Deleting a Forms collaborator share leaves uploaded response files accessible through a lingering Files share

None...

Linux Distros Unpatched Vulnerability : CVE-2022-45419

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - If the user added a security exception for an invalid TLS certificate, opened an ongoing TLS connection with a server that used that certificate, and then delet...

UBUNTU-CVE-2025-38210

In the Linux kernel, the following vulnerability has been resolved: configfs-tsm-report: Fix NULL dereference of tsmops Unlike sysfs, the lifetime of configfs objects is controlled by userspace. There is no mechanism for the kernel to find and delete all created config-items. Instead, the...

CVE-2024-36523

An access control issue in Wvp GB28181 Pro 2.0 allows users to continue to access information in the application after deleting their own or administrator accounts. This is provided that the users do not log out of their deleted accounts...

Security update for openssh8.4

This update for openssh8.4 fixes the following issues: CVE-2025-26465: Fixed a MitM attack against OpenSSH's VerifyHostKeyDNS-enabled client bsc1237040. Other bugfixes: Fix usage of local accelerator cards via openssl-ibmca bsc1216474, bsc1218871. Add patches from upstream to change the default...

Malicious code in vue-plugin-rely-cs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c55de31ae355d3d408d5fa428b5cfb2eca66005c92cf6e397da4a4f29a5cdd3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8766 Malicious code in glintier (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9d7a1e1bc5124b35c9fb5c808db8e7af93ea9f0b4cff50eaa391c9e74e2b0c4a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Degraded secret zeroization capabilities

Versions 0.5.0 and 0.5.1 of vodozemac have degraded secret zeroization capabilities, due to changes in third-party cryptographic dependencies the Dalek crates, which moved secret zeroization capabilities behind a feature flag while vodozemac disabled the default feature set. Impact The degraded...

Spoofing

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix removed dentries still existing after log is synced When we move one inode from one directory to another and both the inode and its previous parent directory were logged before, we are not supposed to have the dentry f...

MAL-2024-889 Malicious code in wlwz-2312-7908 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 56071c102bc7354c76372cd23ba77c25127caafb572b04e14acd637942525c88 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-719 Malicious code in wlwz-2312-6100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0370bc1208b0fa2636f5d20491001e9c6cd6364cfb66e4f804ccee437bd9c8b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-589 Malicious code in wlwz-2312-4605 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8286c8471b479f0fa80efe007115219ae6aea7fd6be240f3d629aa97306143ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-407 Malicious code in fca-jelongz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6b28d1e340956be0c08d438e22798f34bf924f9da15d5e03ce1d8baefd0bb021 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

UBUNTU-CVE-2022-42320

Xenstore: Guests can get access to Xenstore nodes of deleted domains Access rights of Xenstore nodes are per domid. When a domain is gone, there might be Xenstore nodes left with access rights containing the domid of the removed domain. This is normally no problem, as those access right entries...

MAL-2022-7265 Malicious code in xc4hrat.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9970c7d95784a693f19c3602b864ce7978094c775e8c21ab01a11a62cd34f529 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6357 Malicious code in supoertes (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cbbb9e497d9bd4ea9898e4b74ff87df9e7a36df710798e33dbfb49288a4eee02 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2160 Malicious code in connsectmongo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ad2fb59e7628b3ecba65f3e424dd90f04d3f9a08f54472ad3b224a1113cebf52 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7192 Malicious code in wm-dagre (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2f9e690969a3ea29abd36c88c828fccb854f99546a49b3272c65e9fc218fd690 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5867 Malicious code in runkit-embed (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d1a12cf5df9a43c706a5f3c73571ad7199f6a81dd67d4b94d6b91ad149a5f5e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5031 Malicious code in ofjaaah (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8e1d302f03187762dd88092103f9e08ce9bef197cf9952c175e9f81cd545c84b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...