TPSQLi: Test Prioritization for SQL Injection Vulnerability Detection in Web Applications

The rapid proliferation of network applications has led to a significant increase in network attacks. According to the OWASP Top 10 Projects report released in 2021, injection attacks rank among the top three vulnerabilities in software projects. This growing threat landscape has increased the...

SUSE CVE-2024-22036

A vulnerability has been identified within Rancher where a cluster or node driver can be used to escape the chroot jail and gain root access to the Rancher container itself. In production environments, further privilege escalation is possible based on living off the land within the Rancher...

Security update for go1.25

This update for go1.25 fixes the following issues: Update to go1.25.1, released 2025-09-03 bsc1244485. Security issues fixed: CVE-2025-47910: net/http: CrossOriginProtection insecure bypass patterns not limited to exact matches bsc1249141. Other issues fixed: go74822 cmd/go: "get toolchain@latest...

Security update for google-osconfig-agent

This update for google-osconfig-agent fixes the following issues: Update to version 20250416.02 bsc1244304, bsc1244503 defaultSleeper: tolerate 10% difference to reduce test flakiness 810 Add output of some packagemanagers to the testdata 808 From version 20250416.01: Refactor OS Info package 809...

SUSE-SU-2025:20746-1 Security update for google-osconfig-agent

This update for google-osconfig-agent fixes the following issues: Update to version 20250416.02 bsc1244304, bsc1244503 defaultSleeper: tolerate 10% difference to reduce test flakiness 810 Add output of some packagemanagers to the testdata 808 From version 20250416.01: Refactor OS Info package 809...

CVE-2025-39780

In the Linux kernel, the following vulnerability has been resolved: sched/ext: Fix invalid task state transitions on class switch When enabling a schedext scheduler, we may trigger invalid task state transitions, resulting in warnings like the following which can be easily reproduced by running t...

Malware in internal-test-helpers

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-47018 Malicious code in internal-test-helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b3552cfd630fb30cd112a4c9ff8987f36a6de0941482cd2cb33abc0f7c43819c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in internal-test-helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b3552cfd630fb30cd112a4c9ff8987f36a6de0941482cd2cb33abc0f7c43819c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview internal-test-helpers is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2025-47113 Malicious code in @tr61/test-pkg (npm)

The package communicates with a domain associated with malicious activity...

@open-xchange/appsuite-codeceptjs (>=0.2.0, <=0.6.2), create-fintech-automation-test (>=1.0.4, <=1.0.5) +1 more potentially affected by CVE-2025-57285 via codeceptjs (>=3.6.2, <=3.6.10)

codeceptjs NPM version =3.6.2, =0.2.0, =1.0.4, =1.0.0, =1.0.4 Source cves: CVE-2025-57285 Source advisory: GHSA-34W8-MCWR-VG29...

@open-xchange/appsuite-codeceptjs (>=0.2.0, <=0.6.2), create-fintech-automation-test (>=1.0.4, <=1.0.5) +1 more potentially affected by CVE-2025-57285 via codeceptjs (>=3.6.2, <=3.6.10)

codeceptjs NPM version =3.6.2, =0.2.0, =1.0.4, =1.0.0, =1.0.4 Source cves: CVE-2025-57285 Source advisory: OSV:GHSA-34W8-MCWR-VG29...

@open-xchange/appsuite-codeceptjs (>=0.2.0, <=0.6.2), create-fintech-automation-test (>=1.0.4, <=1.0.5) +1 more potentially affected by CVE-2025-57285 via codeceptjs (>=3.6.2, <=3.6.10)

codeceptjs NPM version =3.6.2, =0.2.0, =1.0.4, =1.0.0, =1.0.4 Source cves: CVE-2025-57285 Source advisory: MEND:CVE-2025-57285...

CVE-2025-48550

In testGrantSlicePermission of SliceManagerTest.java, there is a possible permanent denial of service due to a path traversal error. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

Noisy Bear Campaign Targeting Kazakhstan Energy Sector Outed as a Planned Phishing Test

A threat actor possibly of Russian origin has been attributed to a new set of attacks targeting the energy sector in Kazakhstan. The activity, codenamed Operation BarrelFire, is tied to a new threat group tracked by Seqrite Labs as Noisy Bear. The threat actor has been active since at least April...

CVE-2025-36900

In lwistestregisterio of lwisdevicetest.c, there is a possible OOB Write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

MaraDNS_1

This is a repository for MaraDNS, a small open-source DNS server. The repository contains various files and scripts for building and testing MaraDNS, including a Dockerfile for creating a Docker image to test installing MaraDNS on a fresh Ubuntu 22.04 virtual machine. The repository includes a...

com.spinoco:fs2-cassandra-test-support_2.12 (0.4.0-m3), com.spinoco:fs2-cassandra_2.12 (0.4.0-m3) potentially affected by CVE-2025-58369 via co.fs2:fs2-io_2.12 (1.0.0-m3)

co.fs2:fs2-io2.12 MAVEN version 1.0.0-m3 is affected by a known vulnerability. The following packages have a transitive dependency on co.fs2:fs2-io2.12 and may be impacted: - com.spinoco:fs2-cassandra-test-support2.12 0.4.0-m3 - com.spinoco:fs2-cassandra2.12 0.4.0-m3 Source cves: CVE-2025-58369...

com.spinoco:fs2-cassandra-test-support_2.12 (0.4.0-m2), com.spinoco:fs2-cassandra-test_2.12 (0.4.0-m2) +7 more potentially affected by CVE-2025-58369 via co.fs2:fs2-io_2.12 (1.0.0-m2)

co.fs2:fs2-io2.12 MAVEN version 1.0.0-m2 is affected by a known vulnerability. The following packages have a transitive dependency on co.fs2:fs2-io2.12 and may be impacted: - com.spinoco:fs2-cassandra-test-support2.12 0.4.0-m2 - com.spinoco:fs2-cassandra-test2.12 0.4.0-m2 -...