991 matches found
MAL-2025-28370 Malicious code in optimystic-hello-world (npm)
The package optimystic-hello-world was found to contain malicious code...
Malicious code in hello-world-from-lupin-99 (npm)
The package hello-world-from-lupin-99 was found to contain malicious code...
Malicious code in hello-world-from-lupin-95 (npm)
The package hello-world-from-lupin-95 was found to contain malicious code...
Malicious code in optimystic-hello-world (npm)
The package optimystic-hello-world was found to contain malicious code...
Malicious code in say-hello-test (npm)
The package say-hello-test was found to contain malicious code...
Malicious code in npm-hello-artifactory (npm)
The package npm-hello-artifactory was found to contain malicious code...
Malicious code in hello-world-lupin (npm)
The package hello-world-lupin was found to contain malicious code...
Malicious code in hello-cloud (npm)
The package hello-cloud was found to contain malicious code...
MAL-2025-22364 Malicious code in hello-world-from-lupin-95 (npm)
The package hello-world-from-lupin-95 was found to contain malicious code...
Linux Distros Unpatched Vulnerability : CVE-2024-30166
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Mbed TLS 3.3.0 through 3.5.2 before 3.6.0, a malicious client can cause information disclosure or a denial of service because of a stack buffer over-read of...
Malicious code in hello-from-shiphero (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 00eb05ac59ee167606a053bd1ac9f705de178f9a576e6fe78bae415d599157b1 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
Security update for gnutls
This update for gnutls fixes the following issues: CVE-2025-6395: Fix NULL pointer dereference when 2nd Client Hello omits PSK bsc1246299 CVE-2025-32988: Fix double-free due to incorrect ownership handling in the export logic of SAN entries containing an otherName bsc1246232 CVE-2025-32989: Fix...
June 10, 2025—KB5060118 (OS Build 25398.1665)
None None...
June 10, 2025—KB5060526 (OS Build 20348.3807)
None None...
June 10, 2025—KB5060531 (OS Build 17763.7434)
None None...
June 10, 2025—KB5060842 (OS Build 26100.4349)
None None...
CVE-2025-53013
Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. A vulnerability present in versions 0.9.10 through 0.9.16 allows a user to authenticate to a Linux host via Himmelblau using an invalid Linux Hello PIN, provided the host is offline. While the user gains access to th...
SUSE CVE-2025-53013
Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. A vulnerability present in versions 0.9.10 through 0.9.16 allows a user to authenticate to a Linux host via Himmelblau using an invalid Linux Hello PIN, provided the host is offline. While the user gains access to th...
CVE-2025-53013
Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. A vulnerability present in versions 0.9.10 through 0.9.16 allows a user to authenticate to a Linux host via Himmelblau using an invalid Linux Hello PIN, provided the host is offline. While the user gains access to th...
CVE-2025-53013 Himmelblau offline auth permits authentication with invalid Hello PIN
Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. A vulnerability present in versions 0.9.10 through 0.9.16 allows a user to authenticate to a Linux host via Himmelblau using an invalid Linux Hello PIN, provided the host is offline. While the user gains access to th...