e3ac3b1dd The package elf-stats-storybook-marshmallow-729 was found to contain malicious code...

Malicious code in debug-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88f2a76a5ede2df04c7d9b90d9fe0164f99a388aaf4ba018dc9b40f2b794d967 The package debug-common was found to contain malicious code...

Malicious code in react-native-retriable-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7a3d5e2b867c8c149b9f1a79751ad5cfa9699fe24ec38d49770f9f80a37b3aa The package react-native-retriable-fetch was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-114848

Malicious code in cross-env-nodemon-sedna-local npm...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990883)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990883 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported acpievaluateobject may retu...

Malicious code in bayu-rangginang65-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0726e9435e14bed25be7a1396b8e7a4589630d9ca7af1bb7aa429659678e8ba2 The package bayu-rangginang65-kyuki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

Malicious code in synqroomkit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 914da44da2183d035b344098fd0e5fe8c942b80666fa3cbcf855efc2b2239faf The package synqroomkit was found to contain malicious code. Source: ghsa-malware 55bfdc58beccccc6ae0646990cdc186d46c910ef90f5abdcf0c6e4d1d8b52024 An...