Malicious code in summerfi-eslint-config-security-notice (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d85a7d05234e5c23b0307b2212be7cfec13e9b8a135ffd9faa1bbf24cce1bb7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48424 Malicious code in summerfi-typescript-config-security-notice (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ac7c388becaf0eb92411faf87263a25d88d1fc6b3c7abc1c1310cf6a3d3669a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-31702

A vulnerability exists in certain Dahua embedded products. Third-party malicious attacker with obtained normal user credentials could exploit the vulnerability to access certain data which are restricted to admin privileges, such as system-sensitive files through specific HTTP request. This may...

[SECURITY] Fedora 42 Update: inih-62-1.fc42

The inih package provides simple INI file parser which is only a couple of pages of code, and it was designed to be small and simple, so it's good for embedded systems...

PT-2025-42234

Name of the Vulnerable Software and Affected Versions Dahua embedded products affected versions not specified Description An improper permission assignment for a critical resource allows a remote attacker with normal user credentials to access data restricted to administrator privileges via a...

PT-2025-42367

Name of the Vulnerable Software and Affected Versions F5OS-A affected versions not specified Description A vulnerability allows a highly privileged, authenticated attacker to access sensitive FIPS hardware security module HSM information on F5 rSeries systems. Recommendations At the moment, there...

PT-2025-42340

Name of the Vulnerable Software and Affected Versions BIG-IP systems affected versions not specified Description Undisclosed traffic can lead to data corruption and unauthorized data modification in protocols lacking message integrity protection. Software versions that have reached End of Technic...

CVE-2025-37145 Authenticated Arbitrary File Download Vulnerabilities in a Low-Level Interface Library Affecting AOS-10 GW and AOS-8 Controller/Mobility Conductor Web-Based Management Interface

Arbitrary file download vulnerabilities exist in a low-level interface library in AOS-10 GW and AOS-8 Controller/Mobility Conductor operating systems. Successful exploitation could allow an authenticated malicious actor to download arbitrary files through carefully constructed exploits...

2025-10 Cumulative Update for Windows 10 Version 1809 for x64-based Systems (KB5066586)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

2025-10 Cumulative Update for Windows Server 2019 for x64-based Systems (KB5066586)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

2025-10 Cumulative Update for Windows 10 Version 1607 for x64-based Systems (KB5066836)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

2025-10 Cumulative Update for Windows 10 Version 22H2 for x64-based Systems (KB5066791)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...

2025-10 Dynamic Cumulative Update for Windows 10 Version 22H2 for x86-based Systems (KB5066791)

ComponentUpdate: A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft...

2025-10 Cumulative Update for Windows Server 2016 for x64-based Systems (KB5066836)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

2025-10 Dynamic Cumulative Update for Windows 10 Version 22H2 for ARM64-based Systems (KB5066791)

ComponentUpdate: A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft...

CVE-2025-37140

CVE-2025-37140 describes an authentication-restricted arbitrary file download vulnerability in the CLI binary of HPE Aruba AOS-10 GW and AOS-8 Controller/Mobility Conductor operating systems. The vulnerability allows a logged-in attacker to download arbitrary files via crafted input. Affected pro...

CVE-2024-25082 vulnerabilities

Vulnerabilities for packages: fontforge...

From Prompts to Protocols: How Agentic Systems, MCP, Vibe Coding, and Schema-Aware Tools Are Rewiring Software Engineering

Modern software engineering faces growing complexity across codebases, environments, and workflows. Traditional tools, although effective, rely heavily on…...

CVE-2025-11710

A compromised web process using malicious IPC messages could have caused the privileged browser process to reveal blocks of its memory to the compromised process. This vulnerability was fixed in Firefox 144, Firefox ESR 115.29, Firefox ESR 140.4, Thunderbird 144, and Thunderbird 140.4...

CISA Releases One Industrial Control Systems Advisory

CISA released one Industrial Control Systems ICS advisory on October 14, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-287-01 Rockwell Automation 1715 EtherNet/IP Comms Module CISA encourages users and...