Hackers Use NFC Relay Malware to Clone Tap-to-Pay Android Transactions

A new investigation from mobile security firm Zimperium has revealed a fast-growing cybersecurity threat targeting Android users through…...

RockyLinux 10 : gvisor-tap-vsock (RLSA-2025:7484)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:7484 advisory. golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh CVE-2025-22869 Tenable has extracted the preceding description block...

Fedora 41 : webkitgtk (2025-f2bfde9326)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-f2bfde9326 advisory. Update to 2.50.0: Improved rendering performance by recording each layer once and replaying every dirty region in different worker threads. Enable...

AlmaLinux 10 : gvisor-tap-vsock (ALSA-2025:9151)

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:9151 advisory. net/http: Request smuggling due to acceptance of invalid chunked data in net/http CVE-2025-22871 Tenable has extracted the preceding description block directly fr...

Linux Distros Unpatched Vulnerability : CVE-2025-39894

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: brnetfilter: do not check confirmed bit in brnflocalin after confirm When send a broadcast packet to a tap device, which was added to a bridge,...

EUVD-2025-32643

Malicious code in grunt-qunit-tap npm...

MAL-2025-47991 Malicious code in grunt-qunit-tap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b4c0ee680338b5f96b2a084cf0591caad929e414bd9f3f485d06718bc2b548f4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in grunt-qunit-tap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b4c0ee680338b5f96b2a084cf0591caad929e414bd9f3f485d06718bc2b548f4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview grunt-qunit-tap is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

EUVD-2016-5953

Malware in sbrugna...

EUVD-2021-25641

Malware in sbrugna...

EUVD-2021-0662

Malware in sbrugna...

EUVD-2012-2136

Malware in sbrugna...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414317)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414317 advisory. A double-free flaw was found in the Linux kernels TUN/TAP device driver functionality in how a user registers the device when the registernetdevice function fails...

RLSA-2025:9150 Moderate: gvisor-tap-vsock security update

A replacement for libslirp and VPNKit, written in pure Go. It is based on the network stack of gVisor. Compared to libslirp, gvisor-tap-vsock brings a configurable DNS server and dynamic port forwarding. Security Fixes: net/http: Request smuggling due to acceptance of invalid chunked data in...

gvisor-tap-vsock security update

An update is available for gvisor-tap-vsock. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list A replacement for libslirp and VPNKit, written in pure Go. It is bas...

RockyLinux 10 : gvisor-tap-vsock (RLSA-2025:9151)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:9151 advisory. net/http: Request smuggling due to acceptance of invalid chunked data in net/http CVE-2025-22871 Tenable has extracted the preceding description block directly...

RockyLinux 9 : gvisor-tap-vsock (RLSA-2025:9150)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:9150 advisory. net/http: Request smuggling due to acceptance of invalid chunked data in net/http CVE-2025-22871 Tenable has extracted the preceding description block directly fr...

EUVD-2023-44445

Malicious code in bioql PyPI...

EUVD-2025-13312

Malicious code in bioql PyPI...