16649 matches found
EUVD-2025-175357
Socket Firewall is an HTTP/HTTPS proxy server that intercepts package manager requests and enforces security policies by blocking dangerous packages. Socket Firewall binary versions separate from installers prior to 0.15.5 are vulnerable to arbitrary code execution when run in untrusted project...
CVE-2025-40149
In the Linux kernel, the following vulnerability has been resolved: tls: Use skdstget and dstdevrcu in getnetdevforsock. getnetdevforsock is called during setsockopt, so not under RCU. Using skdstgetsk-dev could trigger UAF. Let's use skdstget and dstdevrcu. Note that the only -ndoskgetlowerdev...
CVE-2025-40123
In the Linux kernel, the following vulnerability has been resolved: bpf: Enforce expectedattachtype for tailcall compatibility Yinhao et al. recently reported: Our fuzzer tool discovered an uninitialized pointer issue in the bpfprogtestrunxdp function within the Linux kernel's BPF subsystem. This...
tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock().
...
smc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set().
...
EUVD-2025-180322
Malicious code in array-benchmark-socket-dog-fork npm...
Malicious code in upsilon-socket-cluster-static-eta (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99c4127e8b9df2359bf4f313e20808bc22f8a6248af19bb410a6350869034d86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175848
Malicious code in uglify-parse-socket-new-error npm...
Malicious code in fork-omicron-socket-easy-array (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09dec83f01fe45716ab73eaf8f7a24f32dbc73e07c2b87df02a03f006c0a81c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178861
Malicious code in fork-omicron-socket-easy-array npm...
EUVD-2025-176690
Malicious code in report-water-view-cluster-socket npm...
EUVD-2025-178599
Malicious code in hash-socket-slow-debug-interpret npm...
EUVD-2025-176310
Malicious code in socket-decrypt-tau-big-compress npm...
EUVD-2025-179745
Malicious code in chi-mu-socket-cold-small npm...
Malicious code in socket-table-grid-sigma-deserialize (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83c9f9e87cf6fb6b68b3cd8868d6ceb7436fee28ca2f0fa8ae049c3c30db6e5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175754
Malicious code in user-benchmark-omega-benchmark-socket npm...
EUVD-2025-179317
Malicious code in deserialize-rain-stub-alpha-socket npm...
EUVD-2025-176301
Malicious code in socket-uglify-notify-assert-encrypt npm...