Malicious code in @ensdomains/op-resolver-contracts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6def95ef69b4dd7da38ca7a697fb0eabff2ae2fe2eff4f31957254a207346bd0 The package @ensdomains/op-resolver-contracts was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-198976

Malicious code in @ensdomains/op-resolver-contracts npm...

Malicious code in cache-ophiuchus-node-config-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0b0d81771865bb974c560ebcce579067abe56418b4aab7d7db4414d5caf5ac0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rimraf-ophiuchus-supervisor-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62d161a75cd81a68198bf33a6437867de29c56abdc2d8d0f24e783ec8aa5a713 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

GHSA-FJ2X-735W-74VQ vulnerabilities

Vulnerabilities for packages: op-geth...

GHSA-FJ2X-735W-74VQ vulnerabilities

Vulnerabilities for packages: op-geth...

UBUNTU-CVE-2025-40050

In the Linux kernel, the following vulnerability has been resolved: bpf: Skip scalar adjustment for BPFNEG if dst is a pointer In checkaluop, the verifier currently calls checkregarg and adjustscalarminmaxvals unconditionally for BPFNEG operations. However, if the destination register holds a...

CVE-2025-40050

CVE-2025-40050 refers to a Linux kernel BPF verifier fix: in check_alu_op(), the code previously performed unconditional scalar adjustments for BPF_NEG; if the destination is a pointer, those scalar adjustments are unnecessary and could be incorrect. The patch adds a check to skip adjustment logi...

CVE-2025-12258

A vulnerability was detected in TOTOLINK A3300R 17.0.0cu.557B20221024. Impacted is the function setOpModeCfg of the file /cgi-bin/cstecgi.cg of the component POST Parameter Handler. The manipulation of the argument opmode results in stack-based buffer overflow. The attack may be performed from...

EUVD-2025-36093

Malicious code in op-cli-installer npm...

MAL-2025-48776 Malicious code in op-cli-installer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f4b3ae42ff2507fbd7e994719a2e19d362d037ccbce81544f7617a07bcf6468b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in op-cli-installer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f4b3ae42ff2507fbd7e994719a2e19d362d037ccbce81544f7617a07bcf6468b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview op-cli-installer is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

PT-2025-43917

Name of the Vulnerable Software and Affected Versions TOTOLINK A3300R version 17.0.0cu.557 B20221024 Description A flaw exists in TOTOLINK A3300R that could lead to a stack-based buffer overflow. The issue is located in the setOpModeCfg function within the /cgi-bin/cstecgi.cg file, specifically...

MAL-2025-48857 Malicious code in op-frontend-commons (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in op-frontend-commons (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2023-53721 wifi: ath12k: Fix a NULL pointer dereference in ath12k_mac_op_hw_scan()

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Fix a NULL pointer dereference in ath12kmacophwscan In ath12kmacophwscan, the return value of kzalloc is directly used in memcpy, which may lead to a NULL pointer dereference on failure of kzalloc. Fix this bug by...

CVE-2025-39975

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix wrong index reference in smb2compoundop In smb2compoundop, the loop that processes each command's response uses wrong indices when accessing response bufferes. This incorrect indexing leads to improper handling o...

CVE-2025-39975

Concrete details available: The CVE-2025-39975 issue affects the Linux kernel SMB client, specifically smb2_compound_op() in fs/smb/client/smb2inode.c. The bug arises from incorrect indexing when processing each command’s response, causing improper handling of command results and, in some cases, ...

Linux Distros Unpatched Vulnerability : CVE-2025-39921

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - spi: microchip-core-qspi: stop checking viability of op-maxfreq in supportsop callback In commit 13529647743d9 spi: microchip-core-qspi: Support per spi-mem...