MAL-2025-17690 Malicious code in cro-defi-swap-periphery (npm)

The package cro-defi-swap-periphery was found to contain malicious code...

MAL-2025-34281 Malicious code in swap_middleware (npm)

The package swapmiddleware was found to contain malicious code...

Linux to_atmarpd Heap Buffer Overflow DoS

The vulnerability of the toatmarpd function in the Linux operating system’s kernel is related to the swapping of the zero pointer. Exploiting this vulnerability could allow an attacker to trigger a service failure...

Linux Distros Unpatched Vulnerability : CVE-2025-38242

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm: userfaultfd: fix race of userfaultfdmove and swap cache This commit fixes two kinds of races, they may have different results: Barry reported a BUGON in...

Linux Distros Unpatched Vulnerability : CVE-2022-50230

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - arm64: set UXN on swapper page tables This issue was fixed upstream by accident in c3cee924bd85 arm64: head: cover entire kernel image in initial ID map as part...

Linux Distros Unpatched Vulnerability : CVE-2022-49992

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: mm/mprotect: only reference swap pfn page if type match Yu Zhao reported a bug after the...

Linux Distros Unpatched Vulnerability : CVE-2022-50095

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - posix-cpu-timers: Cleanup CPU timers before freeing them during exec Commit 55e8c8eb2c7b posix-cpu- timers: Store a reference to a pid not a task started lookin...

Linux Distros Unpatched Vulnerability : CVE-2020-12408

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When browsing a document hosted on an IP address, an attacker could insert certain characters to flip domain and path information in the address bar. This...

Linux Distros Unpatched Vulnerability : CVE-2025-22034

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: mm/gup: reject FOLLSPLITPMD with hugetlb VMAs Patch series mm: fixes for device-exclusive...

Linux kernel DoS

The vulnerability of the Linux operating system’s kernel phy component is related to the swapping of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2025-35959

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to userfaultfd. Specifically, a crash can occur in the UFFDIO MOVE operation when a Page Middle Directory PMD is a migration entry. The issue...

Cursor AI Code Editor Vulnerability Enables RCE via Malicious MCP File Swaps Post Approval

Cybersecurity researchers have disclosed a high-severity security flaw in the artificial intelligence AI-powered code editor Cursor that could result in remote code execution. The vulnerability, tracked as CVE-2025-54136 CVSS score: 7.2, has been codenamed MCPoison by Check Point Research, owing ...

CVE-2025-54136 Cursor's Modification of MCP Server Definitions Bypasses Manual Re-approvals

Cursor is a code editor built for programming with AI. In versions 1.2.4 and below, attackers can achieve remote and persistent code execution by modifying an already trusted MCP configuration file inside a shared GitHub repository or editing the file locally on the target's machine. Once a...

Malicious Package

Overview swap-token-list-poc is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malware in swap-token-list-poc

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in swap-token-list-poc (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ff37669cef0c949bb0dd7b4eebab3d14891256532b09e265c1a486fb2ca0996c Any computer that has this package installed or running should be considered...

MAL-2025-6314 Malicious code in swap-token-list-poc (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ff37669cef0c949bb0dd7b4eebab3d14891256532b09e265c1a486fb2ca0996c Any computer that has this package installed or running should be considered...

DEBIAN-CVE-2025-38267

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Do not trigger WARNON due to a commitoverrun When reading a memory mapped buffer the reader page is just swapped out with the last page written in the write buffer. If the reader page is the same as the commit buffer...

SUSE CVE-2025-38242

In the Linux kernel, the following vulnerability has been resolved: mm: userfaultfd: fix race of userfaultfdmove and swap cache This commit fixes two kinds of races, they may have different results: Barry reported a BUGON in commit c50f8e6053b0, we may see the same BUGON if the filemap lookup...

DEBIAN-CVE-2025-38242

In the Linux kernel, the following vulnerability has been resolved: mm: userfaultfd: fix race of userfaultfdmove and swap cache This commit fixes two kinds of races, they may have different results: Barry reported a BUGON in commit c50f8e6053b0, we may see the same BUGON if the filemap lookup...