MAL-2025-1598 Malicious code in ideal-paypal-payment-js-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a0c63436afa43460fe75374c026568d5b5f17a29326ac24517be8a2b1dcd113 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nft-minter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3efd99532af6292091ff8943b7e0583961ca2a4fe82f73968118d5d189bfd39c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1571 Malicious code in appauth-angular-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 42efa6fffab7cf932595ca803e264928de2ca477fd0603ac14dbe52250cd10d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1599 Malicious code in interchain-attestation-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 62cc6bf711c9a215813941fee025df8878d105a26cff9eaf31791d55a0b4410d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1603 Malicious code in js-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cc4563d5bd3e84486a04f455708e6480fadf633778880ca2710f2778aafad55c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in floqast (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ee9b823d5e1026c463d7bfda29b3832b2d54415a7bdd50538e1faf5d9ec0e6e0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1612 Malicious code in merchantsettingserv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 75cca49918fc7191500567500f8e0e8eef01aecd8ae3770e8ab90c80a25ce5b9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in emailconfirmationserv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f3a1ffee276b06e97c988930fdef1d80fbce3b337b1d899282100ec35df0f126 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1613 Malicious code in merchanttoolserv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b5064980441eee945866b35b80f2f2f2935f077673a4fa8f15c147e7f043c4d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mailu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b2943df57730a433ea5c58cc936493d5865bcee7485445afc4ce047d8b845c89 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1585 Malicious code in exclusiveminimum (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 580fb091f79b9c79e7212a4cdb2627def3a8fa32d15fe35fbfda352b4c295ef0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

USN-7303-2: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - x86 architecture; - Block layer subsystem; - Cryptographic API; - ACPI drivers; - Drivers cor...

Ubuntu 20.04 LTS : Linux kernel vulnerabilities (USN-7294-3)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7294-3 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in...

Ubuntu 22.04 LTS / 24.04 LTS : Linux kernel vulnerabilities (USN-7303-2)

The remote Ubuntu 22.04 LTS / 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7303-2 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update...

Ubuntu 24.04 LTS : Linux kernel vulnerabilities (USN-7310-1)

"The remote Ubuntu 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7310-1 advisory. Attila Szsz discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a...

Ubuntu 22.04 LTS / 24.04 LTS : Linux kernel vulnerabilities (USN-7311-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7311-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update...

CVE-2025-26264

GeoVision GV-ASWeb with the version 6.1.2.0 or less fixed in 6.2.0, contains a Remote Code Execution RCE vulnerability within its Notification Settings feature. An authenticated attacker with "System Settings" privileges in ASWeb can exploit this flaw to execute arbitrary commands on the server,...

USN-7308-1: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - x86 architecture; - Block layer subsystem; - ACPI drivers; - GPU drivers; - HID subsystem; -...

USN-7289-4: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - x86 architecture; - Block layer subsystem; - ACPI drivers; - GPU drivers; - HID subsystem; -...

CVE-2025-26264: Improper Control of Generation of Code

GeoVision GV-ASWeb with the version 6.1.2.0 or less fixed in 6.2.0, contains a Remote Code Execution RCE vulnerability within its Notification Settings feature. An authenticated attacker with "System Settings" privileges in ASWeb can exploit this flaw to execute arbitrary commands on the server,...