8937 matches found
SUSE CVE-2025-68354
In the Linux kernel, the following vulnerability has been resolved: regulator: core: Protect regulatorsupplyaliaslist with regulatorlistmutex regulatorsupplyaliaslist was accessed without any locking in regulatorsupplyalias, regulatorregistersupplyalias, and regulatorunregistersupplyalias...
CVE-2018-25134
Synaccess netBooter NP-02x/NP-08x 6.8 contains an authentication bypass vulnerability in the webNewAcct.cgi script that allows unauthenticated attackers to create admin user accounts. Attackers can exploit the missing control check by sending crafted POST requests to create administrative account...
EUVD-2022-55765
In the Linux kernel, the following vulnerability has been resolved: regulator: core: fix resource leak in regulatorregister I got some resource leak reports while doing fault injection test: OF: ERROR: memory leak, expected refcount 1 instead of 100, ofnodeget/ofnodeput unbalanced - destroy cset...
CVE-2022-50724
CVE-2022-50724 is a Linux kernel vulnerability in the regulator subsystem caused by a resource leak in regulator_register() in the error path when a regulator’s supply has been resolved. The issue was observed after calling regulator_resolve_supply() which sets rdev->supply; if cleanup is take...
CVE-2022-50724 regulator: core: fix resource leak in regulator_register()
In the Linux kernel, the following vulnerability has been resolved: regulator: core: fix resource leak in regulatorregister I got some resource leak reports while doing fault injection test: OF: ERROR: memory leak, expected refcount 1 instead of 100, ofnodeget/ofnodeput unbalanced - destroy cset...
AZL-73060 CVE-2025-68354 affecting package kernel for versions less than 6.6.121.1-1
In the Linux kernel, the following vulnerability has been resolved: regulator: core: Protect regulatorsupplyaliaslist with regulatorlistmutex regulatorsupplyaliaslist was accessed without any locking in regulatorsupplyalias, regulatorregistersupplyalias, and regulatorunregistersupplyalias...
CVE-2025-68354 regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex
In the Linux kernel, the following vulnerability has been resolved: regulator: core: Protect regulatorsupplyaliaslist with regulatorlistmutex regulatorsupplyaliaslist was accessed without any locking in regulatorsupplyalias, regulatorregistersupplyalias, and regulatorunregistersupplyalias...
CVE-2025-68354
CVE-2025-68354 affects the Linux kernel regulator core. The vulnerability occurred because regulator_supply_alias_list was accessed without locking during regulator_supply_alias(), regulator_register_supply_alias(), and regulator_unregister_supply_alias(), allowing race conditions that could caus...
CoTDeceptor:Adversarial Code Obfuscation against CoT-Enhanced LLM Code Agents
LLM-based code agentse.g., ChatGPT Codex are increasingly deployed as detector for code review and security auditing tasks. Although CoT-enhanced LLM vulnerability detectors are believed to provide improved robustness against obfuscated malicious code, we find that their reasoning chains and...
PT-2025-53354
Synaccess netBooter NP-02x/NP-08x 6.8 contains an authentication bypass vulnerability in the webNewAcct.cgi script that allows unauthenticated attackers to create admin user accounts. Attackers can exploit the missing control check by sending crafted POST requests to create administrative account...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from not locking regulatorsupplyaliaslist, which could lead to reuse after release or data inconsistency...
Strengthening supply chain security: Preparing for the next malware campaign
The open source ecosystem continues to face organized, adaptive supply chain threats that spread through compromised credentials and malicious package lifecycle scripts. The most recent example is the multi-wave Shai-Hulud campaign. While individual incidents differ in their mechanics and speed,...
Malicious Package
Overview supplychaindummytest2 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
EUVD-2025-204865
Malicious code in supplychaindummytest3 npm...
EUVD-2025-204864
Malicious code in supplychaindummytest4 npm...
Malicious code in supply_chain_dummy_test_2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed3f5fef388376bf388c291f40ce96d8431d31f38fb29b6f69b6543408d9ef2f The package supplychaindummytest2 was found to contain malicious code. Source: ghsa-malware...
Malicious code in supply_chain_dummy_test_4 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44714fb556ca073c6056617d8f13043c9fc07b19dd6b1c6599b62dc183c87a45 The package supplychaindummytest4 was found to contain malicious code. Source: ghsa-malware...
MAL-2025-192761 Malicious code in supply_chain_dummy_test_2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed3f5fef388376bf388c291f40ce96d8431d31f38fb29b6f69b6543408d9ef2f The package supplychaindummytest2 was found to contain malicious code. Source: ghsa-malware...
Malicious code in supply_chain_dummy_test_3 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1963b5503ceeb0e8ed806c386f27edc1761eab24549419a8911a00f525b4a4c The package supplychaindummytest3 was found to contain malicious code. Source: ghsa-malware...