Security Bulletin: The IBM® Engineering Lifecycle Engineering products using WebSphere Application Server traditional is vulnerable to stored cross-site scripting

Summary IBM WebSphere Application Server is vulnerable to stored cross-site scripting in the administrative console. Following IBM® Engineering Lifecycle Engineering products is vulnerable to this attack, it has been addressed in this bulletin: IBM Engineering Test Management Vulnerability Detail...

Security Bulletin: The IBM® Engineering Lifecycle Engineering products using IBM WebSphere Application Server traditional is vulnerable to stored cross-site scripting

Summary IBM WebSphere Application Server is vulnerable to stored cross-site scripting in the administrative console.Following IBM® Engineering Lifecycle Engineering products is vulnerable to this attack, it has been addressed in this bulletin: IBM Engineering Test Management Vulnerability Details...

Malicious code in chialisp-lsp-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aeede289ccdfe7d4487e01b4eb54ed16a8666295df50031d9369d92f75d0d51e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2299 Malicious code in chialisp-lsp-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aeede289ccdfe7d4487e01b4eb54ed16a8666295df50031d9369d92f75d0d51e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2025-14330

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.14.0-rc2+ 241 Description A vulnerability in the Linux kernel has been resolved, related to the LoongArch architecture. The issue arises when the base address allocated from hugetlbfs is not aligned with the pm...

PT-2025-18394

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, related to the pci endpoint test module. The issue occurs when devm request irq fails with an error in pci endpoint test request ir...

SUSE CVE-2024-58064

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: tests: Fix potential NULL dereference in testcfg80211parsecolocatedap kunitkzalloc may return NULL, dereferencing it without NULL check may lead to NULL dereference. Add a NULL check for ies...

DEBIAN-CVE-2025-21825

In the Linux kernel, the following vulnerability has been resolved: bpf: Cancel the running bpftimer through kworker for PREEMPTRT During the update procedure, when overwrite element in a pre-allocated htab, the freeing of oldelement is protected by the bucket lock. The reason why the bucket lock...

UBUNTU-CVE-2024-58064

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: tests: Fix potential NULL dereference in testcfg80211parsecolocatedap kunitkzalloc may return NULL, dereferencing it without NULL check may lead to NULL dereference. Add a NULL check for ies...

CVE-2024-58064

Technical details for CVE-2024-58064 are not provided in the given documents; no affected products, impact, or fix are specified here. Monitor for updates from vendor/advisory sources.

CVE-2024-58057 idpf: convert workqueues to unbound

In the Linux kernel, the following vulnerability has been resolved: idpf: convert workqueues to unbound When a workqueue is created with WQUNBOUND, its work items are served by special worker-pools, whose host workers are not bound to any specific CPU. In the default configuration i.e. when...

Malicious code in @domons/test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b3fb4b8817484cd6bd07e6b222ab6a29f0b7ec9655b273a41638c382e54aafb5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-0359

During an annual penetration test conducted on behalf of Axis Communication, Truesec discovered a flaw in the ACAP Application framework that allowed applications to access restricted D-Bus methods within the framework. Axis has released patched AXIS OS versions for the highlighted flaw. Please...

Linux Distros Unpatched Vulnerability : CVE-2024-53680

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipvs: fix UB due to uninitialized stack access in ipvsprotocolinit Under certain kernel configurations when building with Clang/LLVM, the compiler does not...

Malicious code in test-hahahaha-rce3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ce7e808fea7413db7d10b8c0607e5f0dd67c2457b07927a33cfd7e3dd38b287 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in test-hahahaha-rce (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a60b5f6a059fbad46e0862b86aaea8203f5531a5d6691caef7ecdd1602146900 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in test-hahahaha-rce1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a18b76d33491e814707ce726adfafe10db9ac7b492d3a76713d3f0ade1f5ef3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Linux Distros Unpatched Vulnerability : CVE-2024-39474

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: fix vmalloc which may return null if called with GFPNOFAIL commit a421ef303008...

Linux Distros Unpatched Vulnerability : CVE-2021-47379

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: fix UAF by grabbing blkcg lock before destroying blkg pd KASAN reports a...

Linux Distros Unpatched Vulnerability : CVE-2024-41004

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: tracing: Build event generation tests only as modules The kprobes and synth event generation...