CVE-2025-49133 Libtpms contains a possible out-of-bound access and abort due to HMAC signing issue

Libtpms is a library that targets the integration of TPM functionality into hypervisors, primarily into Qemu. Libtpms, which is derived from the TPM 2.0 reference implementation code published by the Trusted Computing Group, is prone to a potential out of bounds OOB read vulnerability. The...

New PathWiper Data Wiper Malware Disrupts Ukrainian Critical Infrastructure in 2025 Attack

A critical infrastructure entity within Ukraine was targeted by a previously unseen data wiper malware named PathWiper, according to new findings from Cisco Talos. "The attack was instrumented via a legitimate endpoint administration framework, indicating that the attackers likely had access to t...

Newly identified wiper malware “PathWiper” targets critical infrastructure in Ukraine

Cisco Talos observed a destructive attack on a critical infrastructure entity within Ukraine, using a previously unknown wiper we are calling "PathWiper". The attack was instrumented via a legitimate endpoint administration framework, indicating that the attackers likely had access to the...

Malicious code in new-presentation-api (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 542a173ba956753bc3d1570cb407b09ae92c7d5690bfacf0aa1bc2aa01f94990 Any computer that has this package installed or running should be considered...

Malicious code in mirror-logger-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 92a6abc2d944966bb6b2706869d9fd329de99a9fbf60b2f594ba60b61dd3cf30 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-48153

DrayTek Vigor3900 1.5.1.3 allows attackers to inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the getsubconfig function...

CVE-2024-51255

DrayTek Vigor3900 1.5.1.3 allows attackers to inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the ruequestcertificate function...

CVE-2024-51298

In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the doGRETunnel function...

CVE-2023-7009

Some Sciener-based locks support plaintext message processing over Bluetooth Low Energy, allowing unencrypted malicious commands to be passed to the lock. These malicious commands, less then 16 bytes in length, will be processed by the lock as if they were encrypted communications. This can be...

Langroid has a Code Injection vulnerability in LanceDocChatAgent through vector_store

Summary LanceDocChatAgent uses pandas eval through computefromdocs: https://github.com/langroid/langroid/blob/18667ec7e971efc242505196f6518eb19a0abc1c/langroid/vectorstore/base.pyL136-L150 As a result, an attacker may be able to make the agent run malicious commands through QueryPlan.dataframecal...

CVE-2025-46725

Langroid (Python framework for LLM-powered apps) contains a code execution vulnerability in the LanceDocChatAgent prior to version 0.53.15, caused by the use of pandas.eval() in the compute_from_docs() path. An attacker could cause the agent to execute malicious commands via crafted input and rel...

Duping Cloud Functions: An emerging serverless attack vector

Summary and background Google Cloud Platform GCP Cloud Functions are event-triggered, serverless functions that automatically scale and execute code in response to specific events like Hypertext Transfer Protocol HTTP requests or data changes. Tenable Research published an article discussing a...

PT-2025-22295

Name of the Vulnerable Software and Affected Versions Hubble CLI versions prior to 1.17.2 Description Hubble is a fully distributed networking and security observability platform for cloud native workloads. A network attacker could inject malicious control characters into Hubble CLI terminal...

Malicious code in compensation-calculator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ddf28334129095b5b6e45372c4624f6813fe73958398e24474dc3a1c0e1d18d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in developer-bridge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 13d76633d0e28457718da249adad23171e53973864ef3e53406c78ced005d3af The OpenSSF Package Analysis project identified 'developer-bridge' @ 2.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in qlkube-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f3dbf8b78dfd8c62a064365429aad674f445926ed19a43a3ac031b864d3fe2c1 The OpenSSF Package Analysis project identified 'qlkube-docs' @ 3.0.0 npm as malicious. It is considered malicious because: - The package execut...

Malicious code in odin-backoffice-starter-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2982abf6f95afddda54146444463c8334c7677ea0b5d8fb203c536dc54470188 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @dm3-org/dm3-lib-shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fdc7c9221213814713a1de5a0f5527c3975c0942520d64147788ea8869d8efe8 The OpenSSF Package Analysis project identified '@dm3-org/dm3-lib-shared' @ 1.7.2 npm as malicious. It is considered malicious because: - The...

Malicious code in font-impact (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 404db1db5b86b6ce6ed40f2169b12625d010c431f4610548c55dc053f5d43d69 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ui-platform-elements (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f8e52fc989383c2ba9b074173be333530aa86b44f1fa38e4a7b156ab1bc4fc6e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...