MAL-2025-55017 Malicious code in @mts-ds/icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0112c17ea22a1384f1973813b785859e61805e29b2027b835dfa81c022bd846e The package @mts-ds/icons was found to contain malicious code. Source: ghsa-malware b51afa604dd61e1408dc95f628c00b6b379d7191214d2b77258a2a97f0cb38e4...

MAL-2025-49729 Malicious code in dandh811 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19da138a15aafecca5e956762f4d1408b284e452f2afc522d2fe1e8f9549a95d The package dandh811 was found to contain malicious code. Source: ghsa-malware ff1136cf9e4afdd278837f2b23779df88ca82c593d3a3e063dab99161adc3f56 Any...

PT-2025-46585

Name of the Vulnerable Software and Affected Versions rust-sudo-rs affected versions not specified Description A security update is available. The package rust-sudo-rs in Debian is affected by vulnerabilities. Recommendations At the moment, there is no information about a newer version that...

EUVD-2025-38445

A vulnerability was identified in TOZED ZLT T10 T10PLUS3.04.15. The affected element is an unknown function of the file /reqproc/procpost of the component Reboot Handler. Such manipulation leads to denial of service. Access to the local network is required for this attack to succeed. The exploit ...

Malicious code in something-not-in-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b66e3cd1ebec81031c4f6febdaed1a529d0bc6cd8b255bbd98f2f8bda0a92eb The package something-not-in-cache was found to contain malicious code. Source: ghsa-malware...

MAL-2025-49435 Malicious code in something-not-in-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b66e3cd1ebec81031c4f6febdaed1a529d0bc6cd8b255bbd98f2f8bda0a92eb The package something-not-in-cache was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-38395

Malicious code in something-not-in-cache npm...

BIT-MLFLOW-2025-11201 MLflow Tracking Server Model Creation Directory Traversal Remote Code Execution Vulnerability

MLflow Tracking Server Model Creation Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MLflow Tracking Server. Authentication is not required to exploit this vulnerability. The specific flaw...

CVE-2025-12488

The CVE-2025-12488 issue affects oobabooga text-generation-webui. The vulnerability is caused by improper validation of the trust_remote_code argument in the /load endpoint, allowing an attacker to load a model with untrusted input and execute arbitrary code in the service account context. Auth i...

kernel: ethtool: check device is present when getting link settings

A flaw was found in ethtool in the Linux kernel, where sysfs reader getting link settings can attempt to read the device state on a device that is not present, leading to a crash...

CVE-2025-47151

A type confusion vulnerability exists in the lassonodeimplinitfromxml functionality of Entr'ouvert Lasso 2.8.2 and prior. A specially crafted SAML response can lead to an arbitrary code execution. An attacker can send a malformed SAML response to trigger this vulnerability. Mitigation Mitigation...

EUVD-2025-37970

Not used...

EUVD-2025-37965

Not used...

EUVD-2025-37966

Not used...

EUVD-2025-37967

Not used...

EUVD-2025-37969

Not used...

EUVD-2025-37968

Not used...

EUVD-2025-37963

Not used...

EUVD-2025-37964

Not used...

PT-2025-45377

Name of the Vulnerable Software and Affected Versions Rubygem MQTT affected versions not specified Description The Rubygem MQTT package did not have hostname validation enabled by default, which could allow for a Man-in-the-Middle MITM attack. This means a malicious actor could potentially...