One Detector Fits All: Robust and Adaptive Detection of Malicious Packages from PyPI to Enterprises

The rise of supply chain attacks via malicious Python packages demands robust detection solutions. Current approaches, however, overlook two critical challenges: robustness against adversarial source code transformations and adaptability to the varying false positive rate FPR requirements of...

PT-2025-41: The Twinkly Light Tree 3D firmware uses a vulnerable Blufi library

The vulnerability was identified in the Twinkly Light Tree 3D firmware, 2.8.18. An attacker within Bluetooth range, with physical access to a device running firmware prior to 2.9.0 and provisioning mode manually re-enabled could, in an attack scenario, interfere with the provisioning exchange and...

CVE-2021-4467

Positive Technologies MaxPatrol 8 and XSpider contain a remote denial-of-service vulnerability in the client communication service on TCP port 2002. The service generates a new session identifier for each incoming connection without adequately limiting concurrent requests. An unauthenticated remo...

CVE-2021-4467 Positive Technologies MaxPatrol 8 & XSpider Remote DoS

Positive Technologies MaxPatrol 8 and XSpider contain a remote denial-of-service vulnerability in the client communication service on TCP port 2002. The service generates a new session identifier for each incoming connection without adequately limiting concurrent requests. An unauthenticated remo...

CVE-2021-4467

CVE-2021-4467 affects Positive Technologies MaxPatrol 8 and XSpider, where the client communication service listening on TCP port 2002 accepts new session IDs per connection without adequately throttling concurrent requests. An unauthenticated attacker could issue repeated HTTPS requests to cause...

Positive MaxPatrol 8和Positive XSpider 安全漏洞

Positive MaxPatrol 8 and Positive XSpider are both products of the Russian company Positive.Positive MaxPatrol 8 is a vulnerability management platform.Positive XSpider is a network vulnerability scanner. A security vulnerability exists in Positive MaxPatrol 8 and Positive XSpider that stems from...

PT-2026-1239

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the s390/fpu component related to false-positive Kernel Memory Sanitizer KMSAN reports within the fpu vstl function. This occurs because the 'vstl'...

EUVD-2025-75998

Malicious code in positivereptile-smiletea npm...

EUVD-2025-80919

Malicious code in positiveoctopus0xrequest npm...

EUVD-2025-68526

Malicious code in positiveechidnaz3n npm...

EUVD-2025-62612

Malicious code in positiveanteaterz3n npm...

MAL-2025-95942 Malicious code in positive_anteater_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea302527d65c694e160a11f84809625a0ffb4ec31721fca0b3472d483364ec44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-80650 Malicious code in positive_woodpecker_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 748e95f48aca40d60f37cb6e2621aab130b3665f87ce74426d64b6158fa4f699 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-52710

Malicious code in positive-tan-takin npm...

EUVD-2025-52712

Malicious code in positive-lime-panther npm...

EUVD-2025-52713

Malicious code in positive-harlequin-viper npm...

EUVD-2025-52714

Malicious code in positive-harlequin-mackerel npm...

EUVD-2025-52711

Malicious code in positive-scarlet-eagle npm...

EUVD-2025-52715

Malicious code in positive-amethyst-pigeon npm...

Siemens SIMATIC Devices Return of Wrong Status Code (CVE-2024-26629)

nfsd: The test on socount in nfsd4releaselockowner is potentially harmful. It can transiently return a false positive resulting in a return of NFS4ERRLOCKSHELD when in fact no locks are held. This is clearly a protocol violation and with the Linux NFS client it can cause incorrect behaviour. This...