3211 matches found
Malicious code in kc-next (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32088d023faff39ca532f60b6fefa143e98da4ff439ecf1d9922cbb7f5f669ef The package kc-next was found to contain malicious code. Source: ghsa-malware 750f8ce90382db0d1c42cc21bef3cce0f5220048311c62bff8fb2928e2b936c6 Any...
MAL-2025-190574 Malicious code in kc-next (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32088d023faff39ca532f60b6fefa143e98da4ff439ecf1d9922cbb7f5f669ef The package kc-next was found to contain malicious code. Source: ghsa-malware 750f8ce90382db0d1c42cc21bef3cce0f5220048311c62bff8fb2928e2b936c6 Any...
Malicious code in gbiz-next (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 553cbc6a459ec9d1b6f955fcef3ae6eb80c745689510710611df3d9d6527c2fd The package gbiz-next was found to contain malicious code. Source: ghsa-malware c8391a7e1c2a64a130ced055b9f21e596e7bde4ba799add2094c42c4bf63613b Any...
MAL-2025-190573 Malicious code in gbiz-next (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 553cbc6a459ec9d1b6f955fcef3ae6eb80c745689510710611df3d9d6527c2fd The package gbiz-next was found to contain malicious code. Source: ghsa-malware c8391a7e1c2a64a130ced055b9f21e596e7bde4ba799add2094c42c4bf63613b Any...
[SECURITY] Fedora 43 Update: bind9-next-9.21.14-2.fc43
BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names to IP addresses; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server ...
EUVD-2025-176893
Malicious code in puppeteer-module-sails-nextjs npm...
EUVD-2025-177200
Malicious code in phoenix-apollo-nextjs-nova npm...
EUVD-2025-124498
Malicious code in nextjs-procyon-postcss-chai npm...
kernel: smb: client: Add check for next_buffer in receive_encrypted_standard()
In the Linux kernel, the following vulnerability has been resolved: smb: client: Add check for nextbuffer in receiveencryptedstandard Add check for the return value of cifsbufget and cifssmallbufget in receiveencryptedstandard to prevent null pointer dereference...
kernel: sched_ext: bpf_iter_scx_dsq_new() should always initialize iterator
In the Linux kernel, the following vulnerability has been resolved: schedext: bpfiterscxdsqnew should always initialize iterator BPF programs may call next and destroy on BPF iterators even after new returns an error value e.g. bpfforeach macro ignores error returns from new. bpfiterscxdsqnew cou...
kernel: smb: client: Add check for next_buffer in receive_encrypted_standard()
In the Linux kernel, the following vulnerability has been resolved: smb: client: Add check for nextbuffer in receiveencryptedstandard Add check for the return value of cifsbufget and cifssmallbufget in receiveencryptedstandard to prevent null pointer dereference...
CVE-2025-63288
In Open5GS 2.7.6, AMF crashes when receiving an abnormal NGSetupRequest message, resulting in denial of service...
Malicious code in frontend-vue-next (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ecba1e4c2f32734e178b8a3697ed962053354867af75787af708f92f0da2474 package.json declares "preinstall": "node index.js", causing index.js to execute automatically on npm install. The script collects system identity...
EUVD-2025-38420
Malicious code in frontend-vue-next npm...
MAL-2025-49410 Malicious code in frontend-vue-next (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ecba1e4c2f32734e178b8a3697ed962053354867af75787af708f92f0da2474 package.json declares "preinstall": "node index.js", causing index.js to execute automatically on npm install. The script collects system identity...
Fedora 42 : bpfman (2025-0753bddd6c)
The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-0753bddd6c advisory. This update fixes CVE-2025-0977 RUSTSEC-2025-0004, a use-after-free vulnerability in the Rust openssl crate's ssl::selectnextproto function. The openssl crat...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988793)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988793 advisory. In the Linux kernel, the following vulnerability has been resolved: serial: core: fix transmit-buffer reset and memleak Commit 761ed4a94582 tty: serialcore: convert...
SUSE CVE-2025-40038
In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Skip fastpath emulation on VM-Exit if next RIP isn't valid Skip the WRMSR and HLT fastpaths in SVM's VM-Exit handler if the next RIP isn't valid, e.g. because KVM is running with nrips=false. SVM must decode and emulate...
D-Link DIR600L formDeviceReboot function buffer overflow vulnerability
D-Link DIR600L is a wireless router for home users, belonging to D-Link's "Cloud Router" series, with an external antenna design, supporting 802.11n standard, with a maximum wireless transmission rate of 150Mbps. The D-Link DIR600L suffers from a buffer overflow vulnerability, which is caused by...