Malicious code in signal-slow-reject-easy-object (npm)

The package signal-slow-reject-easy-object was found to contain malicious code...

Malicious code in emulate-slow-execute-try-small (npm)

The package emulate-slow-execute-try-small was found to contain malicious code...

Malicious code in upsilon-decode-gamma-slow-report (npm)

The package upsilon-decode-gamma-slow-report was found to contain malicious code...

Malicious code in deserialize-slow-warn-quick-export (npm)

The package deserialize-slow-warn-quick-export was found to contain malicious code...

Malicious code in key-sigma-dog-slow-authorize (npm)

The package key-sigma-dog-slow-authorize was found to contain malicious code...

Malicious code in benchmark-epsilon-runtime-authenticate-slow (npm)

The package benchmark-epsilon-runtime-authenticate-slow was found to contain malicious code...

Malicious code in byte-void-mock-awk-slow (npm)

The package byte-void-mock-awk-slow was found to contain malicious code...

Malicious code in compile-dog-resolve-java-slow (npm)

The package compile-dog-resolve-java-slow was found to contain malicious code...

MAL-2025-28204 Malicious code in old-throw-chi-boolean-slow (npm)

The package old-throw-chi-boolean-slow was found to contain malicious code...

MAL-2025-17448 Malicious code in compile-dog-resolve-java-slow (npm)

The package compile-dog-resolve-java-slow was found to contain malicious code...

MAL-2025-16403 Malicious code in byte-void-mock-awk-slow (npm)

The package byte-void-mock-awk-slow was found to contain malicious code...

MAL-2025-33431 Malicious code in slow-moon-air-scale-interpret (npm)

The package slow-moon-air-scale-interpret was found to contain malicious code...

Linux Distros Unpatched Vulnerability : CVE-2025-32873

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Django 4.2 before 4.2.21, 5.1 before 5.1.9, and 5.2 before 5.2.1. The django.utils.html.striptags function is vulnerable to a potenti...

CVE-2025-53634

Chall-Manager is a platform-agnostic system able to start Challenges on Demand of a player. The HTTP Gateway processes headers, but with no timeout set. With a slow loris attack, an attacker could cause Denial of Service DoS. Exploitation does not require authentication nor authorization, so anyo...

PT-2025-35982

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue where a loop device block size could be changed underneath a mounted filesystem. This discrepancy between the block device block size and the superbloc...

CVE-2025-53634 Chall-Manager's HTTP Gateway have no header check timeout leading to potential slow loris attacks

Chall-Manager is a platform-agnostic system able to start Challenges on Demand of a player. The HTTP Gateway processes headers, but with no timeout set. With a slow loris attack, an attacker could cause Denial of Service DoS. Exploitation does not require authentication nor authorization, so anyo...

CVE-2025-53634 Chall-Manager's HTTP Gateway have no header check timeout leading to potential slow loris attacks

Chall-Manager is a platform-agnostic system able to start Challenges on Demand of a player. The HTTP Gateway processes headers, but with no timeout set. With a slow loris attack, an attacker could cause Denial of Service DoS. Exploitation does not require authentication nor authorization, so anyo...

CVE-2025-53634 Chall-Manager's HTTP Gateway have no header check timeout leading to potential slow loris attacks

Chall-Manager is a platform-agnostic system able to start Challenges on Demand of a player. The HTTP Gateway processes headers, but with no timeout set. With a slow loris attack, an attacker could cause Denial of Service DoS. Exploitation does not require authentication nor authorization, so anyo...

CVE-2025-53634

CVE-2025-53634 affects Chall-Manager's HTTP Gateway. The vulnerability arises from no timeout on HTTP header processing, enabling a slowloris-style DoS that does not require authentication. A patch was implemented (commit 1385bd8) and shipped in v0.1.4, with remediation guidance to upgrade to tha...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the HTTP Gateway process. An attacker can exhaust system resources by sending HTTP headers very slowly, preventing legitimate requests from being processed. Remediation Upgrade...