PT-2025-41: The Twinkly Light Tree 3D firmware uses a vulnerable Blufi library

The vulnerability was identified in the Twinkly Light Tree 3D firmware, 2.8.18. An attacker within Bluetooth range, with physical access to a device running firmware prior to 2.9.0 and provisioning mode manually re-enabled could, in an attack scenario, interfere with the provisioning exchange and...

AZL-70850 CVE-2025-65018 affecting package fltk 1.3.8-1

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. From version 1.6.0 to before 1.6.51, there is a heap buffer overflow vulnerability in the libpng simplified API function pngimagefinishread when processing...

EUVD-2025-117267

Malicious code in light-amber-eel npm...

MAL-2025-138835 Malicious code in light-amber-eel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c95233b8c518f92b155ea0056d0b872fbece596329cb8f1af94691d20ed9cd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-104225

Malicious code in lightclownfishz3n npm...

MAL-2025-128180 Malicious code in light_clownfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82e53b8ae19519928b5a837a004367ed305cc815ba2e5b930fbac535bb956b44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-96848

Malicious code in lightferretz3n npm...

EUVD-2025-77581

Malicious code in lightbandicootolive-46 npm...

EUVD-2025-78901

Malicious code in lighttigerz3n npm...

EUVD-2025-81382

Malicious code in lightgalliform0xrequest npm...

EUVD-2025-71499

Malicious code in lightcatsharkz3n npm...

EUVD-2025-63308

Malicious code in lightlizardz3n npm...

Malicious code in light_ape_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79742656839181f4a70422b0810bb556d61086ab17a0042dd1ae81bc39dc2da1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53505

Malicious code in light-coffee-lizard npm...

EUVD-2025-53503

Malicious code in light-silver-crane npm...

EUVD-2025-53504

Malicious code in light-fuchsia-possum npm...

EUVD-2025-49913

Malicious code in lightreptilez3n npm...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: iio: light: as73211: Ensure buffer holes are zeroed Given that the buffer is copied to a kfifo that can ultimately be read by user space, it is necessary to ensure that the buffer is zeroed...

Light & Wonder Deck Mate 安全漏洞

Light & Wonder Deck Mate is an automated licensing device from Light & Wonder, UK. A security vulnerability exists in Light & Wonder Deck Mate that stems from a lack of secure boot chain validation and runtime integrity validation, which could allow a physically accessible attacker to modify or...

Light & Wonder Deck Mate 安全漏洞

Light & Wonder Deck Mate is an automated licensing device from Light & Wonder, UK. A security vulnerability exists in Light & Wonder Deck Mate that stems from a firmware update mechanism that does not validate cryptographic signatures and uses hard-coded AES keys, which could lead to the executio...