MAL-2025-7970 Malicious code in @frozen-ui/http (npm)

The package @frozen-ui/http was found to contain malicious code...

MAL-2025-7951 Malicious code in @frozen-team-qa/ga-store-base (npm)

The package @frozen-team-qa/ga-store-base was found to contain malicious code...

MAL-2025-7976 Malicious code in @frozen-ui/testing-utils (npm)

The package @frozen-ui/testing-utils was found to contain malicious code...

MAL-2025-7959 Malicious code in @frozen-team-qa/positions-service (npm)

The package @frozen-team-qa/positions-service was found to contain malicious code...

MAL-2025-7973 Malicious code in @frozen-ui/picker (npm)

The package @frozen-ui/picker was found to contain malicious code...

MAL-2025-7964 Malicious code in @frozen-team-qa/types (npm)

The package @frozen-team-qa/types was found to contain malicious code...

MAL-2025-7955 Malicious code in @frozen-team-qa/playwright-components (npm)

The package @frozen-team-qa/playwright-components was found to contain malicious code...

MAL-2025-7941 Malicious code in @frozen-team/deploy-to-gcs (npm)

The package @frozen-team/deploy-to-gcs was found to contain malicious code...

MAL-2025-7969 Malicious code in @frozen-ui/hint (npm)

The package @frozen-ui/hint was found to contain malicious code...

MAL-2025-7977 Malicious code in @frozen-ui/tooltip (npm)

The package @frozen-ui/tooltip was found to contain malicious code...

Malicious code in @frozen-team/eslint-config-qa (npm)

The package @frozen-team/eslint-config-qa was found to contain malicious code...

Linux Distros Unpatched Vulnerability : CVE-2025-22068

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ublk: make sure ubq-canceling is set when queue is frozen Now ublk driver depends on...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a failure to clean up the rqlist in the aoe driver, which could result in a frozen queue hang...

CVE-2025-52918

Yealink RPS before 2025-05-26 does not prevent OpenAPI access by frozen enterprise accounts, allowing unauthorized access to deactivated interfaces...

CVE-2025-52918

Yealink RPS before 2025-05-26 does not prevent OpenAPI access by frozen enterprise accounts, allowing unauthorized access to deactivated interfaces...

CVE-2025-52918

Yealink RPS before 2025-05-26 does not prevent OpenAPI access by frozen enterprise accounts, allowing unauthorized access to deactivated interfaces...

Yealink YMCS 安全漏洞

Yealink YMCS is a cloud management service from China Yealink Yealink used to centrally manage and maintain Yealink's devices. A security vulnerability exists in Yealink YMCS versions prior to 2025-05-26, which stems from not blocking access to OpenAPI for frozen enterprise accounts, which could...

CVE-2025-52918

CVE-2025-52918 affects Yealink RPS (Redirect and Provisioning Service). Before 2025-05-26, OpenAPI access is not blocked for frozen enterprise accounts, allowing unauthorized access to deactivated interfaces. CVSS v3.1 base score 5.0 (medium); impact limited to confidentiality. The available docu...

CVE-2025-52918

Yealink RPS before 2025-05-26 does not prevent OpenAPI access by frozen enterprise accounts, allowing unauthorized access to deactivated interfaces...

PT-2025-26529 · Yealink · Yealink Ymcs

Name of the Vulnerable Software and Affected Versions: Yealink YMCS versions prior to 2025-05-26 Description: The issue allows unauthorized access to deactivated interfaces due to the lack of prevention of OpenAPI access by frozen enterprise accounts. Recommendations: For Yealink YMCS versions...