MAL-2025-1611 Malicious code in mep-widget-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd0595287736afbcd4a5eb42eee88ad6ac547864009d19dfcb6c2ecc108e526c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1636 Malicious code in ts-debugtools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a3f6757bf5754d4382f2a30e27ab0f9da0cb59e71231e5222d92ce9fd9c5065 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1588 Malicious code in fetch-futures (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 36303469b4b722a511ff26abb00c2f9d98e2bbc9e5a983883772746c507de77b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1579 Malicious code in com.google.play-games-pc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 89482dfb2083648706902d58c49dbe79b54f0e6ab3614bb3f528f8b1fba92cf9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1590 Malicious code in financial-assistant (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 46f4bf26e98d1be14ad1a5014b165a3fea5ad540b4f8b496837b595c90496024 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1599 Malicious code in interchain-attestation-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 62cc6bf711c9a215813941fee025df8878d105a26cff9eaf31791d55a0b4410d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in emailconfirmationserv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f3a1ffee276b06e97c988930fdef1d80fbce3b337b1d899282100ec35df0f126 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1629 Malicious code in tedrertrtrtst (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bdf77e0f8793f6db3affddedfb08d60085dbbfad04ed2b0f20ef2cecf43ff283 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Security update for openssh8.4

This update for openssh8.4 fixes the following issues: CVE-2025-26465: Fixed a MitM attack against OpenSSH's VerifyHostKeyDNS-enabled client bsc1237040. Other bugfixes: Fix usage of local accelerator cards via openssl-ibmca bsc1216474, bsc1218871. Add patches from upstream to change the default...

12,000+ API Keys and Passwords Found in Public Datasets Used for LLM Training

A dataset used to train large language models LLMs has been found to contain nearly 12,000 live secrets, which allow for successful authentication. The findings once again highlight how hard-coded credentials pose a severe security risk to users and organizations alike, not to mention compounding...

SUSE CVE-2024-58008

In the Linux kernel, the following vulnerability has been resolved: KEYS: trusted: dcp: fix improper sg use with CONFIGVMAPSTACK=y With vmalloc stack addresses enabled CONFIGVMAPSTACK=y DCP trusted keys can crash during en- and decryption of the blob encryption key via the DCP crypto driver. This...

PT-2025-9109

Name of the Vulnerable Software and Affected Versions Minut M2 version 15142 Description The issue allows physically proximate attackers to extract cryptographic keys from the internal flash of Minut M2 devices with the specified firmware version. This can be used to inject modified firmware into...

CVE-2024-58008

In the Linux kernel, the following vulnerability has been resolved: KEYS: trusted: dcp: fix improper sg use with CONFIGVMAPSTACK=y With vmalloc stack addresses enabled CONFIGVMAPSTACK=y DCP trusted keys can crash during en- and decryption of the blob encryption key via the DCP crypto driver. This...

DEBIAN-CVE-2024-58008

In the Linux kernel, the following vulnerability has been resolved: KEYS: trusted: dcp: fix improper sg use with CONFIGVMAPSTACK=y With vmalloc stack addresses enabled CONFIGVMAPSTACK=y DCP trusted keys can crash during en- and decryption of the blob encryption key via the DCP crypto driver. This...

UBUNTU-CVE-2024-58008

In the Linux kernel, the following vulnerability has been resolved: KEYS: trusted: dcp: fix improper sg use with CONFIGVMAPSTACK=y With vmalloc stack addresses enabled CONFIGVMAPSTACK=y DCP trusted keys can crash during en- and decryption of the blob encryption key via the DCP crypto driver. This...

CVE-2024-58008

CVE-2024-58008 affects the Linux kernel in the DCP crypto driver when vmalloc stack is enabled (CONFIG_VMAP_STACK=y). The issue stems from improper use of sg_init_one() with vmalloc’d stack buffers (plain_key_blob) during encryption key processing, which can cause a crash during en- and decryptio...

CVE-2024-58008 KEYS: trusted: dcp: fix improper sg use with CONFIG_VMAP_STACK=y

In the Linux kernel, the following vulnerability has been resolved: KEYS: trusted: dcp: fix improper sg use with CONFIGVMAPSTACK=y With vmalloc stack addresses enabled CONFIGVMAPSTACK=y DCP trusted keys can crash during en- and decryption of the blob encryption key via the DCP crypto driver. This...

PT-2025-8830 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A issue in the Linux kernel has been identified where DCP trusted keys can crash during encryption and decryption of the blob encryption key via the DCP crypto driver when vmalloc stac...

CVE-2022-49566

In the Linux kernel, the following vulnerability has been resolved: crypto: qat - fix memory leak in RSA When an RSA key represented in form 2 as defined in PKCS 1 V2.1 is used, some components of the private key persist even after the TFM is released. Replace the explicit calls to free the buffe...

DEBIAN-CVE-2022-49566

In the Linux kernel, the following vulnerability has been resolved: crypto: qat - fix memory leak in RSA When an RSA key represented in form 2 as defined in PKCS 1 V2.1 is used, some components of the private key persist even after the TFM is released. Replace the explicit calls to free the buffe...