EUVD-2025-103046

Malicious code in permanentchameleonz3n npm...

EUVD-2025-89491

Malicious code in permanenthedgehogz3n npm...

EUVD-2025-76039

Malicious code in permanentxerinae-excellentdev npm...

MAL-2025-107033 Malicious code in permanent_xerinae-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b2eafaa8b954c74d02382021c67032f359aaf72a752f6b1b249b36cb9922989 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-78623

Malicious code in permanentcapybaraz3n npm...

EUVD-2025-78622

Malicious code in permanentdogz3n npm...

EUVD-2025-80953

Malicious code in permanentspoonbill0xrequest npm...

EUVD-2025-62678

Malicious code in permanenthippopotamusz3n npm...

EUVD-2025-62679

Malicious code in permanentflyz3n npm...

EUVD-2025-67794

Malicious code in permanentmockingbirdz3n npm...

EUVD-2025-52780

Malicious code in permanent-orange-ox npm...

EUVD-2025-52781

Malicious code in permanent-ivory-unicorn npm...

Inefficient Algorithmic Complexity

Overview Django is a high-level Python Web framework that encourages rapid development and clean, pragmatic design. Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity via the HttpResponseRedirect and HttpResponsePermanentRedirect functions when processing input...

Malicious code in no-floating-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 06870b1f839041e943ec19a9c8930d03b27e9fdfef7f3b79fe0eff1545dec2ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2025-43731

Name of the Vulnerable Software and Affected Versions BLU-IC2 versions through 1.19.5 BLU-IC4 versions through 1.19.5 Description A malicious or malformed application can be installed but not uninstalled, potentially leading to unavailability of the system. This issue creates a permanent...

SUSE CVE-2025-11568

A data corruption vulnerability has been identified in the luksmeta utility when used with the LUKS1 disk encryption format. An attacker with the necessary permissions can exploit this flaw by writing a large amount of metadata to an encrypted device. The utility fails to correctly validate the...

CVE-2025-11568

A data corruption vulnerability has been identified in the luksmeta utility when used with the LUKS1 disk encryption format. An attacker with the necessary permissions can exploit this flaw by writing a large amount of metadata to an encrypted device. The utility fails to correctly validate the...

AZL-72866 CVE-2025-11568 affecting package luksmeta 9-8

A data corruption vulnerability has been identified in the luksmeta utility when used with the LUKS1 disk encryption format. An attacker with the necessary permissions can exploit this flaw by writing a large amount of metadata to an encrypted device. The utility fails to correctly validate the...

UBUNTU-CVE-2025-11568

A data corruption vulnerability has been identified in the luksmeta utility when used with the LUKS1 disk encryption format. An attacker with the necessary permissions can exploit this flaw by writing a large amount of metadata to an encrypted device. The utility fails to correctly validate the...

CVE-2025-11568 Luksmeta: data corruption when handling luks1 partitions with luksmeta

A data corruption vulnerability has been identified in the luksmeta utility when used with the LUKS1 disk encryption format. An attacker with the necessary permissions can exploit this flaw by writing a large amount of metadata to an encrypted device. The utility fails to correctly validate the...