CVE-2025-50891

The server-side backend for Adform Site Tracking before 2025-08-28 allows attackers to inject HTML or execute arbitrary code via cookie hijacking. NOTE: a customer does not need to take any action to update locally installed software such as Adform Site Tracking 1.1...

Linux Distros Unpatched Vulnerability : CVE-2024-10026

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A weak hashing algorithm and small sizes of seeds/secrets in Google's gVisor allowed for a remote attacker to calculate a local IP address and a per-boot...

CVE-2025-38511

In the Linux kernel, the following vulnerability has been resolved: drm/xe/pf: Clear all LMTT pages on alloc Our LMEM buffer objects are not cleared by default on alloc and during VF provisioning we only setup LMTT PTEs for the actually provisioned LMEM range. But beyond that valid range we might...

GHSA-77H3-W9RX-HJ3Q User-defined implementations of the safe trait scratchpad::Tracking can cause heap buffer overflows

The get and set methods of the public trait scratchpad::Tracking interact with unsafe code regions in the crate, and they influence the computation of addresses returned as raw pointers. However, the trait itself is not marked as unsafe, meaning users may provide custom implementations under the...

User-defined implementations of the safe trait scratchpad::Tracking can cause heap buffer overflows

The get and set methods of the public trait scratchpad::Tracking interact with unsafe code regions in the crate, and they influence the computation of addresses returned as raw pointers. However, the trait itself is not marked as unsafe, meaning users may provide custom implementations under the...

Malicious code in @berush/tracking-pixel (npm)

The package @berush/tracking-pixel was found to contain malicious code...

Malicious code in hw-tracking (npm)

The package hw-tracking was found to contain malicious code...

Malicious code in paychex-tracking (npm)

The package paychex-tracking was found to contain malicious code...

MAL-2025-7063 Malicious code in @amber-team/react-event-tracking (npm)

The package @amber-team/react-event-tracking was found to contain malicious code...

Malicious code in hw-performance-tracking (npm)

The package hw-performance-tracking was found to contain malicious code...

Malicious code in airbnb-tracking (npm)

The package airbnb-tracking was found to contain malicious code...

Malicious code in sp-tracking (npm)

The package sp-tracking was found to contain malicious code...

MAL-2025-22830 Malicious code in hw-tracking (npm)

The package hw-tracking was found to contain malicious code...

MAL-2025-28939 Malicious code in paychex-tracking (npm)

The package paychex-tracking was found to contain malicious code...

MAL-2025-14197 Malicious code in airbnb-tracking (npm)

The package airbnb-tracking was found to contain malicious code...

Malicious code in @amber-team/react-event-tracking (npm)

The package @amber-team/react-event-tracking was found to contain malicious code...

MAL-2025-22824 Malicious code in hw-performance-tracking (npm)

The package hw-performance-tracking was found to contain malicious code...

MAL-2025-33691 Malicious code in sp-tracking (npm)

The package sp-tracking was found to contain malicious code...

MAL-2025-7118 Malicious code in @berush/tracking-pixel (npm)

The package @berush/tracking-pixel was found to contain malicious code...

Malicious Package

Overview tblogduo is a malicious package. This package contains malicious code, and its content was removed from the official package manager. The package appears to be part of a larger campaign targeting user credentials. It, and several other variations, masquerade as automation tools for socia...