Malicious code in yuni-nasi3-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3975afb3d443e6de6d98cf0f41126a87e99818e2a9b4be92b98e10154671a167 The package yuni-nasi3-breki was found to contain malicious code...

Malicious code in yuni-sate78-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcb230a98a9d43161f95fcfbc6648b91032db7d52306034464ef9f6442c926f8 The package yuni-sate78-ruro was found to contain malicious code...

MAL-2025-49556 Malicious code in zul-oblok39-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3a5ae8a15c1cdd8bcd1edce0af4020ebddef4e3714efbf6f460b21a1a9a3b71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-64486

calibre is an e-book manager. In versions 8.13.0 and prior, calibre does not validate filenames when handling binary assets in FB2 files, allowing an attacker to write arbitrary files on the filesystem when viewing or converting a malicious FictionBook file. This can be leveraged to achieve...

CVE-2025-12907

Insufficient validation of untrusted input in Devtools in Google Chrome prior to 140.0.7339.80 allowed a remote attacker to execute arbitrary code via user action in Devtools. Chromium security severity: Low...

EUVD-2025-38289

An issue was discovered in rymcu forest thru commit f782e85 2025-09-04 in function doBefore in file src/main/java/com/rymcu/forest/core/service/security/AuthorshipAspect.java, allowing authorized attackers to delete arbitrary users posts...

PT-2025-45448

Name of the Vulnerable Software and Affected Versions rymcu forest affected versions not specified Description An issue exists that allows authorized attackers to delete arbitrary users' posts. The issue is located in the doBefore function within the AuthorshipAspect.java file in the...

CVE-2022-50593

creationtimestamp| type| source ---|---|--- 2025-11-06 21:40:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4yjplah4a2b...

RHSA-2025:19835 Red Hat Security Advisory: bind security update

Bulletin has no description...

DEBIAN-CVE-2025-43430

This issue was addressed through improved state management. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash...

CVE-2025-43335

This vulnerability affects macOS Sonoma 14.8.2 , macOS Sequoia 15.7.2 , and macOS Tahoe 26.1 . The root cause is related to improper access control , where an app may be able to access user-sensitive data . The issue was addressed by Apple through the addition of additional logic and improved val...

Fedora: Security Advisory (FEDORA-2025-a7cea1535d)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2025-44803

CVE-2025-45959 - No vulnerability title. CVE ID : CVE-2025-45959 Published : Nov. 3, 2025, 6:16 p.m. | 1 hour, 42 minutes ago Description : Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a...

Mageia: Security Advisory (MGASA-2025-0254)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-12194 vulnerabilities

Vulnerabilities for packages: opensearch...

Malicious code in spectral-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31b1d60d661e6371af32c270f14fcb010fbb6dbebca0f1ecdf268ec1c048a957 The package spectral-utils was found to contain malicious code...

CVE-2025-23050

QLowEnergyController in Qt before 6.8.2 mishandles malformed Bluetooth ATT commands, leading to an out-of-bounds read or division by zero. This is fixed in 5.15.19, 6.5.9, and 6.8.2...

Malicious code in epic-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 512b2df44075983b7f2a23a8151b414a43cb02a59ab726e6ba6db3c6c4874d01 The package epic-config was found to contain malicious code...

Malicious code in epic-diesel-feed (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0adcbf905c997345ce189329119f9b930faa8f8bbc07707262e5f1e83f280c61 The package epic-diesel-feed was found to contain malicious code...

Malicious code in epic-node-blog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4207720525d69e9c09afb392295f1566d480abc128a98065be73bb7044e93291 The package epic-node-blog was found to contain malicious code...