Updated open-vm-tools package fixes security vulnerability

It was discovered that open-vm-tools contains a local privilege escalation vulnerability. A malicious actor with non-administrative privileges on a guest VM may exploit this vulnerability to escalate privileges to root on the same VM CVE-2025-41244...

PT-2025-49057

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to Transparent Huge Pages THP. When memory error injection occurs on a THP mapped to userspace, the kernel can panic instead of terminating the...

EUVD-2025-33777

Happy DOM: VM Context Escape can lead to Remote Code Execution...

MAL-2025-48308 Malicious code in vite-plugin-es6-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 04fac94db34a750bac1ae88f46269718450d383d01b84a102872d0a2f6748918 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

KVM: arm64: Don't retire aborted MMIO instruction

...

Malicious code in mad-2.0.1.2.2.8. (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 81f7b7f7c3402d257f9f14e953189f25bcb44722a79c99b2d68449796a3896d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48181 Malicious code in redirect-kz5pf4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2bc86fafc96a4a904d66dff816670e4e6fab529a6f1cc9b9179bcd6137f12f2f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48224 Malicious code in redirect-uplctp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e78d0574b0be8d00d636478b373f3cf1e8c591eb69245a667bc3e556d886620 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48198 Malicious code in redirect-nq70u6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 099d83c25e6a8662b90ff95da62e95d6118eb1d71b1ed785e186f69054ae7f66 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Exploit for Signal Handler Race Condition in Sonicwall Sma_6200_Firmware

CCTV-Hacking-Simulated-Environment-Only Repository purpose:...

MAL-2025-48096 Malicious code in @testcarrot/supply10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8be0caf56c8bfb459fe5af9909f2c71799d54ea1571de12424e205edd9e37c76 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

New Machine Learning Approaches for Intrusion Detection in ADS-B

With the growing reliance on the vulnerable Automatic Dependent Surveillance-Broadcast ADS-B protocol in air traffic management ATM, ensuring security is critical. This study investigates emerging machine learning models and training strategies to improve AI-based intrusion detection systems IDS...

A Demonstration of Self-Adaptive Jamming Attack Detection in AI/ML Integrated O-RAN

The open radio access network O-RAN enables modular, intelligent, and programmable 5G network architectures through the adoption of software-defined networking, network function virtualization, and implementation of standardized open interfaces. However, one of the security concerns for O-RAN,...

Malicious code in redirect-prhts6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b32276d7067817b78f366ea8008f4de08e67019bec5e9362851a8940fd8d7c00 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48058 Malicious code in redirect-h0i672 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b2b4efe272664ff868b1e9c5a05a87a2f41bf88048d2e4729407cf8932c4af18 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in func-analyst (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware acdf906e62052075f99f8b6d12353e90718603e428f036750156e9a47c16b61c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Oracle Linux 8 : open-vm-tools (ELSA-2025-17509)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-17509 advisory. - Resolves: RHEL-117388 CISA Major Incident CVE-2025-41244 open-vm-tools: Local privilege escalation in open-vm-tools rhel-8.10.z Tenable has extracted the...

Linux Distros Unpatched Vulnerability : CVE-2023-53474

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: x86/MCE/AMD: Use an u64 for bankmap Thee maximum number of MCA banks is 64 MAXNRBANKS, see...

ROS-20251008-05

A vulnerability in the Kubernetes virtual machine cluster management software tool is related to insufficient validation of user input. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

CVE-2023-53663

In the Linux kernel, the following vulnerability has been resolved: KVM: nSVM: Check instead of asserting on nested TSC scaling support Check for nested TSC scaling support on nested SVM VMRUN instead of asserting that TSC scaling is exposed to L1 if L1's MSRAMD64TSCRATIO has diverged from KVM's...