Fedora 42 : webkitgtk (2025-4fc934f283)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-4fc934f283 advisory. Prevent unsafe URI schemes from participating in media playback. Make jscvaluearraybuffergetdata function introspectable. Fix logging in to Google...

Fedora 43 : webkitgtk (2025-6f3e9e3af6)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-6f3e9e3af6 advisory. Prevent unsafe URI schemes from participating in media playback. Make jscvaluearraybuffergetdata function introspectable. Fix logging in to Google...

Mageia: Security Advisory (MGASA-2025-0308)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Anubis 输入验证错误漏洞

Anubis is a tool for Xe Iaso Individual Developers. An input validation error vulnerability exists in Anubis versions prior to 1.23.0, which stems from sub-request authentication not validating the redirection URL, which could result in a redirection to an arbitrary URL scheme...

Malicious code in buis-masi-mab1dir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8beda5da482ac6ef9dd75daf92a4527ee3ff7b8c051610be17b0f9a47b0f382 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehah-kalian-bauta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3120e7fba89c715c3f12d3f9e10ac0ba9a4fbb41a8723dfe8864bc5cbfc063c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alphard-aurora-css-minimizer-webpack-plugin-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cadd965cb26d39282845d1f921990c4270984dbf20e54e6ba597fdd8158afe87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Drupal core - Moderately critical - Information disclosure - SA-CORE-2025-008

The core system module handles downloads of private and temporary files. Contrib modules can define additional kinds of files schemes that may also be handled by the system module. In some cases, files may be served with the HTTP header Cache-Control: public when they should be uncacheable. This...

Malicious code in maya-semur64-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11d43015acd99f546290ccea9bfe308731a859f0304c835d6566374252cdfee0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135696 Malicious code in nadia-rangi91-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 442baeb42a2f367baaa172e4d2a4b3b58511a7034c68d0d737378f850583094d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unhappy_firefly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ebe1ee176fadf1061829a7d87a45e4d9ffb1bca46d5672d10755cf0a15ab12e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-teh43-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d33dff26f4bf6bba7c6b46cd1944e3ba43a95eeedc6a3a86c3469a00d995eb91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-pecel10-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0471dcfedb01fcf13621b70c9f48f06e983d78f11e8e4d72f08fab6568a8fb30 The package vera-pecel10-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Security Evaluation of Quantum Circuit Split Compilation under an Oracle-Guided Attack

Quantum circuits are the fundamental representation of quantum algorithms and constitute valuable intellectual property IP. Multiple quantum circuit obfuscation QCO techniques have been proposed in prior research to protect quantum circuit IP against malicious compilers. However, there has not be...

CVE-2025-64135

Jenkins Eggplant Runner Plugin 0.0.1.301.v963cffe8ddb8 and earlier sets the Java system property jdk.http.auth.tunneling.disabledSchemes to an empty value, disabling a protection mechanism of the Java runtime...

A Comparative Study of Hybrid Post-Quantum Cryptographic X.509 Certificate Schemes

As quantum computing hardware continues to advance, the integration of such technology with quantum algorithms is anticipated to enable the decryption of ciphertexts produced by RSA and Elliptic Curve Cryptography ECC within polynomial time. In response to this emerging threat, the U.S. National...

Insecure Default Initialization of Resource

Overview io.jenkins.plugins:eggplant-runner is a The Eggplant DAI Plugin for Jenkins launches DAI tests from within a Jenkins pipeline. You can use it to continuously test your application using Eggplant's model-based approach to testing. For more information about Eggplant, visit...

GHSA-W5R3-GR8W-7FJ5 Jenkins Eggplant Runner Plugin protection mechanism disabled

Jenkins Eggplant Runner Plugin 0.0.1.301.v963cffe8ddb8 and earlier sets the Java system property jdk.http.auth.tunneling.disabledSchemes to an empty value as part of applying a proxy configuration. This disables a protection mechanism of the Java runtime addressing CVE-2016-5597. As of publicatio...

EUVD-2025-36648

Jenkins Eggplant Runner Plugin protection mechanism disabled...

CVE-2025-64135

Jenkins Eggplant Runner Plugin 0.0.1.301.v963cffe8ddb8 and earlier sets the Java system property jdk.http.auth.tunneling.disabledSchemes to an empty value, disabling a protection mechanism of the Java runtime...