Moderate: Red Hat Bug Fix Advisory: open-vm-tools bug fix and enhancement update

An update for open-vm-tools is now available for Red Hat Enterprise Linux 9. For detailed information on changes in this release, see the Red Hat Enterprise Linux 9 Release Notes linked from the References section...

open-vm-tools: Insecure file handling

A vulnerability was found in open-vm-tools. A malicious actor with non-administrative privileges on a guest virtual machine VM may tamper with the local files to trigger insecure file operations within that VM...

CVE-2025-5317

An improper access restriction to a folder in Bitdefender Endpoint Security Tools for Mac BEST before 7.20.52.200087 allows local users with administrative privileges to bypass the configured uninstall password protection. An unauthorized user with sudo privileges can manually remove the...

CVE-2025-5317 Improper access restriction to critical folder in Bitdefender Endpoint Security Tools for Mac

An improper access restriction to a folder in Bitdefender Endpoint Security Tools for Mac BEST before 7.20.52.200087 allows local users with administrative privileges to bypass the configured uninstall password protection. An unauthorized user with sudo privileges can manually remove the...

CVE-2025-5317

Bitdefender Endpoint Security Tools for Mac (BEST) before version 7.20.52.200087 contains an improper access restriction in a critical folder, enabling local users with administrative privileges (sudo) to bypass uninstall password protection and manually remove the application directory (/Applica...

Malicious code in rigid_cobra-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5e0028d610d714b33d73cb28c9d9818b39e7ab2df638d9a8ee7ce61e62df5cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-ragi52-remi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8775f35122a28d5a15ab8c124f866893fb1f4796fb17aacba171c09a8bdc76ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-tiwul31-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2abfc17b8e2bed9bb2238caef1ad4a0ba1c867d316209f4c95b7ac70443ffe69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-83292 Malicious code in arif-mangga97-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17ced1d2c23f717500adbdc6b30ab9fa1a5b9779cb6ceca04731a206f8f680f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zul-lepet21-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70af5c16a01d4e0b70a70c346b6b582ec71d00478a74186216cb669db96d2061 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in funny-yellow-sole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e0f4c67d882570b21d1d42ae1377f1843a514ee09e92a00dd718474f80b1c22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vite-plugin-postcss-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4552bafe10098b91c4ce3128c885efb1c472d7f7c18b7bca5d2b174ed097e396 The package vite-plugin-postcss-tools was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-50835

Malicious code in vite-plugin-postcss-tools npm...

Malicious Package

Overview vite-plugin-postcss-tools is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Moderate: open-vm-tools bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section...

KLA90062 Multiple vulnerabilities in Microsoft Developer Tools

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code. Below is a complete list of vulnerabilities: 1. A security feature bypass vulnerability in GitHub Copilot and Visual Studio...

RHEL 10 : binutils (RHSA-2025:20155)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:20155 advisory. The binutils packages provide a collection of binary utilities for the manipulation of object code in various object file formats. It includes the...

ALBA-2025:20841 Moderate: open-vm-tools bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section...

[SECURITY] Fedora 43 Update: uv-0.9.7-2.fc43

An extremely fast Python package installer and resolver, written in Rust. Designed as a drop-in replacement for common pip and pip-tools workflows. Highlights: =E2=80=A2 =E2=9A=96=EF=B8=8F Drop-in replacement for common pip, pip-tools, and virtualenv commands. =E2=80=A2 =E2=9A=A1=EF=B8=8F 10-100x...

PT-2025-46160

Name of the Vulnerable Software and Affected Versions Triofox versions prior to 16.7.10368.56560 Description Triofox is vulnerable to an Improper Access Control flaw that allows access to initial setup pages even after setup is complete. This vulnerability, designated CVE-2025-12480, allows...