Malicious code in overstock-login-layer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 359cd99825c90001defddafc25d74d784b4e71a75a8adf92e90f2371dbf8a124 The package overstock-login-layer was found to contain malicious code. Source: ghsa-malware...

Linux Distros Unpatched Vulnerability : CVE-2025-71163

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dmaengine: idxd: fix device leaks on compat bind and unbind Make sure to drop the reference taken when looking up the idxd device as part of the compat bind and...

CVE-2026-24049 vulnerabilities

Vulnerabilities for packages: py3-cassandra-medusa, pypy-3.10, emissary, airflow, pypy-3.11, datadog-agent, py3-setuptools, dask-kubernetes, kubeflow-jupyter-web-app, open-webui, kubeflow-katib, py3-virtualenv, semgrep, mlflow, pip-zipapp, aws-cli, kserve, superset...

GHSA-8RRH-RW8J-W5FX vulnerabilities

Vulnerabilities for packages: kubeflow-jupyter-web-app, nemo, ansible-operator, azure-functions-python-worker, ansible-operator-fips, py3-virtualenv, kserve, semgrep, ghidra, aws-cli, awx, authentik, py3-cassandra-medusa, request-1276, text-generation-inference, duplicity, mlflow, open-webui,...

CVE-2025-67221 vulnerabilities

Vulnerabilities for packages: datadog-agent-fips, emissary, authentik, datadog-agent, authentik-fips, kserve, litellm...

GHSA-HX9Q-6W63-J58V vulnerabilities

Vulnerabilities for packages: datadog-agent-fips, emissary, authentik, datadog-agent, authentik-fips, kserve, litellm...

CVE-2026-0528 vulnerabilities

Vulnerabilities for packages: apm-server, beats, cloudbeat, cloudbeat-fips, apm-server-fips...

A PUF-Based Security Framework for Fault and Intrusion Detection

Industrial Control Systems ICS rely on sensor feedback to keep safety-critical processes within operational limits. This research presents a hardware-root-of-trust that embeds a Physically Unclonable Function PUF at the measurement layer to authenticate sensor readings. The architecture combines...

CVE-2026-24358

Missing Authorization vulnerability in ExpressTech Systems Quiz And Survey Master quiz-master-next allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Quiz And Survey Master: from n/a through = 10.3.3...

GHSA-5RFX-CP42-P624 vulnerabilities

Vulnerabilities for packages: keycloak...

CVE-2025-38248 vulnerabilities

Vulnerabilities for packages: linux-aws, linux-vmware, linux-qemu, linux-azure, linux-gcp...

GHSA-2838-84RJ-32XC vulnerabilities

Vulnerabilities for packages: linux-aws, linux-vmware, linux-qemu, linux-azure, linux-gcp...

CVE-2025-38237 vulnerabilities

Vulnerabilities for packages: linux-aws, linux-vmware, linux-qemu, linux-azure, linux-gcp...

CVE-2025-39775 vulnerabilities

Vulnerabilities for packages: linux-aws, linux-vmware, linux-qemu, linux-azure, linux-gcp...

GHSA-5RFX-CP42-P624 vulnerabilities

Vulnerabilities for packages: keycloak, keycloak-fips...

CVE-2025-68675 vulnerabilities

Vulnerabilities for packages: airflow...

GHSA-3QMM-R55X-HPXX vulnerabilities

Vulnerabilities for packages: airflow...

Malicious code in ntwsx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 837a3de93825b2ebfadd814823c3dde7c072beb4afe605d220256e406efed240 The package ntwsx was found to contain malicious code. Source: ghsa-malware 9ab6bd61fcb4255b371cf5dcfee1103ef2d0574569eb5804ceb1aa9a3dae8bfe Any...

CVE-2025-3839

A flaw was found in Epiphany, a tool that allows websites to open external URL handler applications with minimal user interaction. This design can be misused to exploit vulnerabilities within those handlers, making them appear remotely exploitable. The browser fails to properly warn or gate this...

CVE-2025-3839

A flaw was found in Epiphany, a tool that allows websites to open external URL handler applications with minimal user interaction. This design can be misused to exploit vulnerabilities within those handlers, making them appear remotely exploitable. The browser fails to properly warn or gate this...