EUVD-2025-85585

Malicious code in implicitgoosez3n npm...

Malicious code in implicit-white-kingfisher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c91694c4a9afae038f8dc91888b8cd3c18dd223c7a9383ec6a4ee247df1ef149 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53850

Malicious code in implicit-brown-peafowl npm...

EUVD-2025-53848

Malicious code in implicit-coffee-quelea npm...

EUVD-2025-53849

Malicious code in implicit-chocolate-worm npm...

EUVD-2025-53847

Malicious code in implicit-orange-egret npm...

Malicious code in implicit-chocolate-worm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79ce71a3e2d18f0e12ca86af43879f3fde6721fed61c3aede0ecd42778ed7ef2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53846

Malicious code in implicit-white-kingfisher npm...

EUVD-2025-50023

Malicious code in implicitcrocodilez3n npm...

MAL-2025-56802 Malicious code in implicit_jackal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ffd2a1f1808226cfc0735509b693b66f73b845463bdde875fb83d969ea69a04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-47173

Malicious code in implicitjackalz3n npm...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: RDMA/mlx5: Fixed unsafe xarray access in implicit ODP handling xastore and xaerase were used without holding the proper lock, which led to a lockdep warning due to unsafe RCU usage. This patch replaces them with xastore and...

CVE-2025-40096

In the Linux kernel, the following vulnerability has been resolved: drm/sched: Fix potential double free in drmschedjobaddresvdependencies When adding dependencies with drmschedjobadddependency, that function consumes the fence reference both on success and failure, so in the latter case the...

CVE-2025-40096 drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies

In the Linux kernel, the following vulnerability has been resolved: drm/sched: Fix potential double free in drmschedjobaddresvdependencies When adding dependencies with drmschedjobadddependency, that function consumes the fence reference both on success and failure, so in the latter case the...

CrossGuard: Safeguarding MLLMs against Joint-Modal Implicit Malicious Attacks

Multimodal Large Language Models MLLMs achieve strong reasoning and perception capabilities but are increasingly vulnerable to jailbreak attacks. While existing work focuses on explicit attacks, where malicious content resides in a single modality, recent studies reveal implicit attacks, in which...

CVE-2025-21057

Use of implicit intent for sensitive communication in Samsung Notes prior to version 4.4.30.63 allows local attackers to access shared notes...

CVE-2025-21057

Use of implicit intent for sensitive communication in Samsung Notes prior to version 4.4.30.63 allows local attackers to access shared notes...

CVE-2025-21057

Use of implicit intent for sensitive communication in Samsung Notes prior to version 4.4.30.63 allows local attackers to access shared notes...

CVE-2025-21057

Use of implicit intent for sensitive communication in Samsung Notes prior to version 4.4.30.63 allows local attackers to access shared notes...

CVE-2025-21057

CVE-2025-21057 affects Samsung Notes with vulnerable versions prior to 4.4.30.63. The root cause is use of implicit intents for sensitive communication, enabling a local attacker to access shared notes. The issue is documented across multiple sources (NVD, RH, CNVD, and PT Security) confirming th...