PT-2025-38379

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The get line out pfx function may trigger an Oops due to an overflow of a static array when handling more than 8 channels. This issue was reported for MacBookPro 12,1 with a Cirrus codec...

PT-2025-38481

Name of the Vulnerable Software and Affected Versions Dover Fueling Solutions ProGauge MagLink LX4 Devices affected versions not specified Description ProGauge MagLink LX4 devices are susceptible to a time-based issue where they fail to correctly handle Unix time values exceeding a specific point...

MAL-2025-47443 Malicious code in strutil-pro (npm)

The package strutil-pro was found to contain malicious code...

Malicious code in strutil-pro (npm)

The package strutil-pro was found to contain malicious code...

Malicious code in texttweak-pro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 366586b816182bcde0c96a7b2ad0ba3388a1fb49629c3690d7d3c9e41f7b1dae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47208 Malicious code in strmaster-pro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ec25e1bde9380d0a69ddc98b164aeccc89e8b20923ff9c318277f8888894e26 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview texttweak-pro is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2025-47212 Malicious code in texttweak-pro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 366586b816182bcde0c96a7b2ad0ba3388a1fb49629c3690d7d3c9e41f7b1dae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview strmaster-pro is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in strmaster-pro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ec25e1bde9380d0a69ddc98b164aeccc89e8b20923ff9c318277f8888894e26 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview strutils-pro is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2025-47207 Malicious code in stringmaster-pro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 903d35378ef4445c057cd090e43dfa9efdd364da38c3a11b6d993d6b9c91b8b4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview stringmaster-pro is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2025-47209 Malicious code in strutils-pro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67b779503ade21852b913a6c223ddbe8a7f9bc17f95c81dd3f30ccca77ef1816 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in strutils-pro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67b779503ade21852b913a6c223ddbe8a7f9bc17f95c81dd3f30ccca77ef1816 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in stringmaster-pro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 903d35378ef4445c057cd090e43dfa9efdd364da38c3a11b6d993d6b9c91b8b4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47175 Malicious code in basic-validator-pro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a065e2ce3dcaa4245e9bd8873e7878385dbe7a3fe9aa7276ae5ac89686209889 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in basic-validator-pro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a065e2ce3dcaa4245e9bd8873e7878385dbe7a3fe9aa7276ae5ac89686209889 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-45091

Seafile versions 11.0.18-Pro, 12.0.10, and 12.0.10-Pro are vulnerable to a stored Cross-Site Scripting XSS attack. An authenticated attacker can exploit this vulnerability by modifying their username to include a malicious XSS payload in notification and activities...

About the security content of visionOS 26

About the security content of visionOS 26 This document describes the security content of visionOS 26. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...