MAL-2025-176075 Malicious code in miftah-miftah29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8248152ed20d6b7e62d52e2a4fc6ea510654c96ef5ccc2c30b254c8b73f0f8ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-64057 Malicious code in lina-takokak81-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e5a3616b83a006879574494717e05af4e50e689f8a0a11743d2842599dd59b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2019-18189

Malware in sbrugna...

PT-2020-15012 · Fnet · Fnet

Name of the Vulnerable Software and Affected Versions: FNET versions through 4.6.4 Description: An issue was discovered in the code that initializes the DNS client interface structure, where it does not set sufficiently random transaction IDs, always setting them to 1 in fnet dns poll in fnet...

UBUNTU-CVE-2019-11690

genranduuid in lib/uuid.c in Das U-Boot v2014.04 through v2019.04 lacks an srand call, which allows attackers to determine UUID values in scenarios where CONFIGRANDOMUUID is enabled, and Das U-Boot is relied upon for UUID values of a GUID Partition Table of a boot device...

UBUNTU-CVE-2014-4883

resolv.c in the DNS resolver in uIP, and dns.c in the DNS resolver in lwIP 1.4.1 and earlier, does not use random values for ID fields and source ports of DNS query packets, which makes it easier for man-in-the-middle attackers to conduct cache-poisoning attacks via spoofed reply packets...