MAL-2025-191953 Malicious code in elf-stats-cosy-stockpile-694 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 862bf1e70a99afc56c9510ca0174365ec2f6c4d2409a8435e4c6d2172530c013 The package elf-stats-cosy-stockpile-694 was found to contain malicious code...

Malicious code in elf-stats-cosy-stockpile-694 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 862bf1e70a99afc56c9510ca0174365ec2f6c4d2409a8435e4c6d2172530c013 The package elf-stats-cosy-stockpile-694 was found to contain malicious code...

MAL-2025-191955 Malicious code in elf-stats-snowdusted-sparkler-261 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffc39837150308666e7beceeaf74af7a05499be158adfbcbeb6e0855895e161b The package elf-stats-snowdusted-sparkler-261 was found to contain malicious code...

MAL-2025-191954 Malicious code in elf-stats-silvered-ornament-756 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af252b50c8c74e272e044881e74ec3f39d777d81d281d86fdea3b8428c3f5958 The package elf-stats-silvered-ornament-756 was found to contain malicious code...

MAL-2025-191957 Malicious code in elf-stats-sparkly-hammer-880 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f433d87ec9e6dc5f60708a64a7b41917f7f0cea6d13224516b3259948ae4528a The package elf-stats-sparkly-hammer-880 was found to contain malicious code...

MAL-2025-191956 Malicious code in elf-stats-snowdusted-wishlist-166 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f858ccc2f57528938a75b4329df0f7046904e9aa3de54bd2a6b972d7bb28ce2 The package elf-stats-snowdusted-wishlist-166 was found to contain malicious code...

PT-2026-2532

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.18.0-rc1-custom-g1a3d6d7cd014 Description The Linux kernel contained a use-after-free issue within the mlxsw spectrum mr module. A missing mutex acquisition during multicast route deletion could lead to this...

kernel: smb: client: fix potential UAF in cifs_stats_proc_write()

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in cifsstatsprocwrite Skip sessions that are being teared down status == SESEXITING to avoid UAF...

Moderate: Red Hat Security Advisory: kernel-rt security update

An update for kernel-rt is now available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

kernel: RDMA/mlx5: Fix mlx5_ib_get_hw_stats when used for device

An out-of-bounds write vulnerability exists in the linux kernel, such that when mlx5ibgethwstats is used forthe device portnum = 0, There is a special handling in order to use the correct counters, but, portnum is being passed down the stack without any change leading to damage in system...

Moderate: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.6 Telecommunications Update Service. Red Hat Product Security has rated this update as...

kernel: RDMA/mlx5: Fix mlx5_ib_get_hw_stats when used for device

An out-of-bounds write vulnerability exists in the linux kernel, such that when mlx5ibgethwstats is used forthe device portnum = 0, There is a special handling in order to use the correct counters, but, portnum is being passed down the stack without any change leading to damage in system...

RHEL 9 : kernel (RHSA-2025:22066)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:22066 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: ALSA: usb-audio: Validate UAC...

Revive Adserver stats-conversions.php script cross-site scripting vulnerability

Revive Adserver is an open source ad serving system that allows advertisers, publishers, and networks to place ads on multiple platforms e.g., websites, apps, video players and supports ad effectiveness tracking, campaign management, and placement rule definition. Revive Adserver suffers from a...

CVE-2025-52668

Improper input neutralization in the stats-conversions.php script in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes potential information disclosure and session hijacking via a stored XSS attack...

EUVD-2025-198343

Improper input neutralization in the stats-conversions.php script in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes potential information disclosure and session hijacking via a stored XSS attack...

CVE-2025-52668

Improper input neutralization in the stats-conversions.php script in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes potential information disclosure and session hijacking via a stored XSS attack...

CVE-2025-52668

Improper input neutralization in the stats-conversions.php script in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes potential information disclosure and session hijacking via a stored XSS attack...

CVE-2025-52668

Improper input neutralization in the stats-conversions.php script in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes potential information disclosure and session hijacking via a stored XSS attack...

CVE-2025-52668

Improper input neutralization in the stats-conversions.php script in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes potential information disclosure and session hijacking via a stored XSS attack...