Malicious code in @test-org-aczxvz/test-package (npm)

Source: amazon-inspector d0a9285b847a00a2be7c55862b4f73a961f349398d59de62cfba69be972a5089 The package's public initoptions API serializes the entire options object — including the HMAC signing key passed as loggingdata, the bearer token, region, instance, and entropy fields — and POSTs it to a...

PT-2026-128384

In the Linux kernel, the following vulnerability has been resolved: net: ipconfig: bound DHCP option construction ic dhcp init options appends the hostname option 12, vendor-class option 60 and client-ID option 61 options into the fixed 312-byte bootp pkt.exten buffer. Only the client-ID branch...

PT-2026-116712

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ic dhcp init options function where the hostname option 12, vendor-class option 60, and client-ID option 61 are appended to the fixed 312-byte bootp pkt.exten...

Linux Distros Unpatched Vulnerability : CVE-2023-46052

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Sane 1.2.1 heap bounds overwrite in initoptions from backend/test.c via a long initmode string in a configuration file. NOTE: this is disputed because there is ...

SUSE CVE-2023-46052

Sane 1.2.1 heap bounds overwrite in initoptions from backend/test.c via a long initmode string in a configuration file. NOTE: this is disputed because there is no expectation that test.c code should be executed with an attacker-controlled configuration file...

PT-2024-13325

Name of the Vulnerable Software and Affected Versions Sane version 1.2.1 Description The issue is related to a heap bounds overwrite in the init options function from backend/test.c via a long init mode string in a configuration file. This is disputed because there is no expectation that test.c...