BELL-CVE-2025-23142

Bulletin has no description...

BELL-CVE-2025-23139

Bulletin has no description...

CVE-2022-21546 scsi: target: Fix WRITE_SAME No Data Buffer crash

In the Linux kernel, the following vulnerability has been resolved: scsi: target: Fix WRITESAME No Data Buffer crash In newer version of the SBC specs, we have a NDOB bit that indicates there is no data buffer that gets written out. If this bit is set using commands like "sgwritesame --ndob" we...

MAL-2025-3576 Malicious code in adobe-io-events (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 96f150232693e090d60954bb70dd3a03535edeceb5d77cc30a30914454396963 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3575 Malicious code in adobe-acrobat-sign (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 17d7f8480bfb87e856460e7dedfcbc5f53a5bce7d4c34225bb231dc41507678d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pydoxing (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 52e0861f6664f547a0cc13ab9b6aea123213946a49bbdc341e15be6ff6d53b61 Package contains a known Blank Grabber infostealer that starts on importing the module --- Category: MALICIOUS - The campaign has clearly malicious intent, lik...

WordPress IGIT Related Posts With Thumb Image After Posts plugin <= 4.5.3 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by johska in WordPress Plugin IGIT Related Posts With Thumb Image After Posts versions = 4.5.3...

MAL-2025-3583 Malicious code in selfbot.js-v13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fbdd8332c80f739c8bf3a99e9f32609e53a108f2f7eea79c12d65a8af551c280 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CGA-G4PP-RP7M-4JQF

Bulletin has no description...

CVE-2022-49874 HID: hyperv: fix possible memory leak in mousevsc_probe()

In the Linux kernel, the following vulnerability has been resolved: HID: hyperv: fix possible memory leak in mousevscprobe If hidadddevice returns error, it should call hiddestroydevice to free hiddev which is allocated in hidallocatedevice...

CVE-2025-23155 net: stmmac: Fix accessing freed irq affinity_hint

In the Linux kernel, the following vulnerability has been resolved: net: stmmac: Fix accessing freed irq affinityhint In stmmacrequestirqmultimsi, a pointer to the stack variable cpumask is passed to irqsetaffinityhint. This value is stored in irqdesc-affinityhint, but once stmmacrequestirqmultim...

GHSA-322V-VH2G-QVPV vulnerabilities

Vulnerabilities for packages: mattermost-fips...

CGA-MCQ3-PQJ4-644J

Bulletin has no description...

ASB-A-391932683

Bulletin has no description...

ASB-A-382314359

Bulletin has no description...

DLA-4151-1 golang-github-gorilla-csrf - security update

Bulletin has no description...

ASB-A-394100273

Bulletin has no description...

ASB-A-377312730

Bulletin has no description...

CGA-3G2W-6VPW-C433

Bulletin has no description...

AI Code Hallucinations Increase the Risk of ‘Package Confusion’ Attacks

A new study found that code generated by AI is more likely to contain made-up information that can be used to trick software into interacting with malicious code...