CVE-2025-39706

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Destroy KFD debugfs after destroy KFD wq Since KFD proc content was moved to kernel debugfs, we can't destroy KFD debugfs before kfdprocessdestroywq. Move kfdprocessdestroywq prior to kfddebugfsfini to fix a kernel NU...

CVE-2025-39706

Summary: CVE-2025-39706 affects the Linux kernel's DRM/AMDKFD path. The issue arises when destroying KFD debugfs before kfd_process_destroy_wq, causing a NULL pointer hang due to an attempted remove of /sys/kernel/debug/kfd/proc/ after /sys/kernel/debug/kfd was destroyed. Root cause: proc content...

Malicious code in chalk-fusion-cladistics-ignite (npm)

The package chalk-fusion-cladistics-ignite was found to contain malicious code...

Malicious code in perseus-cladistics-ophiuchus-fusion (npm)

The package perseus-cladistics-ophiuchus-fusion was found to contain malicious code...

MAL-2025-44056 Malicious code in dotenv-parse-variables-typeorm-spectron-fusion (npm)

The package dotenv-parse-variables-typeorm-spectron-fusion was found to contain malicious code...

Malicious code in dotenv-safe-fusion-norma-joviology (npm)

The package dotenv-safe-fusion-norma-joviology was found to contain malicious code...

Malicious code in palynology-galaxy-fusion-playwright (npm)

The package palynology-galaxy-fusion-playwright was found to contain malicious code...

MAL-2025-45502 Malicious code in palynology-galaxy-fusion-playwright (npm)

The package palynology-galaxy-fusion-playwright was found to contain malicious code...

MAL-2025-44058 Malicious code in dotenv-safe-fusion-norma-joviology (npm)

The package dotenv-safe-fusion-norma-joviology was found to contain malicious code...

MAL-2025-45541 Malicious code in perseus-cladistics-ophiuchus-fusion (npm)

The package perseus-cladistics-ophiuchus-fusion was found to contain malicious code...

MAL-2025-43759 Malicious code in chalk-fusion-cladistics-ignite (npm)

The package chalk-fusion-cladistics-ignite was found to contain malicious code...

Malicious code in dotenv-parse-variables-typeorm-spectron-fusion (npm)

The package dotenv-parse-variables-typeorm-spectron-fusion was found to contain malicious code...

Malicious code in version-fusion-forever-paleomagnetism (npm)

The package version-fusion-forever-paleomagnetism was found to contain malicious code...

MAL-2025-46511 Malicious code in version-fusion-forever-paleomagnetism (npm)

The package version-fusion-forever-paleomagnetism was found to contain malicious code...

drm/amdkfd: Don't call mmput from MMU notifier callback

...

Aligning Core Aspects: Improving Vulnerability Proof-Of-Concepts Via Cross-Source Insights

For vulnerabilities, Proof-of-Concept PoC plays an irreplaceable role in demonstrating the exploitability. PoC reports may include critical information such as specific usage, test platforms, and more, providing essential insights for researchers. However, in reality, due to various PoC templates...

Linux Distros Unpatched Vulnerability : CVE-2016-5537

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unspecified vulnerability in the NetBeans component in Oracle Fusion Middleware 8.1 allows local users to affect confidentiality, integrity, and availability vi...

Mind the Gap: Time-Of-Check to Time-Of-Use Vulnerabilities in LLM-Enabled Agents

Large Language Model LLM-enabled agents are rapidly emerging across a wide range of applications, but their deployment introduces vulnerabilities with security implications. While prior work has examined prompt-based attacks e.g., prompt injection and data-oriented threats e.g., data exfiltration...

CVE-2025-54234

ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by a Server-Side Request Forgery SSRF vulnerability that could lead to limited file system read. A high-privilege authenticated attacker can force the application to make arbitrary requests via injection of arbitrary URLs...

MAL-2025-6896 Malicious code in com.db.spain.common.fif.ngx-fusion-ufe (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 30f0038c395e91d1add11ecd9f7f4784ac0fdf7c472e6ca9003c3d69ae35e031 The OpenSSF Package Analysis project identified...