kernel: NFSD: Avoid calling OPDESC() with ops->opnum == OP_ILLEGAL

In the Linux kernel, the following vulnerability has been resolved: NFSD: Avoid calling OPDESC with ops-opnum == OPILLEGAL OPDESC simply indexes into nfsd4ops by the op's operation number, without range checking that value. It assumes callers are careful to avoid calling it with an out-of-bounds...

Important: Red Hat Security Advisory: kernel-rt security update

An update for kernel-rt is now available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

CVE-2018-19761

There is an illegal address access at fromsixel.c function: sixeldecoderawimpl in libsixel 1.8.2 that will cause a denial of service...

PT-2026-26015

Name of the Vulnerable Software and Affected Versions Xen affected versions not specified Description A guest issuing a Xenstore command accessing a node using the path '/local/domain/' can cause xenstored to crash due to a corrupted error indicator during node path verification. The crash is...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992304)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992304 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix an illegal memory access In the kfdwaitonevents function, the kfdeventwaiter...

kernel: NFSD: Avoid calling OPDESC() with ops->opnum == OP_ILLEGAL

In the Linux kernel, the following vulnerability has been resolved: NFSD: Avoid calling OPDESC with ops-opnum == OPILLEGAL OPDESC simply indexes into nfsd4ops by the op's operation number, without range checking that value. It assumes callers are careful to avoid calling it with an out-of-bounds...

The hidden costs of illegal streaming and modded Amazon Fire TV Sticks

Ahead of the holiday season, people who have bought cheap Amazon Fire TV Sticks or similar devices online should be aware that some of them could let cybercriminals access personal data, bank accounts, and even steal money. BeStreamWise, a UK initiative established to counter illegal streaming,...

MAL-2025-187807 Malicious code in lint-less-loader-jekyll-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94f459bf148cb91c899d7aac0403072e50f2ba7547640fe1ac3cebbc1d9607e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in demaf-byturaa-nami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 989123ce63020863eab15170470b7b4f543e3fd6b3b64d1bc81b43cbd6ba7de4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-safe-ophiuchus-transport-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e175e843f5d3ca4cb6bfc04391f8b236fb24e6fea6d61bd807f79b8d6b3f854d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-117311

Malicious code in illegal-amber-aardwolf npm...

MAL-2025-133325 Malicious code in fadhil-sate47-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4639163daba1a14e46fc15b758bbd961eee01604c99fcbe2a4775ef97754a8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-104599

Malicious code in illegalangelfishz3n npm...

EUVD-2025-91160

Malicious code in illegalwhitefishz3n npm...

EUVD-2025-74550

Malicious code in illegalptarmigantan-52 npm...

Malicious code in illegal_marlin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66fafbfab9def2881c9dec2810bf4973b7aef4eff3181f04cc5f5f781822ecb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-69882

Malicious code in illegalsheepz3n npm...

EUVD-2025-63628

Malicious code in illegalwildfowlz3n npm...

Malicious code in citra-kacang33-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbda1dd4415893120fec16fe3a31d180382f6e51b1350a494e969502558ebc2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-82418 Malicious code in written_cow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5ebc2935536962c1547b15efe4cc0215c116561cd367b61403b52b0ac75f44c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...