EUVD-2025-204932

Malicious code in caterpillar-test npm...

MAL-2025-192721 Malicious code in caterpillar-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cee104c34e41cb787c2d46e688a313a07795fe400980c987286fd1570d68d66 The package caterpillar-test was found to contain malicious code...

Malicious code in caterpillar-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cee104c34e41cb787c2d46e688a313a07795fe400980c987286fd1570d68d66 The package caterpillar-test was found to contain malicious code...

MAL-2025-192720 Malicious code in canva-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca4b6f4ad16e69de0b0fa6e7d45b8e7349f01fb65bd8a8ce903801f92aed16f5 The package canva-test was found to contain malicious code...

Malicious code in canva-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca4b6f4ad16e69de0b0fa6e7d45b8e7349f01fb65bd8a8ce903801f92aed16f5 The package canva-test was found to contain malicious code...

EUVD-2025-204933

Malicious code in canva-test npm...

Malicious code in baidu-src-test4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15d38e0e00f51e045ab813f8aa805cd532c164ee66f9960af5ba7ee0f286b80c The package baidu-src-test4 was found to contain malicious code...

WordPress plugin Chakra test 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. A lack of authorization vulnerability exists in the WordPress Chakra test plugin, which can be exploited by an attacker to cause the exploitation of a misconfigured access contr...

PT-2025-52740

Name of the Vulnerable Software and Affected Versions Chakra test versions through 1.0.1 Description A missing authorization issue exists in Chakra test, allowing exploitation of incorrectly configured access control security levels. Recommendations Update Chakra test to a version newer than 1.0....

EUVD-2025-204500

Malicious code in test-mal-npm-pkg npm...

Malicious Package

Overview test-mal-npm-pkg is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

org.elasticsearch.test:framework (>=9.2.0 <=9.2.1), org.elasticsearch.test:yaml-rest-runner (>=9.2.0 <=9.2.1) +1 more potentially affected by CVE-2025-68390 via org.elasticsearch:elasticsearch (>=9.2.0 <=9.2.1)

org.elasticsearch:elasticsearch MAVEN version =9.2.0, =9.2.0, =9.2.0, =9.2.1 - pl.allegro.tech.elasticsearch.plugin:elasticsearch-analysis-morfologik =9.2.1 Source cves: CVE-2025-68390 Source advisory: SNYK:JAVA-ORGELASTICSEARCH-14534841...

Security update for salt

This update for salt fixes the following issues: Security issues fixed: CVE-2025-62349: Added minimumauthversion to enforce security bsc1254257 CVE-2025-62348: Fixed Junos module yaml loader bsc1254256 Backport security fixes for vendored tornado BDSA-2024-3438 BDSA-2024-3439 BDSA-2024-9026 Other...

AutoDFBench 1.0: A Benchmarking Framework for Digital Forensic Tool Testing and Generated Code Evaluation

The National Institute of Standards and Technology NIST Computer Forensic Tool Testing CFTT programme has become the de facto standard for providing digital forensic tool testing and validation. However to date, no comprehensive framework exists to automate benchmarking across the diverse forensi...

libssh security update

0.10.4-17 - Bump spec to resolve build tagging issues 0.10.4-16 - Fix CVE-2025-5987 Resolves: RHEL-130051 - Workaround sshd failure rate limiting in tests Resolves: RHEL-135506...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to an arbitrary code execution in Python-Future [CVE-2025-50817]

Summary IBM Watson Speech Services Cartridge is vulnerable to an arbitrary code execution in Python-Future, due to the unintended import of a file named test.py. CVE-2025-50817. Python-Future is used in our service runtimes. This vulnerabilitiy has been addressed. Please read the details for...

CVE-2025-67898

MJML through 4.18.0 allows mj-include directory traversal to test file existence and in the type="css" case read files. NOTE: this issue exists because of an incomplete fix for CVE-2020-12827...

Malicious Package

Overview test-website-hashroute is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...

Malicious Package

Overview rspack-test-tool is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

EUVD-2025-203792

In the Linux kernel, the following vulnerability has been resolved: usb: storage: Fix memory leak in USB bulk transport A kernel memory leak was identified by the 'ioctlsg01' test from Linux Test Project LTP. The following bytes were mainly observed: 0x53425355. When USB storage devices incorrect...