Elastic Beats Filebeat Installed (Windows)

Binary data elasticbeatsfilebeatwininstalled.nbin...

Linux Distros Unpatched Vulnerability : CVE-2022-49917

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipvs: fix WARNING in ipvsappnetcleanup During the initialization of ipvsappnetinit, if file ipvsapp fails to be created, the initialization is successful by...

Tenable Patch Management Client Installed (Linux)

Binary data tenablepatchmanagementclientnixinstalled.nbin...

NVIDIA Omniverse Launcher Installed (Windows)

Binary data nvidiaomniverselauncherinstalled.nbin...

Linux Distros Unpatched Vulnerability : CVE-2025-22045

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: x86/mm: Fix flushtlbrange when used for zapping normal PMDs On the following path,...

Anysphere Cursor Installed (Windows)

Binary data anyspherecursorwininstalled.nbin...

Linux Distros Unpatched Vulnerability : CVE-2022-50068

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/ttm: Fix dummy res NULL ptr deref bug Check the bo-resource value before accessing the resource memtype. v2: Fix commit description unwrapped warning...

Linux Distros Unpatched Vulnerability : CVE-2025-38285

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Fix WARN in getbpfrawtpregs syzkaller reported an issue: WARNING: CPU: 3 PID: 5971 at kernel/trace/bpftrace.c:1861 getbpfrawtpregs+0xa4/0x100...

The vulnerability of the SmartFabric OS10 network operating system, related to the use of pre-installed user accounts, allows a perpetrator to escalate their privileges.

The vulnerability of the SmartFabric OS10 network operating system is related to the use of pre-installed user accounts. Exploiting this vulnerability can allow an attacker to increase their privileges...

Malicious code in vite-plugin-reactjs-refresh (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4abf589cdec43e8ba609988d38155d5965b59ac6a83b1d251405fdf13629cdce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-31275

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.6. A sandboxed process may be able to launch any installed app...

SUSE CVE-2025-38409

In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix another leak in the submit error path putunusedfd doesn't free the installed file, if we've already done fdinstall. So we need to also free the syncfile. Patchwork: https://patchwork.freedesktop.org/patch/653583/...

Lynis Auditing Tool 3.1.5

Lynis is an auditing tool for Unix specialists. It scans the system and available software to detect security issues. Beside security related information it will also scan for general system information, installed packages and configuration mistakes. This software aims in assisting automated...

giscus 授权问题漏洞

giscus is an open source commenting system from giscus. An authorization issue vulnerability exists in giscus that originates from an unauthorized user being able to create a discussion on a repository where giscus is installed, potentially leading to unauthorized actions...

The vulnerability of the Segnetics SMConfig system configuration tool, which stems from the use of pre-installed credentials, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Segnetics SMConfig system configuration tool is related to the use of pre-installed credentials. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information by sending a specially...

Taiwan NSB Alerts Public on Data Risks from Douyin, Weibo, and RedNote Over China Ties

Taiwan's National Security Bureau NSB has warned that China-developed applications like RedNote aka Xiaohongshu, Weibo, Douyin, WeChat, and Baidu Cloud pose security risks due to excessive data collection and data transfer to China. The alert comes following an inspection of these apps carried ou...

Ruby Gem Modules Installed (macOS)

Binary data rubygemmodulesmacosinstalled.nbin...

The vulnerability of TOTOLINK T10 router microprogramming software, related to the use of pre-installed account data, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of TOTOLINK T10 router microprogramming software is related to the use of pre-installed account data. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

Malicious code in @loybung/unicode-fonts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 977a645be3c24178c2efe83570b0da277294e1f25f354f1e01934a67a92ccf8b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4545 Malicious code in @monterosa-sdk/enmasse (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 795b70f3573a5b3e3d743147318ca12a1a0f5c77af1f7d584d82429855656fe3 Any computer that has this package installed or running should be considered...