SUSE CVE-2025-58190

The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...

CVE-2025-57564

CubeAPM nightly-2025-08-01-1 allow unauthenticated attackers to inject arbitrary log entries into production systems via the /api/logs/insert/elasticsearch/bulk endpoint. This endpoint accepts bulk log data without requiring authentication or input validation, allowing remote attackers to perform...

CVE-2025-61765 vulnerabilities

Vulnerabilities for packages: reflex, open-webui...

CVE-2025-42701

A race condition exists in the Falcon sensor for Windows that could allow an attacker, with the prior ability to execute code on a host, to delete arbitrary files. CrowdStrike released a security fix for this issue in Falcon sensor for Windows versions 7.24 and above and all Long Term Visibility...

USN-7789-2 linux-raspi vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - Block layer subsystem; - Cryptographic API; - ACP...

Malicious code in redirect-za4566 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 079f93dd87bd8ef6e446d2275dc64e4b6e5e995fa22a692166b41c03eac59d02 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48057 Malicious code in redirect-gzixvc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 148d469aec04aa0c8339e4774fcb177101922beb6932fc192b74a658f76b7c2e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48075 Malicious code in redirect-udmf0u (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b0c413d9dc0a3bbc412e869fe204f44c219e0dc76756a297396238e79188fb6d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-0g91q6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb8a046d11d2d32600e11bc37ddbb705107cd33d2206e402b33572441677da95 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-udmf0u (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b0c413d9dc0a3bbc412e869fe204f44c219e0dc76756a297396238e79188fb6d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48046 Malicious code in redirect-4nwrkg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe78fd275f2d6de5f5413670b1c4bfae9179f5046ea4a84667876f11670c2c26 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48047 Malicious code in redirect-7bqfg6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8cbe30cd65f2e9549fac6967014eb87d8c906c7a0801f82dab1d1de706c0e606 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-p8ris1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 04da7ed54a66a21cd724557550afeac1590a329330a33c3c0b5bbf897e250c0e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48085 Malicious code in webpack-loader-css-branch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 229ffddcb27b696e6b64ac9e852913efc9cb7db2c9fbe5df5ec27be21dd18080 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rails-html-sanitizer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6639c0a00dd79a8b017f59289f23eccd33625402399ac79c43d96fdb92e3b373 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nokogiri (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 52d84f0c9be95071bb514b725ec5c700efe36d5b4ebed67b5e36c3f2cbf6d40e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Linux Distros Unpatched Vulnerability : CVE-2025-11219

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in V8 in Google Chrome prior to 141.0.7390.54 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML pag...

Linux Distros Unpatched Vulnerability : CVE-2025-11207

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Side-channel information leakage in Storage in Google Chrome prior to 141.0.7390.54 allowed a remote attacker to perform arbitrary read/write via a crafted HTML...

A Multi-Layered Embedded Intrusion Detection Framework for Programmable Logic Controllers

Industrial control system ICS operations use trusted endpoints like human machine interfaces HMIs and workstations to relay commands to programmable logic controllers PLCs. Because most PLCs lack layered defenses, compromise of a trusted endpoint can drive unsafe actuator commands and risk...

Linux Distros Unpatched Vulnerability : CVE-2022-50479

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amd: fix potential memory leak This patch fix potential memory leak clksrc when function run into last return NULL. s/free/kfree/ - Alex CVE-2022-50479 Note...