MAL-2025-71267 Malicious code in uneven-chocolate-python (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc028dac9f7f90ca3ac492a5438af1b502f2c845366c50704aeb8c388a225c58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53869

Malicious code in illegal-copper-bobcat npm...

MAL-2025-68332 Malicious code in fine-jade-peacock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 388eff429a134b5f1627b7a8a18cabeabbf0dbd951843798e1de3f01b7d31ba5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53868

Malicious code in illegal-cyan-sailfish npm...

EUVD-2025-53871

Malicious code in illegal-aqua-hornet npm...

Malicious code in dono-ikan56-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e060070662671d20aa31fe775d065abfa57a064f886635bcf6ee3184ff62b214 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-56918 Malicious code in iwan-klentik36-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 726ad7404229b697e36b5187bf9167978699a91b191253d700c2a5c4fdadc778 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-12890

Improper handling of malformed Connection Request with the interval set to be 1 which supposed to be illegal and the chM 0x7CFFFFFFFF triggers a crash. The peripheral will not be connectable after it...

CVE-2025-12890

Improper handling of malformed Connection Request with the interval set to be 1 which supposed to be illegal and the chM 0x7CFFFFFFFF triggers a crash. The peripheral will not be connectable after it...

CVE-2025-12890 Bluetooth: peripheral: Invalid handling of malformed connection request

Improper handling of malformed Connection Request with the interval set to be 1 which supposed to be illegal and the chM 0x7CFFFFFFFF triggers a crash. The peripheral will not be connectable after it...

EUVD-2025-38327

Improper handling of malformed Connection Request with the interval set to be 1 which supposed to be illegal and the chM 0x7CFFFFFFFF triggers a crash. The peripheral will not be connectable after it...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990637)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990637 advisory. In the Linux kernel, the following vulnerability has been resolved: jffs2: Fix potential illegal address access in jffs2freeinode During the stress testing of the...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988864)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988864 advisory. In the Linux kernel, the following vulnerability has been resolved: kvm: LAPIC: Restore guard to prevent illegal APIC register access Per the SDM, any access that...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989429)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989429 advisory. In the Linux kernel, the following vulnerability has been resolved: jffs2: Fix potential illegal address access in jffs2freeinode During the stress testing of the...

Unity Linux 20.1050e Security Update: kernel (UTSA-2025-990177)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990177 advisory. In the Linux kernel, the following vulnerability has been resolved: jffs2: Fix potential illegal address access in jffs2freeinode During the stress testing of the...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990210)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990210 advisory. In the Linux kernel, the following vulnerability has been resolved: jffs2: Fix potential illegal address access in jffs2freeinode During the stress testing of the...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988814)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988814 advisory. In the Linux kernel, the following vulnerability has been resolved: enetc: Fix illegal access when reading affinityhint irqsetaffinityhit stores a reference to the...

Siemens SIMATIC Devices Allocation of Resources Without Limits or Throttling (CVE-2024-27013)

In the Linux kernel, the following vulnerability has been resolved: tun: limit printing rate when illegal packet received by tun dev vhostworker will call tun call backs to receive packets. If too many illegal packets arrives, tundoread will keep dumping packet contents. When console is enabled, ...

EUVD-2022-54887

In the Linux kernel, the following vulnerability has been resolved: bpf, arm64: Clear prog-jitedlen along prog-jited syzbot reported an illegal copytouser attempt from bpfproggetinfobyfd 1 There was no repro yet on this bug, but I think that commit 0aef499f3172 "mm/usercopy: Detect vmalloc...

SUSE CVE-2023-53680

In the Linux kernel, the following vulnerability has been resolved: NFSD: Avoid calling OPDESC with ops-opnum == OPILLEGAL OPDESC simply indexes into nfsd4ops by the op's operation number, without range checking that value. It assumes callers are careful to avoid calling it with an out-of-bounds...