123-x-ed-eied (>=1.0.5, <=1.0.6), @0xdeepak/wallets (0.0.2) +813 more potentially affected by CVE-2025-29927 via next (>=11.1.4, <=12.3.4)

next NPM version =11.1.4, =1.0.5, =1.1.7, =1.0.0, =1.1.1, =1.0.39, =0.0.0, =0.0.2-beta.0, =0.0.2-beta.0, =1.0.0, =1.6.1 and more Source cves: CVE-2025-29927 Source advisory: MEND:CVE-2025-29927...

next-mobility.de Cross Site Scripting vulnerability OBB-4038221

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Malicious code in vscode-typescript-next (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9162b86c7482b306e1b5ef08b17ce67a14c45fbb9ae585e6113b17174fb27409 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2584 Malicious code in vscode-typescript-next (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9162b86c7482b306e1b5ef08b17ce67a14c45fbb9ae585e6113b17174fb27409 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-2239

Generation of Error Message Containing Sensitive Information vulnerability in Hillstone Networks Hillstone Next Generation FireWall.This issue affects Hillstone Next Generation FireWall: from 5.5R8P1 before 5.5R8P23...

Malicious code in app-bridge-next (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 933905ebdc76407c4ff291a44e25a77e8a04375225a902461a37355fbc45e0d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2361 Malicious code in app-bridge-next (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 933905ebdc76407c4ff291a44e25a77e8a04375225a902461a37355fbc45e0d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

ipv6: Fix soft lockups in fib6_select_path under high next hop churn

...

CVE-2025-2239 Absolute Path Disclosure Vulnerability in Hillstone Next Generation FireWall

Generation of Error Message Containing Sensitive Information vulnerability in Hillstone Networks Hillstone Next Generation FireWall.This issue affects Hillstone Next Generation FireWall: from 5.5R8P1 before 5.5R8P23...

CVE-2025-2239 Absolute Path Disclosure Vulnerability in Hillstone Next Generation FireWall

Generation of Error Message Containing Sensitive Information vulnerability in Hillstone Networks Hillstone Next Generation FireWall.This issue affects Hillstone Next Generation FireWall: from 5.5R8P1 before 5.5R8P23...

CVE-2025-21844 smb: client: Add check for next_buffer in receive_encrypted_standard()

In the Linux kernel, the following vulnerability has been resolved: smb: client: Add check for nextbuffer in receiveencryptedstandard Add check for the return value of cifsbufget and cifssmallbufget in receiveencryptedstandard to prevent null pointer dereference...

PT-2025-11029

Name of the Vulnerable Software and Affected Versions: Hillstone Next Generation FireWall versions 5.5R8P1 through 5.5R8P22 Description: The issue is related to the generation of error messages containing sensitive information. Recommendations: For Hillstone Next Generation FireWall versions...

CVE-2025-2239: Generation of Error Message Containing Sensitive Information

Generation of Error Message Containing Sensitive Information vulnerability in Hillstone Networks Hillstone Next Generation FireWall.This issue affects Hillstone Next Generation FireWall: from 5.5R8P1 before 5.5R8P23...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel suffers from a null pointer dereference vulnerability that stems from a failure to check the nextbuffer return value, which could result in a null pointer...

PYSEC-2025-158

A vulnerability classified as critical was found in Open Asset Import Library Assimp 5.4.3. This vulnerability affects the function Assimp::GetNextLine in the library ParsingUtils.h of the component File Handler. The manipulation leads to stack-based buffer overflow. The attack can be initiated...

PYSEC-2025-158

A vulnerability classified as critical was found in Open Asset Import Library Assimp 5.4.3. This vulnerability affects the function Assimp::GetNextLine in the library ParsingUtils.h of the component File Handler. The manipulation leads to stack-based buffer overflow. The attack can be initiated...

UBUNTU-CVE-2025-2151

A vulnerability classified as critical was found in Open Asset Import Library Assimp 5.4.3. This vulnerability affects the function Assimp::GetNextLine in the library ParsingUtils.h of the component File Handler. The manipulation leads to stack-based buffer overflow. The attack can be initiated...

Malicious code in next-tab (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5cabe10794524f4f4cd9eaef39f3eb0a9ac3a110d7d5d5c4f58ff804630ec097 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2213 Malicious code in next-tab (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5cabe10794524f4f4cd9eaef39f3eb0a9ac3a110d7d5d5c4f58ff804630ec097 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: use timestamp to check for set element timeout CVE-2024-27397 In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: prefer nftchainvalidate CVE-2024-41042 In...