709 matches found
MiracleLinux 9 : gvisor-tap-vsock-0.8.5-2.el9_6 (AXSA:2025-10539:04)
The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-10539:04 advisory. net/http: Request smuggling due to acceptance of invalid chunked data in net/http CVE-2025-22871 Tenable has extracted the preceding description block...
MiracleLinux 9 : gvisor-tap-vsock-0.8.5-1.el9_6 (AXSA:2025-10485:03)
The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-10485:03 advisory. golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh CVE-2025-22869 Tenable has extracted the preceding description blo...
CVE-2022-33720
Improper authentication vulnerability in AppLock prior to SMR Aug-2022 Release 1 allows physical attacker to access Chrome locked by AppLock via new tap shortcut...
CVE-2025-67316
An issue in realme Internet browser v.45.13.4.1 allows a remote attacker to execute arbitrary code via a crafted webpage in the built-in HeyTap/ColorOS browser...
TencentOS Server 4: gvisor-tap-vsock (TSSA-2025:0380)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0380 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...
net: tap: NULL pointer derefence in dev_parse_header_protocol when skb->dev is null
...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990239)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990239 advisory. In the Linux kernel, the following vulnerability has been resolved: tap: add missing verification for short frame The cited commit missed to check against the validi...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989978)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989978 advisory. In the Linux kernel, the following vulnerability has been resolved: tap: add missing verification for short frame The cited commit missed to check against the validi...
Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: netfilter: brnetfilter: do not check the confirmed bit in brnflocalin after confirmation. When sending a broadcast packet to a tap device, which is added to a bridge, the brnflocalin function is called to confirm the conntrack. I...
Hackers Use NFC Relay Malware to Clone Tap-to-Pay Android Transactions
A new investigation from mobile security firm Zimperium has revealed a fast-growing cybersecurity threat targeting Android users through…...
RockyLinux 10 : gvisor-tap-vsock (RLSA-2025:7484)
The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:7484 advisory. golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh CVE-2025-22869 Tenable has extracted the preceding description block...
AlmaLinux 10 : gvisor-tap-vsock (ALSA-2025:9151)
The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:9151 advisory. net/http: Request smuggling due to acceptance of invalid chunked data in net/http CVE-2025-22871 Tenable has extracted the preceding description block directly fr...
Fedora 41 : webkitgtk (2025-f2bfde9326)
The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-f2bfde9326 advisory. Update to 2.50.0: Improved rendering performance by recording each layer once and replaying every dirty region in different worker threads. Enable...
Linux Distros Unpatched Vulnerability : CVE-2025-39894
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: brnetfilter: do not check confirmed bit in brnflocalin after confirm When send a broadcast packet to a tap device, which was added to a bridge,...
Malicious code in grunt-qunit-tap (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b4c0ee680338b5f96b2a084cf0591caad929e414bd9f3f485d06718bc2b548f4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
EUVD-2025-32643
Malicious code in grunt-qunit-tap npm...
Malicious Package
Overview grunt-qunit-tap is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
MAL-2025-47991 Malicious code in grunt-qunit-tap (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b4c0ee680338b5f96b2a084cf0591caad929e414bd9f3f485d06718bc2b548f4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...