Malicious code in card-present-integration (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2787c28c7a94244ac05702adeee73ed4e9d417fbb8f17ac667c50d19180340f1 Any computer that has this package installed or running should be considered...

MAL-2025-48355 Malicious code in card-present-integration (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2787c28c7a94244ac05702adeee73ed4e9d417fbb8f17ac667c50d19180340f1 Any computer that has this package installed or running should be considered...

EUVD-2019-0634

Malware in sbrugna...

PT-2025-41074

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.3.0-rc2-eeac8ede1755 Description A flaw exists in the Linux kernel's iommufd subsystem related to the unpinning of pages when an access is present. Specifically, an incorrect calculation of batch last index can...

EUVD-2023-59774

Malicious code in bioql PyPI...

CVE-2025-7825

CVE-2025-7825 affects Schema Plugin For Divi, Gutenberg & Shortcodes (WordPress) up to version 4.3.2. The flaw is Object Instantiation via deserialization of untrusted input through the wpt_schema_breadcrumbs shortcode. Exploitation requires authenticated access at Contributor level or higher; th...

MINI-7W4Q-P7QQ-G5VP

Bulletin has no description...

MINI-XPPJ-Q6QW-RPJ8

Bulletin has no description...

CVE-2025-27033

creationtimestamp| type| source ---|---|--- 2025-09-24 15:53:02+00:00| seen| Telegram/sH1eeqTot2ScnbZa89BcvWV4z6drsDyyZZPtlM8iqM9yKhI...

Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: net: usb: smsc75xx: Limit packet length to skb-len CVE-2023-53125 kernel: usb: dwc3: gadget: check that event count does not exceed event buffer length CVE-2025-37810 kernel: dochangetype...

openSUSE Security Advisory (SUSE-SU-2025:03271-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ALSA-2025:16398 Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: net: usb: smsc75xx: Limit packet length to skb-len CVE-2023-53125 kernel: usb: dwc3: gadget: check that event count does not exceed event buffer length CVE-2025-37810 kernel: dochangetype...

CVE-2025-9083

The Ninja Forms WordPress plugin before 3.11.1 unserializes user input via form field, which could allow Unauthenticated users to perform PHP Object Injection when a suitable gadget is present on the blog...

PT-2025-38211

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A flaw exists in the Linux kernel related to missing p?d leaf definitions for LoongArch architecture. This issue caused a panic during an LTP test case ksm06 specifically at the break...

CVE-2023-53187

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix use-after-free of new block group that became unused If a task creates a new block group and that block group becomes unused before we finish its creation, at btrfscreatependingblockgroups, then when btrfsmarkbgunused ...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. Compromised versions of this package contain a file called bundle.js that exfiltrates secrets from the user's accounts, including credentials and API tokens. It also downloads malicious files and repackages them...

Linux Distros Unpatched Vulnerability : CVE-2017-1000007

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - txAWS all current versions fail to perform complete certificate verification resulting in vulnerability to MitM attacks and information disclosure...

Directory Traversal

Overview sirv is a The optimized & lightweight middleware for serving requests to static assets Affected versions of this package are vulnerable to Directory Traversal via the viaLocal function, which uses a dirname prefix. An attacker can access files outside the intended public directory by...

s390/sclp: Fix SCCB present check

...

CVE-2025-39694 s390/sclp: Fix SCCB present check

In the Linux kernel, the following vulnerability has been resolved: s390/sclp: Fix SCCB present check Tracing code called by the SCLP interrupt handler contains early exits if the SCCB address associated with an interrupt is NULL. This check is performed after physical to virtual address...