Malicious code in totem-project-website (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d8e4f8906dbfdd2a20cc7cd9a3d92b2b079381e8440c9d434a5ad4767dbc176f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-27673: Use of Persistent Cookies Containing Sensitive Information

Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Cookie Returned in Response Body OVE-20230524-0017...

Linux Distros Unpatched Vulnerability : CVE-2024-23944

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information disclosure in persistent watchers handling in Apache ZooKeeper due to missing ACL check. It allows an attacker to monitor child znodes by attaching ...

Malicious code in analyzer_plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 747a848e1740f146ea6c00cc1bcc451280f4685bd6cf84e635361504de761cfe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Black Basta and Cactus Ransomware Groups Add BackConnect Malware to Their Arsenal

In this blog entry, we discuss how the Black Basta and Cactus ransomware groups utilized the BackConnect malware to maintain persistent control and exfiltrate sensitive data from compromised machines...

Malicious code in mep-widget-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd0595287736afbcd4a5eb42eee88ad6ac547864009d19dfcb6c2ecc108e526c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE CVE-2025-21778

In the Linux kernel, the following vulnerability has been resolved: tracing: Do not allow mmap of persistent ring buffer When trying to mmap a trace instance buffer that is attached to reservemem, it would crash: BUG: unable to handle page fault for address: ffffe97bd00025c8 PF: supervisor read...

CVE-2025-21778

In the Linux kernel, the following vulnerability has been resolved: tracing: Do not allow mmap of persistent ring buffer When trying to mmap a trace instance buffer that is attached to reservemem, it would crash: BUG: unable to handle page fault for address: ffffe97bd00025c8 PF: supervisor read...

DEBIAN-CVE-2025-21778

In the Linux kernel, the following vulnerability has been resolved: tracing: Do not allow mmap of persistent ring buffer When trying to mmap a trace instance buffer that is attached to reservemem, it would crash: BUG: unable to handle page fault for address: ffffe97bd00025c8 PF: supervisor read...

UBUNTU-CVE-2025-21778

In the Linux kernel, the following vulnerability has been resolved: tracing: Do not allow mmap of persistent ring buffer When trying to mmap a trace instance buffer that is attached to reservemem, it would crash: BUG: unable to handle page fault for address: ffffe97bd00025c8 PF: supervisor read...

CVE-2025-21778 tracing: Do not allow mmap() of persistent ring buffer

In the Linux kernel, the following vulnerability has been resolved: tracing: Do not allow mmap of persistent ring buffer When trying to mmap a trace instance buffer that is attached to reservemem, it would crash: BUG: unable to handle page fault for address: ffffe97bd00025c8 PF: supervisor read...

CVE-2025-21778

CVE-2025-21778 (Linux kernel) involves a crash when mmap() is used on a persistent tracing ring buffer that is attached to reserve_mem. The root cause is that the code maps ring buffer pages using virt_to_page() on memory that is vmap()’d, which is invalid for that memory type and can trigger a p...

CVE-2025-21778 tracing: Do not allow mmap() of persistent ring buffer

In the Linux kernel, the following vulnerability has been resolved: tracing: Do not allow mmap of persistent ring buffer When trying to mmap a trace instance buffer that is attached to reservemem, it would crash: BUG: unable to handle page fault for address: ffffe97bd00025c8 PF: supervisor read...

CVE-2025-21778

In the Linux kernel, the following vulnerability has been resolved: tracing: Do not allow mmap of persistent ring buffer When trying to mmap a trace instance buffer that is attached to reservemem, it would crash: BUG: unable to handle page fault for address: ffffe97bd00025c8 PF: supervisor read...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from tracing not properly handling mmap for persistent ring buffers, which could lead to a crash...

CVE-2025-21778: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: tracing: Do not allow mmap of persistent ring buffer When trying to mmap a trace instance buffer that is attached to reservemem, it would crash: BUG: unable to handle page fault for address: ffffe97bd00025c8 PF: supervisor read...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: sftpgo-plugin-geoipfilter, flux-kustomize-controller, gitness, sftpgo-plugin-eventsearch, cadvisor, victoriametrics-operator, k8ssandra-operator, cloudnative-pg, yq, argo-rollouts, kor, newrelic-nri-statsd, aws-network-policy-agent, kafkaexporter, whereabouts,...

CVE-2019-8900

A use-after-free vulnerability in the SecureROM (Boot ROM) of Apple devices with A5 through A11 processing chips (including iPhone 4S through X, certain iPads, Apple Watches, iPod Touches, and Apple TVs) allows unauthenticated local attackers to execute arbitrary code. Exploitation requires physi...

Malicious code in sally-fn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d8f992872ff1926200839cd344c09dfc137f063e5f7e5f87f54d62b1d758202 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2025-7427

Name of the Vulnerable Software and Affected Versions IBM OpenPages with Watson versions 8.3 through 9.0 Description The chat feature in IBM OpenPages with Watson enables the application to establish a session when a user logs in and uses the chat. However, the chat session remains active after t...