7333 matches found
It's a Feature, Not a Bug: Secure and Auditable State Rollback for Confidential Cloud Applications
Replay and rollback attacks threaten cloud application integrity by reintroducing authentic yet stale data through an untrusted storage interface to compromise application decision-making. Prior security frameworks mitigate these attacks by enforcing forward-only state transitions state continuit...
Microsoft Patch Tuesday, November 2025 Edition
Microsoft this week pushed security updates to fix more than 60 vulnerabilities in its Windows operating systems and supported software, including at least one zero-day bug that is already being exploited. Microsoft also fixed a glitch that prevented some Windows 10 users from taking advantage of...
SAP Business Connector Cross-Site Scripting Vulnerability (CNVD-2025-29169)
SAP Business Connector is a middleware from SAP, Germany. A cross-site scripting vulnerability exists in SAP Business Connector due to improper validation of user-supplied input in the PRTG Web Monitor web interface. An attacker could exploit the vulnerability to access or modify information with...
Microsoft Azure Monitor Agent < 1.37.1 RCE (CVE-2025-59504)
The version of Microsoft Azure Monitor Agent installed on the remote host is prior to 1.37.1. It is, therefore, affected by a Heap-based buffer overflow vulnerability which potentially allows an unauthorized attacker to execute code locally. Note that Nessus has not tested for this issue but has...
CVE-2025-40131
In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Fix peer lookup in ath12kdpmonrxdelivermsdu In ath12kdpmonrxdelivermsdu, peer lookup fails because rxcb-peerid is not updated with a valid value. This is expected in monitor mode, where RX frames bypass the regular ...
EUVD-2025-175954
Malicious code in thread-monitor-async-omicron-optimize npm...
EUVD-2025-179690
Malicious code in cluster-wind-fork-view-monitor npm...
EUVD-2025-175700
Malicious code in visualize-visualize-test-assert-monitor npm...
EUVD-2025-177764
Malicious code in monitor-data-uglify-compress-book npm...
Malicious code in cluster-wind-fork-view-monitor (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5047c654c3a5d136a00aaba828d7028a4483a1b72fb55a1d2ffff40fcb45f3ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in notify-simple-theta-monitor-web (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b423312ee55eae4b343bff813661d5a36f603668689ee6635047c8f5c07cf34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178446
Malicious code in import-log-monitor-rho-function npm...
Malicious code in module-user-signal-pi-monitor (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d003271974b574c499702318624e2822ce8f7a3dd2b20b53a8f6f81032634f94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-189117 Malicious code in refactor-cat-epsilon-interface-monitor (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 936aecd5ce3be34ebc0072e78c7c6dce28d37fa9462635513930d07f7ba9df73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176057
Malicious code in tau-import-float-monitor-finally npm...
EUVD-2025-176758
Malicious code in refactor-cat-epsilon-interface-monitor npm...
EUVD-2025-180079
Malicious code in big-monitor-moon-iota-warn npm...
EUVD-2025-177881
Malicious code in meta-monitor-info-import-final npm...