CVE-2025-36929

In AreFencesRegistered of gxpfencemanager.cc, there is a possible information leak due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

SUSE CVE-2025-40308

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: bcsp: receive data only if registered Currently, bcsprecv can be called even when the BCSP protocol has not been registered. This leads to a NULL pointer dereference, as shown in the following stack trace: KASAN:...

DEBIAN-CVE-2025-40308

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: bcsp: receive data only if registered Currently, bcsprecv can be called even when the BCSP protocol has not been registered. This leads to a NULL pointer dereference, as shown in the following stack trace: KASAN:...

CVE-2025-40263 Input: cros_ec_keyb - fix an invalid memory access

In the Linux kernel, the following vulnerability has been resolved: Input: croseckeyb - fix an invalid memory access If croseckeybregistermatrix isn't called due to buttonsswitchesonly in croseckeybprobe, ckdev-idev remains NULL. An invalid memory access is observed in croseckeybprocess when...

Exploits and vulnerabilities in Q3 2025

In the third quarter, attackers continued to exploit security flaws in WinRAR, while the total number of registered vulnerabilities grew again. In this report, we examine statistics on published vulnerabilities and exploits, the most common security issues impacting Windows and Linux, and the...

EUVD-2025-102694

Malicious code in registeredjackalz3n npm...

EUVD-2025-102695

Malicious code in registeredcamelz3n npm...

EUVD-2025-102696

Malicious code in registeredamphibianz3n npm...

EUVD-2025-74306

Malicious code in registeredguppybrown-94 npm...

EUVD-2025-71385

Malicious code in registeredtiglonz3n npm...

EUVD-2025-62310

Malicious code in registereddamselflyz3n npm...

EUVD-2025-62309

Malicious code in registeredmarsupialrequirement npm...

EUVD-2025-62311

Malicious code in registeredalligatorz3n npm...

Malicious code in registered_marsupial_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 556ffee398698a8c3ee9a8c2b61d3387878167ab0eb812407d4e1b08babe826f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-67345

Malicious code in registeredmolluskz3n npm...

EUVD-2025-67346

Malicious code in registeredguppyz3n npm...

EUVD-2025-52392

Malicious code in registered-beige-albatross npm...

EUVD-2025-52391

Malicious code in registered-brown-panther npm...

EUVD-2025-52390

Malicious code in registered-magenta-lark npm...

MAL-2025-70258 Malicious code in registered-brown-panther (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bff6a3a5f590915da2e47d168becf2d4e42606df0354ad4c559e01fcb3f575a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...