EUVD-2023-60056

Ozeki SMS Gateway versions up to and including 10.3.208 contain a path traversal vulnerability. Successful exploitation allows an unauthenticated attacker to use URL-encoded traversal sequences to read arbitrary files from the underlying filesystem with the privileges of the gateway service,...

ROS-20251113-01

A vulnerability in the Omnibox component of the Google Chrome and Microsoft Edge browsers is related to writing outside the boundaries of the buffer. Exploitation of the vulnerability could allow an attacker acting remotely to escalate their privileges A vulnerability in the Safe Browsing compone...

CVE-2025-40196

In the Linux kernel, the following vulnerability has been resolved: fs: quota: create dedicated workqueue for quotareleasework There is a kernel panic due to WARNONCE when paniconwarn is set. This issue occurs when writeback is triggered due to sync call for an opened fileie, writeback reason is...

DEBIAN-CVE-2025-40196

In the Linux kernel, the following vulnerability has been resolved: fs: quota: create dedicated workqueue for quotareleasework There is a kernel panic due to WARNONCE when paniconwarn is set. This issue occurs when writeback is triggered due to sync call for an opened fileie, writeback reason is...

Active Directory Under Siege: Why Critical Infrastructure Needs Stronger Security

Active Directory remains the authentication backbone for over 90% of Fortune 1000 companies. AD's importance has grown as companies adopt hybrid and cloud infrastructure, but so has its complexity. Every application, user, and device traces back to AD for authentication and authorization, making ...

CVE-2025-40140 net: usb: Remove disruptive netif_wake_queue in rtl8150_set_multicast

In the Linux kernel, the following vulnerability has been resolved: net: usb: Remove disruptive netifwakequeue in rtl8150setmulticast syzbot reported WARNING in rtl8150startxmit/usbsubmiturb. This is the sequence of events that leads to the warning: rtl8150startxmit netifstopqueue;...

EUVD-2025-120510

Malicious code in websockets-dactyl-element-ui-sync npm...

EUVD-2025-121928

Malicious code in slides-supervisor-apollo-sync npm...

EUVD-2025-121808

Malicious code in spectron-juno-sync-venus npm...

EUVD-2025-121712

Malicious code in spinner-uglify-js-sequelize-sync npm...

EUVD-2025-121514

Malicious code in sync-antares-rehype-yaml npm...

EUVD-2025-121512

Malicious code in sync-build-koa-miranda npm...

EUVD-2025-121510

Malicious code in sync-centaurus-gacrux-ursa npm...

EUVD-2025-121499

Malicious code in sync-pulsar-child-process-gridsome npm...

EUVD-2025-121493

Malicious code in sync-transport-resolvers-quantum npm...

EUVD-2025-122796

Malicious code in registry-firebase-command-sync npm...

EUVD-2025-124551

Malicious code in neptune-mui-jasmine-sync npm...

EUVD-2025-123968

Malicious code in parcel-carpo-cypress-sync npm...

EUVD-2025-124858

Malicious code in miranda-sync-despina-auth0 npm...

Malicious code in process-fornax-local-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f3220f679eb62fd137d7337ff1fea5b4a82a683412b487acdc28e5e9e26e04b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...