Malicious code in rtk-sleep (npm)

The package rtk-sleep was found to contain malicious code...

MAL-2025-45908 Malicious code in rtk-sleep (npm)

The package rtk-sleep was found to contain malicious code...

Input: gpio-keys - fix a sleep while atomic with PREEMPT_RT

...

BootPerformanceTable pointer is read from an NVRAM variable in PEI. Recommend setting PcdFirmwarePerformanceDataTableS3Support to FALSE.

...

CVE-2025-9649 appneta tcpreplay send_packets.c calc_sleep_time divide by zero

A security vulnerability has been detected in appneta tcpreplay 4.5.1. Impacted is the function calcsleeptime of the file sendpackets.c. Such manipulation leads to divide by zero. An attack has to be approached locally. The exploit has been disclosed publicly and may be used. Upgrading to version...

CVE-2025-50972

SQL Injection vulnerability in AbanteCart 1.4.2, allows unauthenticated attackers to execute arbitrary SQL commands via the tmplid parameter to index.php. Three techniques have been demonstrated: error-based injection using a crafted FLOOR-based payload, time-based blind injection via SLEEP, and...

PT-2025-34876 · Unknown · Abantecart

Name of the Vulnerable Software and Affected Versions: AbanteCart version 1.4.2 Description: AbanteCart is susceptible to a SQL Injection issue. Unauthenticated attackers can execute arbitrary SQL commands via the tmpl id parameter in the index.php file. Exploitation techniques include error-base...

Linux Distros Unpatched Vulnerability : CVE-2007-3719

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The process scheduler in the Linux kernel 2.6.16 gives preference to interactive processes that perform voluntary sleeps, which allows local users to cause a...

Linux Distros Unpatched Vulnerability : CVE-2022-49759

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - VMCI: Use threaded irqs instead of tasklets The vmcidispatchdgs tasklet function calls vmcireaddata which uses waitevent resulting in invalid sleep in an atomic...

PT-2025-44106

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.16.0-smp--e6c618b51cfe-sleep 782 Description The Linux kernel contained an issue in the KVM component related to SVM fastpath emulation. Specifically, the fastpath emulation was not being skipped on VM-Exit if...

PT-2025-33889

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 139.0.7258.138 Description An out-of-bounds write issue exists in the V8 JavaScript engine. This flaw allows a remote attacker to potentially exploit heap corruption—a condition where memory allocated in the hea...

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: CVE-2022-49138: Bluetooth: hcievent: Fix checking conn for leconncompleteevt bsc1238160. CVE-2023-52923: netfilter: nftables: split async and sync catchall in two...

Linux Distros Unpatched Vulnerability : CVE-2025-38496

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: dm-bufio: fix sched in atomic context If tryverifyintasklet is set for dm-verity,...

Linux Distros Unpatched Vulnerability : CVE-2022-49033

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: btrfs: qgroup: fix sleep from invalid context bug in btrfsqgroupinherit Syzkaller reported B...

Linux Distros Unpatched Vulnerability : CVE-2025-37843

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: PCI: pciehp: Avoid unnecessary device replacement check Hot-removal of nested PCI hotplug...

MAL-2025-8593 Malicious code in @malware-test-dines-whelm-yesty-sleep/test-mlw3-dines-whelm-yesty-sleep (npm)

The package @malware-test-dines-whelm-yesty-sleep/test-mlw3-dines-whelm-yesty-sleep was found to contain malicious code...

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow via the ReadOneJNGImage function. An attacker can access data on the heap or cause memory corruption by tricking a user into processing a specially crafted image file. Remediation A fix was pushed into the...

Linux Distros Unpatched Vulnerability : CVE-2023-53070

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ACPI: PPTT: Fix to avoid sleep in the atomic context when PPTT is absent Commit 0c80f9e165f8...

Linux Distros Unpatched Vulnerability : CVE-2022-50045

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: powerpc/pci: Fix getphbnumber locking The recent change to getphbnumber causes a...

Linux Distros Unpatched Vulnerability : CVE-2023-53031

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - powerpc/imc-pmu: Fix use of mutex in IRQs disabled section Current imc-pmu code triggers a WARNING with CONFIGDEBUGATOMICSLEEP and CONFIGPROVELOCKING enabled,...