39507 matches found
EUVD-2025-37946
Malicious code in rbx-reader-ts npm...
Malicious code in rbx-reader-ts (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26b8d14a0bd74bf3ed3daec6aa05cdff66d71efb652ea3727f5eee4812f39293 The package rbx-reader-ts was found to contain malicious code. Source: ghsa-malware e2cc8e418629e96adc1f49efc1c9e67a21f94eb0594d1e6a66ce25023f0afcc4...
MAL-2025-49375 Malicious code in rbx-reader-ts (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26b8d14a0bd74bf3ed3daec6aa05cdff66d71efb652ea3727f5eee4812f39293 The package rbx-reader-ts was found to contain malicious code. Source: ghsa-malware e2cc8e418629e96adc1f49efc1c9e67a21f94eb0594d1e6a66ce25023f0afcc4...
Malicious Package
Overview rbx-reader-ts is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
[SECURITY] Fedora 43 Update: rust-reqsign-file-read-tokio-2.0.0-1.fc43
Tokio-based file reader implementation for reqsign...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989076)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989076 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv4: Fix a data-race around sysctlfibmultipathuseneigh. While reading sysctlfibmultipathuseneigh...
CVE-2025-12108
The CVE-2025-12108 instance affects the Survision LPR Camera system, where authentication is not enforced by default, allowing access to the configuration wizard without login credentials. Affected component: the device’s access/configuration flow (license plate recognition camera system). Impact...
MGASA-2025-0256 Updated golang packages fix security vulnerabilities
Insufficient validation of bracketed IPv6 hostnames in net/url. CVE-2025-47912 Unbounded allocation when parsing GNU sparse map in archive/tar. CVE-2025-58183 Parsing DER payload can cause memory exhaustion in encoding/asn1. CVE-2025-58185 Lack of limit when parsing cookies can cause memory...
[SECURITY] Fedora 42 Update: rust-reqsign-file-read-tokio-2.0.0-1.fc42
Tokio-based file reader implementation for reqsign...
[SECURITY] Fedora 42 Update: rust-astral-tokio-tar-0.5.6-1.fc42
A Rust implementation of an async TAR file reader and writer. This library does not currently handle compression, but it is abstract over all I/O readers and writers. Additionally, great lengths are taken to ensure that the entire contents are never required to be entirely resident in memory all ...
[SECURITY] Fedora 41 Update: rust-reqsign-file-read-tokio-2.0.0-1.fc41
Tokio-based file reader implementation for reqsign...
[SECURITY] Fedora 41 Update: rust-astral-tokio-tar-0.5.6-1.fc41
A Rust implementation of an async TAR file reader and writer. This library does not currently handle compression, but it is abstract over all I/O readers and writers. Additionally, great lengths are taken to ensure that the entire contents are never required to be entirely resident in memory all ...
Astra Linux – Vulnerability in Thunderbird
Site isolation issue in the Reader Mode component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...
Excessive CPU consumption in Reader.ReadResponse in net/textproto
...
CVE-2025-11998 HP Card Readers (B Models) – Potential Information Disclosure
The following HP Card Readers B Models X3D03B & Y7C05B are potentially vulnerable to information disclosure, allowing prior user identity to be inherited under certain conditions —e.g., when an NFC device such as a smartphone/smartwatches is in proximity during a card swipe event...
EUVD-2025-37031
The following HP Card Readers B Models X3D03B & Y7C05B are potentially vulnerable to information disclosure, allowing prior user identity to be inherited under certain conditions —e.g., when an NFC device such as a smartphone/smartwatches is in proximity during a card swipe event...
EUVD-2025-36730
The Reader.ReadResponse function constructs a response string through repeated string concatenation of lines. When the number of lines in a response is large, this can cause excessive CPU consumption...
EUVD-2025-36731
tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A maliciously-crafted archive containing a large number of sparse regions can cause a Reader to read an unbounded amount of data from the archive into memory. When reading from a...
AZL-69164 CVE-2025-61724 affecting package msft-golang 1.24.13-1
The Reader.ReadResponse function constructs a response string through repeated string concatenation of lines. When the number of lines in a response is large, this can cause excessive CPU consumption...
