54 matches found
EUVD-2025-53042
Malicious code in neutral-black-aardwolf npm...
EUVD-2025-53041
Malicious code in neutral-copper-viper npm...
MAL-2025-60938 Malicious code in neutral_kiwi_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22af4b386d830a6903bc19b878b631b39f47562c41e1852b22f4b52fb8a62ec0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Signal in the noise: what hashtags reveal about hacktivism in 2025
What do hacktivist campaigns look like in 2025? To answer this question, we analyzed more than 11,000 posts produced by over 120 hacktivist groups circulating across both the surface web and the dark web, with a particular focus on groups targeting MENA countries. The primary goal of our research...
EUVD-2005-0012
Malware in sbrugna...
kernel: net/iucv: Avoid explicit cpumask var allocation on stack
In the Linux kernel, the following vulnerability has been resolved: net/iucv: Avoid explicit cpumask var allocation on stack For CONFIGCPUMASKOFFSTACK=y kernel, explicit allocation of cpumask variable on stack is not recommended since it can cause potential stack overflow. Instead, kernel code...
CVE-2024-42368
A vulnerability was found in OpenTelemetry, specifically in the github.com/open-telemetry/opentelemetry-collector-contrib/extension/bearertokenauthextension. This flaw impacts anyone using the bearertokenauth server authenticator. Malicious clients with network access to the collector may perform...
SUSE CVE-2024-42093
In the Linux kernel, the following vulnerability has been resolved: net/dpaa2: Avoid explicit cpumask var allocation on stack For CONFIGCPUMASKOFFSTACK=y kernel, explicit allocation of cpumask variable on stack is not recommended since it can cause potential stack overflow. Instead, kernel code...
RLSA-2023:7712 Important: tracker-miners security update
Tracker is a powerful desktop-neutral first class object database, tag/metadata database and search tool. This package contains various miners and metadata extractors for tracker. Security Fixes: tracker-miners: sandbox escape CVE-2023-5557 For more details about the security issues, including th...
RLSA-2023:7732 Important: tracker-miners security update
Tracker is a powerful desktop-neutral first class object database, tag/metadata database and search tool. This package contains various miners and metadata extractors for tracker. Security Fixes: tracker-miners: sandbox escape CVE-2023-5557 For more details about the security issues, including th...
Important: tracker-miners security update
Tracker is a powerful desktop-neutral first class object database, tag/metadata database and search tool. This package contains various miners and metadata extractors for tracker. Security Fixes: tracker-miners: sandbox escape CVE-2023-5557 For more details about the security issues, including th...
Tokens having Fee-On-Transfer are not considered which will make the protocol in retaining less value than expected.
Lines of code Vulnerability details Impact The balance of the custodian Addresses will be smaller than what is expected, making the protocol fail to maintain the delta neutral position. Proof of Concept The function EthenaMinting.sol/transferCollateral is sending the tokens using safeTransferFrom...
Fedora: Security Advisory for tracker-miners (FEDORA-2023-e8f45c67f5)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Siemens Simcenter Femap和Siemens Parasolid 缓冲区错误漏洞
Simcenter Femap is an advanced simulation application for creating, editing, and inspecting finite element models of complex products or systems. parasolid is a 3D geometric modeling tool that supports a variety of techniques, including solid modeling, direct editing, and freeform/sheet modeling...
[SECURITY] Fedora 34 Update: golang-github-googleapis-gnostic-0.5.3-5.fc34
This package contains a Go command line tool which converts JSON and YAML OpenAPI descriptions to and from equivalent Protocol Buffer representations. Protocol Buffers provide a language-neutral, platform-neutral, extensible mechanism for serializing structured data. gnostic's Protocol Buffer...
German Government Warns Against Using Russia's Kaspersky Antivirus Software
Russian cybersecurity firm Kaspersky on Tuesday responded to an advisory released by Germany's Federal Office of Information Security BSI against using the company's security solutions in the country over "doubts about the reliability of the manufacturer." Calling that the decision was made on...
CVE-2021-46151
A vulnerability has been identified in Simcenter Femap V2020.2 All versions, Simcenter Femap V2021.1 All versions. Affected application contains an out of bounds write past the end of an allocated structure while parsing specially crafted NEU files. This could allow an attacker to execute code in...
CVE-2021-46160
A vulnerability has been identified in Simcenter Femap V2020.2 All versions, Simcenter Femap V2021.1 All versions. Affected application contains an out of bounds write past the end of an allocated structure while parsing specially crafted NEU files. This could allow an attacker to execute code in...
[SECURITY] Fedora 34 Update: trojita-0.7.0.1-0.13.20220117git266c757.fc34
Trojit=EF=BF=BD=EF=BF=BD is a IMAP e-mail client which: Enables you to access your mail anytime, anywhere. Does not slow you down. If we can improve the productivity of an e-mail user, we better do. Respects open standards and facilitates modern technologies. We value the vendor-neutrality that...
The 2021 Naughty and Nice Lists: Cybersecurity Edition
Editor’s note: We had planned to publish our Hacky Holidays blog series throughout December 2021 – but then Log4Shell happened, and we dropped everything to focus on this major vulnerability that impacted the entire cybersecurity community worldwide. Now that it’s 2022, we’re feeling in need of...