9652 matches found
EUVD-2025-198355
Claude Code is an agentic coding tool. Prior to version 2.0.31, due to an error in sed command parsing, it was possible to bypass the Claude Code read-only validation and write to arbitrary files on the host system. This issue has been patched in version 2.0.31...
kernel: sctp: linearize cloned gso packets in sctp_rcv
A flaw use of uninitialized memory uncontrolled and invisible by attacker in the Linux kernel SCTP transport protocol was found in the way user triggers malicious SCTP packets. A remote user could use this flaw to crash the system. The bug actual only for systems where SCTP protocol being enabled...
PT-2026-43688
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the DisplayPort Multi-Stream Transport MST component where releasing a timeslot can lead to an incorrect payload mask due to an overflow. This occurs if the delayed...
kernel: tls: make sure to abort the stream if headers are bogus
In the Linux kernel, the following vulnerability has been resolved: tls: make sure to abort the stream if headers are bogus Normally we wait for the socket to buffer up the whole record before we service it. If the socket has a tiny buffer, however, we read out the data sooner, to prevent...
sctp: Fix MAC comparison to be constant-time
...
net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce()
...
CVE-2025-40148
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add NULL pointer checks in dcstream cursor attribute functions The function dcstreamsetcursorattributes currently dereferences the stream pointer and nested members stream-ctx-dc-currentstate without checking for...
EUVD-2025-176094
Malicious code in supervisor-helios-stream-rate-limiter npm...
EUVD-2025-177444
Malicious code in ophiuchus-corvus-stream-deimos npm...
EUVD-2025-177590
Malicious code in nightwatch-procyon-stream-docusaurus npm...
EUVD-2025-178391
Malicious code in inquirer-stream-metabolomics-uninstall npm...
Malicious code in stream-sequelize-writable-local (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fdf4cd8fedeb6040c6b2bae5b893aedc5f019fba5512dc35e0ebc2a03cc4b8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176190
Malicious code in stream-janus-soap-juno npm...
EUVD-2025-178254
Malicious code in json-stream-aquarius-cygnus npm...
EUVD-2025-180385
Malicious code in apollo-geochronology-stream-readable npm...
EUVD-2025-176193
Malicious code in stream-build-ganymede-corvus npm...
EUVD-2025-175991
Malicious code in test-meissa-stream-leda npm...
EUVD-2025-176194
Malicious code in stream-andromeda-proxima-loglevel npm...
Malicious code in stream-janus-soap-juno (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd0748be6aaa678054ffec1227c9412d1378a7a4ce501ac61fd6eab94006e013 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...