EUVD-2025-117264

Malicious code in linear-blush-boar npm...

EUVD-2025-117263

Malicious code in linear-sapphire-wildcat npm...

CVE-2025-64345: Concurrent Execution using Shared Resource with Improper Synchronization

Wasmtime is a runtime for WebAssembly. Prior to version 38.0.4, 37.0.3, 36.0.3, and 24.0.5, Wasmtime's Rust embedder API contains an unsound interaction where a WebAssembly shared linear memory could be viewed as a type which provides safe access to the host Rust to the contents of the linear...

EUVD-2025-104143

Malicious code in linearmarlinz3n npm...

MAL-2025-128262 Malicious code in linear_marlin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2470c2fc8160e73373e5068564f22aa331cd53da6638f6976d8f19c08c9e4d56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-74487

Malicious code in linearangelfishteal-57 npm...

EUVD-2025-78894

Malicious code in linearanglerfishz3n npm...

EUVD-2025-84981

Malicious code in linearptarmiganz3n npm...

Malicious code in linear-copper-hippopotamus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 612c7765173c4510212bbe4baf21090fcd05d8c0a726ff1c50e41c9f41fc6bd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53483

Malicious code in linear-copper-hippopotamus npm...

EUVD-2025-53482

Malicious code in linear-violet-swift npm...

MAL-2025-69166 Malicious code in linear-copper-hippopotamus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 612c7765173c4510212bbe4baf21090fcd05d8c0a726ff1c50e41c9f41fc6bd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-49906

Malicious code in linearcentipedez3n npm...

EUVD-2025-49905

Malicious code in linearchickadeez3n npm...

[SECURITY] Fedora 43 Update: rust-regex-1.12.2-1.fc43

An implementation of regular expressions for Rust. This implementation uses finite automata and guarantees linear time matching on all inputs...

CVE-2025-58187

Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate. This affects programs which validate arbitrary certificate chains. Mitigation Mitigation for this issue is either not available or the...

PT-2025-45627

Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate. This affects programs which validate arbitrary certificate chains...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990457)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990457 advisory. In the Linux kernel, the following vulnerability has been resolved: veth: Ensure eth header is in skb's linear part After feeding a decapsulated packet to a veth...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989194)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989194 advisory. In the Linux kernel, the following vulnerability has been resolved: veth: Ensure eth header is in skb's linear part After feeding a decapsulated packet to a veth...

Defeating KASLR by Doing Nothing at All

Posted by Seth Jenkins, Project Zero Introduction I've recently been researching Pixel kernel exploitation and as part of this research I found myself with an excellent arbitrary write primitive…but without a KASLR leak. As necessity is the mother of all invention, on a hunch, I started researchi...