DEBIAN-CVE-2022-50332

In the Linux kernel, the following vulnerability has been resolved: video/aperture: Call sysfbdisable before removing PCI devices Call sysfbdisable from apertureremoveconflictingpcidevices before removing PCI devices. Without, simpledrm can still bind to simple-framebuffer devices after the...

PT-2025-37634

Name of the Vulnerable Software and Affected Versions Linux kernel versions 6.0.3 Description A flaw exists in the Linux kernel related to the handling of PCI devices and simple framebuffer devices. Specifically, the sysfb disable function was not being called before removing PCI devices, leading...

[SECURITY] Fedora 42 Update: reposurgeon-5.3-1.fc42

Reposurgeon enables risky operations that version-control systems don't want to let you do, such as editing past comments and metadata and removing commits. It works with any version control system that can export and import git fast-import streams, including git, hg, fossil, bzr, CVS and RCS. It...

MAL-2025-5864 Malicious code in symphony-cryptolib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8216b9fdde76a4f40936fd19fbe9a3a7d73dcf66ffdde04c6cf54ee965448b9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-32512

Client-Side Enforcement of Server-Side Security vulnerability in weForms allows Removing Important Client Functionality.This issue affects weForms: from n/a through 1.6.20...

RUSTSEC-2025-0062 Heap Buffer Overflow in the DrainCol Destructor

An off-by-one error in the DrainCol::drop destructor could cause an unsafe memory copy operation to exceed the bounds of the associated vector. The error was related to the size of the data being copied in one of the ptr::copy invocations inside the destructor. When removing the first column from...

MAL-2025-2108 Malicious code in kitchensink-ui-base (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 57dd46442eabdf4fcd3affcfd4b7ef777c2229b46845426429e6277a99fe8f9d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from not properly freeing the irq directory when removing modules, which may result in a warning...

CVE-2024-54512

The issue was addressed by removing the relevant flags. This issue is fixed in watchOS 11.2, iOS 18.2 and iPadOS 18.2. A system binary could be used to fingerprint a user's Apple Account...

CVE-2024-56351

In JetBrains TeamCity before 2024.12 access tokens were not revoked after removing user roles...

MAL-2024-11152 Malicious code in randompathlist (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 77c6130d1739fac45df45a04aad9725b130073eb91f6d7801254242cac74edae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11101 Malicious code in spoofdownload (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3d8f42d7318727d3bb3f26dc67c84c21a10a6720fe144f2e2ca4d1e42acfca48 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10969 Malicious code in eslint-plugin-classification-import (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf941eb64cb46effcedb0a7bc56e9aa2c3a16f53b93efc19baecb91bc6699f02 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

DEBIAN-CVE-2024-50294

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix missing locking causing hanging calls If a call gets aborted e.g. because kafs saw a signal between it being queued for connection and the I/O thread picking up the call, the abort will be prioritised over the connecti...

MAL-2024-10700 Malicious code in h20-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 72f919b25a0e7333704e4c71c06150db40d66dfbb43786f6fece3fa6b1055141 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10627 Malicious code in web3-helpers.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9b4f43eb01c69ebcb1293d0134dc7fa64f02d938354439483848597057842229 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10527 Malicious code in valorantengine (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e77bdd3f4fb75d89a64486c1c5ad697f360414840b8fb389ffff1cc5c14f448 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10393 Malicious code in pupeteerreqintercepter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a217fdabdcda03ee1d01755ca128aecf9f98f7c3f9883f4f39eb1a0fe00e799 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

net: bridge: mcast: wait for previous gc cycles when removing port

...

MAL-2024-9230 Malicious code in duckc2-v5.3.6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1787f323cf8287cce75c9f98309dbf5edfb1721a840a920500ec0e0cdb6be06 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...