488 matches found
Malicious code in candra-kripik19-breki (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c175f49e4569403b0845d5398c596a4385d328ddf6aad5b44fa2e2c9d624d1d5 The package candra-kripik19-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...
Malicious code in wati-lapis61-sukiwir (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6093b1c525640af4cbbdb90fafa5cd097a62f0aeb4448ef41fdeda6d0742c99 The package wati-lapis61-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...
CVE-2025-43439
A privacy issue was addressed by removing sensitive data. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, visionOS 26.1. An app may be able to fingerprint the user...
CVE-2025-43397
A permissions issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.7.2, macOS Tahoe 26.1, macOS Sonoma 14.8.2. An app may be able to cause a denial-of-service...
CVE-2025-43389
A privacy issue was addressed by removing the vulnerable code. This issue is fixed in macOS Tahoe 26.1, iOS 26.1 and iPadOS 26.1, iOS 18.7.2 and iPadOS 18.7.2, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, visionOS 26.1. An app may be able to access sensitive user data...
CVE-2025-43502
A privacy issue was addressed by removing sensitive data. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, visionOS 26.1. An app may be able to bypass certain Privacy preferences...
WordPress plugin IDonate 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414669)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414669 advisory. A vulnerability was found in Linux kernel, where a use-after-frees in nouveau's postclose handler could happen if removing device that is not common to remove video...
EUVD-2022-55410
Malicious code in bioql PyPI...
DEBIAN-CVE-2023-53375
In the Linux kernel, the following vulnerability has been resolved: tracing: Free error logs of tracing instances When a tracing instance is removed, the error messages that hold errors that occurred in the instance needs to be freed. The following reports a memory leak: cd /sys/kernel/tracing...
DEBIAN-CVE-2022-50332
In the Linux kernel, the following vulnerability has been resolved: video/aperture: Call sysfbdisable before removing PCI devices Call sysfbdisable from apertureremoveconflictingpcidevices before removing PCI devices. Without, simpledrm can still bind to simple-framebuffer devices after the...
PT-2025-37634
Name of the Vulnerable Software and Affected Versions Linux kernel versions 6.0.3 Description A flaw exists in the Linux kernel related to the handling of PCI devices and simple framebuffer devices. Specifically, the sysfb disable function was not being called before removing PCI devices, leading...
[SECURITY] Fedora 42 Update: reposurgeon-5.3-1.fc42
Reposurgeon enables risky operations that version-control systems don't want to let you do, such as editing past comments and metadata and removing commits. It works with any version control system that can export and import git fast-import streams, including git, hg, fossil, bzr, CVS and RCS. It...
MAL-2025-5864 Malicious code in symphony-cryptolib (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8216b9fdde76a4f40936fd19fbe9a3a7d73dcf66ffdde04c6cf54ee965448b9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2024-32512
Client-Side Enforcement of Server-Side Security vulnerability in weForms allows Removing Important Client Functionality.This issue affects weForms: from n/a through 1.6.20...
RUSTSEC-2025-0062 Heap Buffer Overflow in the DrainCol Destructor
An off-by-one error in the DrainCol::drop destructor could cause an unsafe memory copy operation to exceed the bounds of the associated vector. The error was related to the size of the data being copied in one of the ptr::copy invocations inside the destructor. When removing the first column from...
MAL-2025-2108 Malicious code in kitchensink-ui-base (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 57dd46442eabdf4fcd3affcfd4b7ef777c2229b46845426429e6277a99fe8f9d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from not properly freeing the irq directory when removing modules, which may result in a warning...