HSEC-2024-0002 out-of-bounds write when there are many bzip2 selectors

out-of-bounds write when there are many bzip2 selectors A malicious bzip2 payload may produce a memory corruption resulting in a denial of service and/or remote code execution. Network services or command line utilities decompressing untrusted bzip2 payloads are affected. Note that the exploitati...

MAL-2025-186554 Malicious code in dependencies-dynamo-optimize-css-assets-webpack-plugin-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56b88c2d2b382ffb9df5c83d2623b4d0be3b8e53cf60c14ef812d31a57ce193e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187534 Malicious code in iota-betelgeuse-rest-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd0e703cad5e264ff6cd15d8e11e8c48ee2bca0d47dc24231d6c328716e26e2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-33202

NVIDIA Triton Inference Server for Linux and Windows contains a vulnerability where an attacker could cause a stack overflow by sending extra-large payloads. A successful exploit of this vulnerability might lead to denial of service...

Siemens SIMATIC S7-1500 Out-of-bounds Read (CVE-2019-3860)

An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SFTP packets with empty payloads are parsed. A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the client memory. This plugin only works with Tenable.ot. Please visit...

Malicious code in flights-lutag-idosabhao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e879cb9d009d6562bae99863c7ab896199779961fac7bfabf1f0ede655fc545 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176338 Malicious code in nokire-kushina18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92242dd1ada8e4af822ad9cea019ba62a313a664a23088f06a9bfb975c97a1b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parwo-poke44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d640c309079201380dd671eecea1d5ae9003193d7ede2e384164bbb633bd02f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsnu-lotaizmi-kulaksimu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38f814632638384ae48fd50a1eb490db70fa5d9b9651f4ce9fc09ca3eb27b504 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152153 Malicious code in akabia-aliguamafi-agoubuva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3a44d16e0cf5035cdd18926eaf66979b958b56fdc49123db5eeb86ecd066f2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127278 Malicious code in ida-ketoprak2-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e42b21831eb9654b711312a96ce8f22a604f72c67eedd5b73feb184920b7534 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-93535

NVIDIA Triton Inference Server for Linux and Windows contains a vulnerability where an attacker could cause a stack overflow by sending extra-large payloads. A successful exploit of this vulnerability might lead to denial of service...

CVE-2025-33202

NVIDIA Triton Inference Server for Linux and Windows contains a vulnerability where an attacker could cause a stack overflow by sending extra-large payloads. A successful exploit of this vulnerability might lead to denial of service...

CVE-2025-33202

NVIDIA Triton Inference Server for Linux and Windows contains a vulnerability where an attacker could cause a stack overflow by sending extra-large payloads. A successful exploit of this vulnerability might lead to denial of service...

CVE-2025-33202

NVIDIA Triton Inference Server for Linux and Windows contains a vulnerability where an attacker could cause a stack overflow by sending extra-large payloads. A successful exploit of this vulnerability might lead to denial of service...

CVE-2025-33202

NVIDIA Triton Inference Server for Linux and Windows contains a vulnerability where an attacker could cause a stack overflow by sending extra-large payloads. A successful exploit of this vulnerability might lead to denial of service...

CVE-2025-33202

NVIDIA Triton Inference Server (Linux/Windows) is affected by CVE-2025-33202, a stack overflow triggered by extra-large payloads that can lead to denial of service. Public docs detail a network-exploitable flaw (CVSS v3.1: AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) with base score 6.5. NVIDIA’s advisor...

Android Trojan 'Fantasy Hub' Malware Service Turns Telegram Into a Hub for Hackers

Cybersecurity researchers have disclosed details of a new Android remote access trojan RAT called Fantasy Hub that's sold on Russian-speaking Telegram channels under a Malware-as-a-Service MaaS model. According to its seller, the malware enables device control and espionage, allowing threat actor...

EUVD-2025-74048

The WP Go Maps formerly WP Google Maps WordPress plugin before 9.0.48 does not sanitize user input provided via an AJAX action, allowing unauthenticated users to store XSS payloads which are later retrieved from another AJAX call and output unescaped...

MAL-2025-85756 Malicious code in galih-lumpur2-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dffd18a9671feb3fa0cd12c0e135d91a0d6745c7059a59ce86fc04c4f2709dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...