MAL-2025-5168 Malicious code in readium-shared-js (npm)

Malicious preinstall script exfiltrates system info hostname, user, pwd, id to a remote server. Likely a malware. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c907ca12944ad675a60dbfd27a1680a1b2ebf1186512d0106676795741a558a Any computer that has this package...

CGA-J3H5-4QW2-26MQ

Bulletin has no description...

CGA-FM9Q-2MWV-2PCM

Bulletin has no description...

Information Disclosure

ibrnp.so is vulnerable to information disclosure. The vulnerability exists due to a lack of validated secret keys in stream-write.cpp which allows an attacker to gain access to sensitive information...

nCipher Advisory #7: Unexpected copies of imported software keys

nCipher Security Advisory No. 7 Unexpected duplicates of imported software based keys ----------------------------------------------------- SUMMARY ------- When either the command line utility generatekey or the KeySafe graphical application is used to import a software based key into an nCipher...