EUVD-2025-124530

Malicious code in neptune-zenith-fornax-husky npm...

EUVD-2025-120678

Malicious code in vulcan-rate-limiter-library-tailwindcss npm...

EUVD-2025-123044

Malicious code in pyxis-helmet-dagda-halley npm...

EUVD-2025-115490

Malicious code in chakra-ui-indus-castor-betelgeuse npm...

EUVD-2025-112085

Malicious code in juno-leda-pino-toml npm...

EUVD-2025-111515

Malicious code in lynx-superagent-neptune-venus npm...

EUVD-2025-112169

Malicious code in jovian-cypress-jest-janus npm...

EUVD-2025-120444

Malicious code in winston-cressida-pino-pretty-quito npm...

EUVD-2025-111798

Malicious code in less-loader-config-quantum-equinox npm...

EUVD-2025-115768

Malicious code in callisto-koa-passport-init npm...

kernel: HID: core: fix shift-out-of-bounds in hid_report_raw_event

In the Linux kernel, the following vulnerability has been resolved: HID: core: fix shift-out-of-bounds in hidreportrawevent Syzbot reported shift-out-of-bounds in hidreportrawevent. microsoft 0003:045E:07DA.0001: hidfieldextract called with n 128 32! swapper/0...

EUVD-2025-117147

Malicious code in puzzled-olive-deer npm...

EUVD-2025-117521

Malicious code in adequate-purple-lynx npm...

EUVD-2025-117351

Malicious code in glamorous-chocolate-blackbird npm...

kernel: HID: core: fix shift-out-of-bounds in hid_report_raw_event

In the Linux kernel, the following vulnerability has been resolved: HID: core: fix shift-out-of-bounds in hidreportrawevent Syzbot reported shift-out-of-bounds in hidreportrawevent. microsoft 0003:045E:07DA.0001: hidfieldextract called with n 128 32! swapper/0...

kernel: HID: core: Harden s32ton() against conversion to 0 bits

In the Linux kernel, the following vulnerability has been resolved: HID: core: Harden s32ton against conversion to 0 bits Testing by the syzbot fuzzer showed that the HID core gets a shift-out-of-bounds exception when it tries to convert a 32-bit quantity to a 0-bit quantity. Ideally this should...

PT-2025-46677

Name of the Vulnerable Software and Affected Versions WinRAR version 7.11 Description A cross-site scripting XSS issue exists in the generate report functionality. This allows attackers to potentially disclose user information, including the computer username, generated report directory, and IP...

CVE-2025-52331

Cross-site scripting XSS vulnerability in the generate report functionality in Rarlab WinRAR 7.11, allows attackers to disclose user information such as the computer username, generated report directory, and IP address. The generate report command includes archived file names without validation i...

Rarlab WinRAR 安全漏洞

Rarlab WinRAR is a file compression/decompression software from Rarlab. A security vulnerability exists in Rarlab WinRAR version 7.11, which originates from cross-site scripting in the Generate Report function and could lead to the disclosure of user information...

CVE-2025-52331

Summary: CVE-2025-52331 affects WinRAR 7.11. An XSS flaw exists in the generate report function where archived file names are embedded into the HTML report without validation, enabling injection of HTML tags. This can disclose user information (computer username, generated report directory, IP ad...