EUVD-2025-2581

Malicious code in bioql PyPI...

EUVD-2025-8496

Malicious code in bioql PyPI...

modules/rlm_unix/rlm_unix.c in FreeRADIUS before 2.2.0, when unix mode is enabled for user authentication, does not properly check the password expiration in /etc/shadow, which allows remote authenticated users to authenticate using an expired password.

...

CVE-2025-39910 mm/vmalloc, mm/kasan: respect gfp mask in kasan_populate_vmalloc()

In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc, mm/kasan: respect gfp mask in kasanpopulatevmalloc kasanpopulatevmalloc and its helpers ignore the caller's gfpmask and always allocate memory using the hardcoded GFPKERNEL flag. This makes them inconsistent with...

kernel: drm/gem: Acquire references on GEM handles for framebuffers

In the Linux kernel, the following vulnerability has been resolved: drm/gem: Acquire references on GEM handles for framebuffers A GEM handle can be released while the GEM buffer object is attached to a DRM framebuffer. This leads to the release of the dma-buf backing the buffer object, if any. 1...

CVE-2025-57295

CVE-2025-57295 affects H3C NX15V100R015 firmware. The root account has no password and the H3C user account uses the default password, both stored in /etc/shadow, enabling attackers with network access to gain unauthorized root-level access via the admin interface or other services. This can lead...

EulerOS 2.0 SP13 : systemd (EulerOS-SA-2025-2141)

According to the versions of the systemd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability was found in systemd-coredump. This flaw allows an attacker to force a SUID process to crash and replace it with a non-SUID binar...

PT-2025-37497

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A use-after-free issue exists in the Linux kernel's SCTP implementation. Specifically, the vulnerability occurs when handling errors returned from the sctp auth asoc init active key...

AutoRDPwn

This is a post-exploitation framework called AutoRDPwn, written in PowerShell. It is designed to automate the Shadow attack on Microsoft Windows computers, which allows a remote attacker to view and control the victim's desktop without their consent. The framework has a user-friendly interface an...

PT-2025-42777

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.17.0-rc3 Description A flaw exists in the Linux kernel related to out-of-bounds access to shadow memory within the Kernel Memory Sanitizer KMSAN. Specifically, when running sha224 kunit on a KMSAN-enabled kerne...

[Webinar] Shadow AI Agents Multiply Fast — Learn How to Detect and Control Them

⚠️ One click is all it takes. An engineer spins up an "experimental" AI Agent to test a workflow. A business unit connects to automate reporting. A cloud platform quietly enables a new agent behind the scenes. Individually, they look harmless. But together, they form an invisible swarm of Shadow A...

Malicious code in raid-shadow-legends-codes962 (npm)

The package raid-shadow-legends-codes962 was found to contain malicious code...

Malicious code in raid-shadow-legends-generator305 (npm)

The package raid-shadow-legends-generator305 was found to contain malicious code...

Malicious code in raid-shadow-legends-hack104 (npm)

The package raid-shadow-legends-hack104 was found to contain malicious code...

MAL-2025-45747 Malicious code in raid-shadow-legends-generator305 (npm)

The package raid-shadow-legends-generator305 was found to contain malicious code...

MAL-2025-45746 Malicious code in raid-shadow-legends-generator028 (npm)

The package raid-shadow-legends-generator028 was found to contain malicious code...

MAL-2025-45752 Malicious code in raid-shadow-legends-promo-codes288 (npm)

The package raid-shadow-legends-promo-codes288 was found to contain malicious code...

Malicious code in raid-shadow-legends-hack505 (npm)

The package raid-shadow-legends-hack505 was found to contain malicious code...

Malicious code in raid-shadow-legends-codes489 (npm)

The package raid-shadow-legends-codes489 was found to contain malicious code...

Malicious code in raid-shadow-legends-codes905 (npm)

The package raid-shadow-legends-codes905 was found to contain malicious code...