EUVD-2025-63375

Malicious code in knownrookz3n npm...

EUVD-2025-53592

Malicious code in known-white-squirrel npm...

MAL-2025-69055 Malicious code in known-lime-fish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 573cba47d4497d24a67d65a7d66be9acf1c72597dde8ac48fb9394f896958640 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53594

Malicious code in known-lime-fish npm...

EUVD-2025-53593

Malicious code in known-sapphire-bat npm...

EUVD-2025-58804

Malicious code in knowntoucanz3n npm...

PT-2025-46450

Name of the Vulnerable Software and Affected Versions Nuance PowerScribe affected versions not specified Description A lack of proper authorization in Nuance PowerScribe allows an unauthorized attacker to disclose information over a network. The issue affects a radiology reporting system used in...

PT-2025-46402

Name of the Vulnerable Software and Affected Versions IntelR NPU Drivers affected versions not specified Description A protection mechanism failure exists in some IntelR NPU Drivers within Ring 3. This can allow a denial of service. An unprivileged software adversary with an authenticated user an...

PT-2025-46515

Name of the Vulnerable Software and Affected Versions Visual Studio Code CoPilot Chat Extension affected versions not specified Description An issue exists in Visual Studio Code CoPilot Chat Extension related to improper limitation of a pathname to a restricted directory, also known as a 'path...

PT-2025-46520

Name of the Vulnerable Software and Affected Versions Format Plugins versions 1.1.1 and earlier Description Format Plugins versions 1.1.1 and earlier are susceptible to a Heap-based Buffer Overflow. Successful exploitation could lead to arbitrary code execution with the privileges of the current...

CVE-2025-64508

Bugsink is a self-hosted error tracking tool. In versions prior to 2.0.5, brotli "bombs" highly compressed brotli streams, such as many zeros can be sent to the server. Since the server will attempt to decompress these streams before applying various maximums, this can lead to exhaustion of the...

CVE-2025-64508 Bugsink vulnerable to unauthenticated remote DoS via crafted Brotli input

Bugsink is a self-hosted error tracking tool. In versions prior to 2.0.5, brotli "bombs" highly compressed brotli streams, such as many zeros can be sent to the server. Since the server will attempt to decompress these streams before applying various maximums, this can lead to exhaustion of the...

Malicious code in known_narwhal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 114fdee3c7f96a15fab79af81d29a396bd48c746e5cc7fe26927c3914c649e85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2025-21042link is external Samsung Mobile Devices Out-of-Bounds Write Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber...

PT-2025-46140

Name of the Vulnerable Software and Affected Versions projectworlds Online Admission System version 1.0 Description A security issue exists in projectworlds Online Admission System version 1.0. The issue involves a SQL injection that can be triggered remotely through manipulation of the keywords...

PT-2025-46585

Name of the Vulnerable Software and Affected Versions rust-sudo-rs affected versions not specified Description A security update is available. The package rust-sudo-rs in Debian is affected by vulnerabilities. Recommendations At the moment, there is no information about a newer version that...

PT-2025-52909

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a use-after-free UAF issue related to the management of RAID devices. The problem occurs when removing a RAID device path, potentially leading to a general...

CVE-2025-30479

Dell CloudLink, versions prior to 8.2, contain a vulnerability where a privileged user with known password can run command injection to gain control of system...

CVE-2025-45379

Dell CloudLink, versions prior to 8.2, contain a vulnerability where a privileged user with known password can run command injection from console to gain shell access of system...

CVE-2025-46364

Dell CloudLink, versions prior to 8.1.1, contain a vulnerability where a privileged user with known password can run CLI Escape Vulnerability to gain control of system...