Malicious code in npm-test-lowerx3 (npm)

--- -= Per source details. Do not edit below this line.=-...

Exploit for CVE-2025-32965

It is an exploit module for CVE-2025-32965, a supply chain attac...

MAL-2025-3293 Malicious code in watch-test-unit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0f501b9331b4c944a1dd7832349e4c20f23512f98948d44975636aa01952dc96 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in watch-test-unit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0f501b9331b4c944a1dd7832349e4c20f23512f98948d44975636aa01952dc96 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in com.adjust.test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e1c1175d9d178e089d813fa5fd10a1f34409c94f28af0ef4c4b0aa7d2424c77b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CBL Mariner 2.0 Security Update: graphviz (CVE-2023-46045)

The version of graphviz installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-46045 advisory. - Graphviz 2.36.0 through 9.x before 10.0.1 has an out-of-bounds read via a crafted config6a file. NOTE:...

PT-2025-28994

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A potential null pointer dereference issue was identified in the fpga mgr test img load sgt function. The function allocates memory for sgt using kunit kzalloc, but fails to verify if...

curl: Buffer Overflow in curl MQTT Test Server (tests/server/mqttd.c) via Malicious CONNECT Packet

Title: Buffer Overflow in curl MQTT Test Server mqttd.c via Malicious CONNECT Packet Description The MQTT test server mqttd.c in the curl project contains a buffer overflow vulnerability due to improper validation of password length fields in MQTT CONNECT packets. An attacker can craft a maliciou...

[SECURITY] Fedora 42 Update: perl-Devel-Cover-1.44-5.fc42

This module provides code coverage metrics for Perl. Code coverage metrics describe how thoroughly tests exercise code. By using Devel::Cover you can discover areas of code not exercised by your tests and determine which tests to create to increase coverage. Code coverage can be considered as an...

Artificial Intelligence – What's all the fuss?

Talking about AI: Definitions Artificial Intelligence AI — AI refers to the simulation of human intelligence in machines, enabling them to perform tasks that typically require human intelligence, such as decision-making and problem-solving. AI is the broadest concept in this field, encompassing...

HTTP_Request2 安全漏洞

HTTPRequest2 is a PEAR open source that provides an easy way to perform HTTP requests and does not require the curl extension. A security vulnerability exists in HTTPRequest2 versions prior to 2.7.0 that originates from multiple files in the test directory reflecting GET or POST parameters, which...

CVE-2025-43717

In PEAR HTTPRequest2 before 2.7.0, multiple files in the tests directory, notably tests/network/getparameters.php and tests/network/postparameters.php, reflect any GET or POST parameters, leading to XSS...

UBUNTU-CVE-2025-22048

In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Don't override subprog's return value The verifier test calls: div by 0 in subprog triggers a panic at the ld.bu instruction. The ld.bu insn is trying to load byte from memory address returned by the subprog. The...

CVE-2025-22102

CVE-2025-22102 affects the Linux kernel Bluetooth btnxpuart driver. The issue causes a kernel panic during FW release when WLAN/BT firmware downloads occur in parallel and the hardware delivers only one bootloader signature; the driver enters FW download mode but, after a 60-second timeout, a rel...

From Searching in the Dark to Seeing Ahead With Hive Pro’s Enhanced BAS

Running short on time but still want to stay in the know? Well, we’ve got you covered! We’ve condensed all the key takeaways into a handy audio summary. Our AI-driven podcasts are fit for on the go. Click right here to hear it all on Hive Pro's Enhanced BAS! During a recent incident response, I...

CVE-2024-22036

A vulnerability has been identified within Rancher where a cluster or node driver can be used to escape the chroot jail and gain root access to the Rancher container itself. In production environments, further privilege escalation is possible based on living off the land within the Rancher...

Test

The post Test appeared first on Wallarm...

ZkFuzz: Foundation and Framework for Effective Fuzzing of Zero-Knowledge Circuits

Zero-knowledge ZK circuits enable privacy-preserving computations and are central to many cryptographic protocols. Systems like Circom simplify ZK development by combining witness computation and circuit constraints in one program. However, even small errors can compromise security of ZK programs...

PT-2025-18789 · Wavlink · Wavlink Wl-Wn530Hg4

Name of the Vulnerable Software and Affected Versions: Wavlink WL-WN530H4 version 20220801 Description: The issue is related to a command injection vulnerability in the ping test function of the adm.cgi via the pingIp parameter. This allows attackers to execute arbitrary commands via a crafted...

SurrealDB has local file read of 2-column TSV files via analyzers

An authenticated system user at the root, namespace, or database levels can use the DEFINE ANALYZER statement to point to arbitrary file locations on the file system, and should the file be tab separated with two columns, the analyzer can be leveraged to exfiltrate the content. This issue was...