CVE-2025-38528

CVE-2025-38528: In the Linux kernel, a BPF format-string handling flaw in bpf_bprintf_prepare could fail to reject a crafted %\x00 sequence, allowing a runtime kernel warning when a BPF program uses %p% (as shown by the example). A patch fixes this by ensuring punctuation isn’t skipped during pro...

CVE-2025-38528 bpf: Reject %p% format string in bprintf-like helpers

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject %p% format string in bprintf-like helpers static const char fmt = "%p%"; bpftraceprintkfmt, sizeoffmt; The above BPF program isn't rejected and causes a kernel warning at runtime: Please remove unsupported %\x00 in...

PT-2025-33571

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains a flaw in the BPF subsystem where the %p% format string in bprintf-like helpers is not rejected. This results in a kernel warning at runtime, specifically...

Malicious code in @crimson-team/typescript-helpers (npm)

The package @crimson-team/typescript-helpers was found to contain malicious code...

Malicious code in @sellerly/analytics-standalone-helpers (npm)

The package @sellerly/analytics-standalone-helpers was found to contain malicious code...

Malicious code in sunruse-influx-platforms-helpers (npm)

The package sunruse-influx-platforms-helpers was found to contain malicious code...

Malicious code in com.unity.xr.legacyinputhelpers (npm)

The package com.unity.xr.legacyinputhelpers was found to contain malicious code...

MAL-2025-34181 Malicious code in sunruse-influx-platforms-helpers (npm)

The package sunruse-influx-platforms-helpers was found to contain malicious code...

MAL-2025-7740 Malicious code in @crimson-team/typescript-helpers (npm)

The package @crimson-team/typescript-helpers was found to contain malicious code...

MAL-2025-9286 Malicious code in @sellerly/analytics-standalone-helpers (npm)

The package @sellerly/analytics-standalone-helpers was found to contain malicious code...

Malicious code in bitnami-helpers (npm)

The package bitnami-helpers was found to contain malicious code...

Malicious code in @frozen-team-qa/playwright-helpers (npm)

The package @frozen-team-qa/playwright-helpers was found to contain malicious code...

MAL-2025-7956 Malicious code in @frozen-team-qa/playwright-helpers (npm)

The package @frozen-team-qa/playwright-helpers was found to contain malicious code...

MAL-2025-15763 Malicious code in bitnami-helpers (npm)

The package bitnami-helpers was found to contain malicious code...

Linux Distros Unpatched Vulnerability : CVE-2022-50011

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - venus: pmhelpers: Fix warning in OPP during probe Fix the following WARN triggered during Venus driver probe on 5.19.0-rc8-next-20220728: WARNING: CPU: 7 PID: 3...

CLSA-2025-1754940005 git: Fix of CVE-2024-52006

CVE-2024-52006: fix newline confusion in credential helpers that can lead to credential exfiltration...

CLSA-2025-1754939766 git: Fix of CVE-2024-52006

CVE-2024-52006: fix newline confusion in credential helpers that can lead to credential exfiltration...

CLSA-2025-1754648780 git: Fix of CVE-2024-52006

CVE-2024-52006: fix newline confusion in credential helpers that can lead to credential exfiltration...

Open Redirect

Overview @astrojs/internal-helpers is an Internal helpers used by core Astro packages. Affected versions of this package are vulnerable to Open Redirect the trailing slash redirection logic when handling URLs with double slashes in the path. An attacker can redirect users to arbitrary external...

@1771technologies/oneplay (>=0.0.1 <=0.0.6), @antonyfaris/prefix-node-builtins (>=1.0.0 <=1.0.1) +53 more potentially affected by CVE-2025-54793 via @astrojs/internal-helpers (>=0.6.1 <=0.7.0)

@astrojs/internal-helpers NPM version =0.6.1, =0.0.1, =1.0.0, =12.2.4, =0.12.11, =6.2.1, =4.1.1, =6.2.3, =9.1.3, =8.1.2, =0.1.0, =0.1.0, =1.0.5, =1.25.426, =0.0.9, =1.3.0, =1.3.4 and more Source cves: CVE-2025-54793 Source advisory: SNYK:JS-ASTROJSINTERNALHELPERS-11508621...