CVE-2025-10905

Affected software: Avast Free Antivirus (Gen Digital). Vulnerable component: MiniFilter driver. Description across connected sources indicates a collision in the MiniFilter driver prior to Avast Free Antivirus 25.9 on Windows. Impact: local attacker with administrative privileges can disable real...

CVE-2025-13020

Use-after-free in the WebRTC: Audio/Video component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Thunderbird 145, and Thunderbird 140.5...

CVE-2025-13020 Use-after-free in the WebRTC: Audio/Video component

Use-after-free in the WebRTC: Audio/Video component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Thunderbird 145, and Thunderbird 140.5...

kernel: sched/rt: Fix race in push_rt_task

In the Linux kernel, the following vulnerability has been resolved: sched/rt: Fix race in pushrttask Overview ======== When a CPU chooses to call pushrttask and picks a task to push to another CPU's runqueue then it will call findlocklowestrq method which would take a double lock on both CPUs'...

kernel: sched/rt: Fix race in push_rt_task

In the Linux kernel, the following vulnerability has been resolved: sched/rt: Fix race in pushrttask Overview ======== When a CPU chooses to call pushrttask and picks a task to push to another CPU's runqueue then it will call findlocklowestrq method which would take a double lock on both CPUs'...

MAL-2025-112237 Malicious code in real_tiger_blue-89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75dd79244402cef83abf7c7b5d3635558d6b2fb3b096d1b8d9c559c9de6dd968 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-74315

Malicious code in realtigerblue-89 npm...

EUVD-2025-75857

Malicious code in realcephalopod-appteadev npm...

EUVD-2025-62350

Malicious code in realcattlez3n npm...

EUVD-2025-62349

Malicious code in realhorsez3n npm...

EUVD-2025-62347

Malicious code in realtunarequirement npm...

Malicious code in real_capybara_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32464304eaf910d33aed1b83d9ef83f2f9f0a944eb0ba309fb39d8de0c47c1c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in real-gray-guan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2390c426d0250326a3f8133fe9b6ee6bb49fd589c5258bacda7ee01809e4e454 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-52431

Malicious code in real-gray-guan npm...

EUVD-2025-52432

Malicious code in real-amaranth-cheetah npm...

EUVD-2025-52430

Malicious code in real-turquoise-moth npm...

Malicious code in real-turquoise-moth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5087c54eff73cef18feb688a972be1cf0e30ada99364ead654f1645c8a695aa6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Gen Digital Free Antivirus 安全漏洞

Gen Digital Free Antivirus is an antivirus software from Gen Digital, Inc. A security vulnerability exists in Gen Digital Free Antivirus versions prior to 25.9, which stems from a conflict in the MiniFilter driver that could cause a local attacker to disable real-time protection and self-defense...

Zephyr 安全漏洞

Zephyr is an extensible real-time operating system RTOS open-sourced by Zephyr. A security vulnerability exists in Zephyr that stems from a contention condition in the entry point of a system call, which could lead to elevation of privilege by a malicious userspace process...

PT-2025-46350

Name of the Vulnerable Software and Affected Versions Avast Free Antivirus versions prior to 25.9 Description A collision in the MiniFilter driver within Avast Free Antivirus can allow a local attacker with administrative privileges to disable real-time protection and self-defense mechanisms. The...