GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: gosu, vault-secrets-webhook, doppler-kubernetes-operator, hydra, timestamp-authority, vault-env, kubevela, rancher-loglevel, sigstore-scaffolding, ip-masq-agent, local-path-provisioner, harbor, falcosidekick, guac, boring-registry, hello-world-golang, promxy,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: vault-secrets-webhook, doppler-kubernetes-operator, hydra, timestamp-authority, vault-env, kubevela, rancher-loglevel, sigstore-scaffolding, ip-masq-agent, local-path-provisioner, harbor, falcosidekick, guac, boring-registry, hello-world-golang, promxy,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: prometheus-mysqld-exporter-fips, whereabouts, gpu-operator-fips, vault-secrets-webhook, sealed-secrets, gostatsd, mc, trivy-operator, mc-fips, task, knative-operator, manifest-tool, crossplane-function-auto-ready-fips, cloud-provider-azure-fips, nerdctl, kind,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: prometheus-mysqld-exporter-fips, whereabouts, gpu-operator-fips, vault-secrets-webhook, sealed-secrets, gostatsd, mc, trivy-operator, mc-fips, task, knative-operator, manifest-tool, crossplane-function-auto-ready-fips, cloud-provider-azure-fips, nerdctl, kind,...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: prometheus-mysqld-exporter-fips, whereabouts, gpu-operator-fips, vault-secrets-webhook, sealed-secrets, gostatsd, mc, trivy-operator, mc-fips, task, knative-operator, manifest-tool, crossplane-function-auto-ready-fips, cloud-provider-azure-fips, nerdctl, kind,...

Android Malware Detection: A Machine Learning Approach

This study examines machine learning techniques like Decision Trees, Support Vector Machines, Logistic Regression, Neural Networks, and ensemble methods to detect Android malware. The study evaluates these models on a dataset of Android applications and analyzes their accuracy, efficiency, and...

Astra Linux – Vulnerability in libpod

A flaw was discovered in Podman. The podman machine init command fails to verify the TLS certificate when downloading VM images from an OCI registry. This issue allows for a Man In The Middle attack to occur...

EUVD-2025-37346

When passing through PCI devices, the detach logic in libxl won't remove access permissions to any 64bit memory BARs the device might have. As a result a domain can still have access any 64bit memory BAR when such device is no longer assigned to the domain. For PV domains the permission leak allo...

ALPINE-CVE-2025-58149

When passing through PCI devices, the detach logic in libxl won't remove access permissions to any 64bit memory BARs the device might have. As a result a domain can still have access any 64bit memory BAR when such device is no longer assigned to the domain. For PV domains the permission leak allo...

CVE-2025-58149

When passing through PCI devices, the detach logic in libxl won't remove access permissions to any 64bit memory BARs the device might have. As a result a domain can still have access any 64bit memory BAR when such device is no longer assigned to the domain. For PV domains the permission leak allo...

CVE-2025-58149

When passing through PCI devices, the detach logic in libxl won't remove access permissions to any 64bit memory BARs the device might have. As a result a domain can still have access any 64bit memory BAR when such device is no longer assigned to the domain. For PV domains the permission leak allo...

Vulnerabilities fixed in Rockwell Automation FactoryTalk

Rockwell Automation has fixed vulnerabilities in FactoryTalk View Machine Edition. The vulnerabilities include an authentication bypass that allows unauthorized access to the PanelView Plus 7 Series B file system and diagnostic information. In addition, there is a path-traversal vulnerability tha...

KVM: arm64: Prevent access to vCPU events before init

...

MH-1M: A 1.34 Million-Sample Comprehensive Multi-Feature Android Malware Dataset for Machine Learning, Deep Learning, Large Language Models, and Threat Intelligence Research

We present MH-1M, one of the most comprehensive and up-to-date datasets for advanced Android malware research. The dataset comprises 1,340,515 applications, encompassing a wide range of features and extensive metadata. To ensure accurate malware classification, we employ the VirusTotal API,...

Malicious code in cordova-plugin-globalization.moment (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 431a9d9edd37d8a5dc80555f3c56e275f5c79162ed66ae419cc7b2450c6ad75c The package cordova-plugin-globalization.moment was found to contain malicious code. Source: ghsa-malware...

Malicious code in tailwindcss-utility (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dc855ea3b9e7fe55f82bc9c967ae3e8789666f58f0a9504975e905a164c5af2 The package tailwindcss-utility was found to contain malicious code. Source: ghsa-malware...

USN-7850-1: Linux kernel vulnerabilities

Jean-Claude Graf, Sandro Rüegge, Ali Hajiabadi, and Kaveh Razavi discovered that the Linux kernel contained insufficient branch predictor isolation between a guest and a userspace hypervisor for certain processors. This flaw is known as VMSCAPE. An attacker in a guest VM could possibly use this t...

CVE-2025-40086

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Don't allow evicting of BOs in same VM in array of VM binds An array of VM binds can potentially evict other buffer objects BOs within the same VM under certain conditions, which may lead to NULL pointer dereferences late...

CVE-2025-40102

CVE-2025-40102 affects the Linux kernel KVM/ARM64: an attacker could access vCPU events before a vCPU is initialized, leading to misinterpretation of uninitialized data and potential exception handling issues. The description and connected advisories (EulerOS kernel advisories) confirm this as a ...

CVE-2025-40086 drm/xe: Don't allow evicting of BOs in same VM in array of VM binds

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Don't allow evicting of BOs in same VM in array of VM binds An array of VM binds can potentially evict other buffer objects BOs within the same VM under certain conditions, which may lead to NULL pointer dereferences late...