EUVD-2022-43981

Malicious code in bioql PyPI...

Malicious code in @zalastax/nolb-node-ra (npm)

The package @zalastax/nolb-node-ra was found to contain malicious code...

Malicious code in ra-data-google-sheets (npm)

The package ra-data-google-sheets was found to contain malicious code...

MAL-2025-12640 Malicious code in @zalastax/nolb-node-ra (npm)

The package @zalastax/nolb-node-ra was found to contain malicious code...

MAL-2025-31461 Malicious code in ra-data-google-sheets (npm)

The package ra-data-google-sheets was found to contain malicious code...

CVE-2025-20268: Improper Handling of Values

A vulnerability in the Geolocation-Based Remote Access RA VPN feature of Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass configured policies to allow or deny HTTP connections based on a country or region. This vulnerability exists becaus...

CVE-2025-38343 wifi: mt76: mt7996: drop fragments with multicast or broadcast RA

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: drop fragments with multicast or broadcast RA IEEE 802.11 fragmentation can only be applied to unicast frames. Therefore, drop fragments with multicast or broadcast RA. This patch addresses vulnerabilities suc...

CVE-2025-38343

CVE-2025-38343 relates to the Linux kernel wifi mt76 mt7996 handling of 802.11 fragmentation. A patch ensures multicast/broadcast frames are not fragmented, since IEEE 802.11 fragmentation is limited to unicast frames; this addresses the underlying issue referenced by CVE-2020-26145. Connected so...

CVE-2022-40711

PrimeKey EJBCA 7.9.0.2 Community allows stored XSS in the End Entity section. A user with the RA Administrator role can inject an XSS payload to target higher-privilege users...

Malware in wdpr-ra-javascript-native-bridge

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in wdpr-ra-javascript-native-bridge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a2e2b40d8e2ee8d311cf5e007c4480255217d359bdde3c42115e42ad42f35dbb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wdpr-ra-hybrid-content-router (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-2916 Malicious code in wdpr-ra-hybrid-content-router (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-2915 Malicious code in wdpr-ra-hybrid-cli (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in wdpr-ra-hybrid-cli (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in wdpr-ra-node-mpropz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 06f859971691a195993b3391bbb8b6a83e269eb750856157e81f65d66c2625cf The OpenSSF Package Analysis project identified 'wdpr-ra-node-mpropz' @ 999.999.999 npm as malicious. It is considered malicious because: - The...

MAL-2025-1527 Malicious code in wdpr-ra-node-mpropz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 06f859971691a195993b3391bbb8b6a83e269eb750856157e81f65d66c2625cf The OpenSSF Package Analysis project identified 'wdpr-ra-node-mpropz' @ 999.999.999 npm as malicious. It is considered malicious because: - The...

RA World Ransomware Attack in South Asia Links to Chinese Espionage Toolset

An RA World ransomware attack in November 2024 targeting an unnamed Asian software and services company involved the use of a malicious tool exclusively used by China-based cyber espionage groups, raising the possibility that the threat actor may be moonlighting as a ransomware player in an...

CVE-2024-11166: External Control of System or Configuration Setting

For TCAS II systems using transponders compliant with MOPS earlier than RTCA DO-181F, an attacker can impersonate a ground station and issue a Comm-A Identity Request. This action can set the Sensitivity Level Control SLC to the lowest setting and disable the Resolution Advisory RA, leading to a...

PT-2024-41817

Уязвимость функции page cache ra order модуля mm/readahead.c подсистемы управления памятью ядра операционной системы Linux связана с некорректным преобразованием или приведением типов. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...