MAL-2025-24870 Malicious code in labyrinth-coral-bci338-project (npm)

The package labyrinth-coral-bci338-project was found to contain malicious code...

MAL-2025-34824 Malicious code in test-mlw2-abash-sturt-dewed-monal (npm)

The package test-mlw2-abash-sturt-dewed-monal was found to contain malicious code...

MAL-2025-7156 Malicious code in @crabas0npm/alias-culpa-veritatis (npm)

The package @crabas0npm/alias-culpa-veritatis was found to contain malicious code...

MAL-2025-36090 Malicious code in test-mlw2-rands-papal (npm)

The package test-mlw2-rands-papal was found to contain malicious code...

MAL-2025-38771 Malicious code in wanweigang-jingying-rike-erlingyijiulingsan-lingwu (npm)

The package wanweigang-jingying-rike-erlingyijiulingsan-lingwu was found to contain malicious code...

MAL-2025-9691 Malicious code in @womorg/neque-eum-quia (npm)

The package @womorg/neque-eum-quia was found to contain malicious code...

Linux Distros Unpatched Vulnerability : CVE-2022-49369

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: amt: fix possible memory leak in amtrcv If an amt receives packets and it finds socket. If i...

Linux Distros Unpatched Vulnerability : CVE-2025-38362

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add null pointer check for getfirstactivedisplay The function...

kernel: powerpc: Fix access beyond end of drmem array

A flaw was found in the Linux kernel, specifically affecting the PowerPC architecture's pseries memory hotplug functionality. The issue arises from the dlparmemoryremovebyindex function, which may access memory beyond the bounds of the drmem logical memory block LMB array when it fails to find a...

📄 Lost and Found Information System 1.0 SQL Injection

Lost and Found Information System version 1.0 suffers from a remote SQL injection vulnerability. This particular version was already known to be susceptible to such attacks in 2023 but appears to have other vectors of exploitability for the same issue. Titles: Lost and Found Information System-1....

PT-2025-31775 · Code Projects · Human Resource Integrated System

Name of the Vulnerable Software and Affected Versions: code-projects Human Resource Integrated System version 1.0 Description: A problematic vulnerability exists in code-projects Human Resource Integrated System 1.0. The issue affects an unknown function within the /insert-and-view/action.php fil...

vulnerability-research

This reposit...

SUSE CVE-2025-38362

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add null pointer check for getfirstactivedisplay The function modhdcphdcp1enableencryption calls the function getfirstactivedisplay, but does not check its return value. The return value is a null pointer if the...

AZL-72596 CVE-2025-38362 affecting package kernel for versions less than 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add null pointer check for getfirstactivedisplay The function modhdcphdcp1enableencryption calls the function getfirstactivedisplay, but does not check its return value. The return value is a null pointer if the...

DEBIAN-CVE-2025-38362

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add null pointer check for getfirstactivedisplay The function modhdcphdcp1enableencryption calls the function getfirstactivedisplay, but does not check its return value. The return value is a null pointer if the...

UBUNTU-CVE-2025-38362

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add null pointer check for getfirstactivedisplay The function modhdcphdcp1enableencryption calls the function getfirstactivedisplay, but does not check its return value. The return value is a null pointer if the...

User Enumeration via "Account not found" Message

This report is not public...

DEBIAN-CVE-2025-38273

In the Linux kernel, the following vulnerability has been resolved: net: tipc: fix refcount warning in tipcaeadencrypt syzbot reported a refcount warning 1 caused by calling getnet on a network namespace that is being destroyed refcount=0. This happens when a TIPC discovery timer fires during...

Securing Mixed Rust with Hardware Capabilities

The Rust programming language enforces three basic Rust principles, namely ownership, borrowing, and AXM Aliasing Xor Mutability to prevent security bugs such as memory safety violations and data races. However, Rust projects often have mixed code, i.e., code that also uses unsafe Rust, FFI Forei...

infinispan: Credential Leakage in Infinispan CLI

A flaw was found in Infinispan CLI. A sensitive password, decoded from a Base64-encoded Kubernetes secret, is processed in plaintext and included in a command string that may expose the data in an error message when a command is not found...