Malicious code in hardhat-ethers-react-ts-starter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f8762e2209b41b4f6eb94a4d56674ed8d23f5ecba64034e0825fe7490fea5c78 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2025-11072 · Google · Android

Name of the Vulnerable Software and Affected Versions: rfc ts frames.cc affected versions not specified Description: A use-after-free issue exists in the rfc send buf uih function within rfc ts frames.cc. This could allow for arbitrary code execution, potentially leading to local escalation of...

CVE-2024-53692

A command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to execute arbitrary commands. We have already fixed the vulnerability in the following versions:...

PT-2025-10099

Name of the Vulnerable Software and Affected Versions QTS versions prior to 5.2.0.2851 build 20240808 QuTS hero versions prior to h5.2.0.2851 build 20240808 Description A sensitive information exposure issue has been identified, which could allow remote attackers to compromise system security if...

CVE-2025-23515

Missing Authorization vulnerability in tsecher ts-tree ts-tree allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ts-tree: from n/a through = 0.1.1...

MAL-2025-1949 Malicious code in typespec-ts-interface-emitter (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2025-23515 WordPress ts-tree plugin <= 0.1.1 - Arbitrary Content Deletion vulnerability

Missing Authorization vulnerability in tsecher ts-tree ts-tree allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ts-tree: from n/a through = 0.1.1...

CVE-2025-23515 WordPress ts-tree plugin <= 0.1.1 - Arbitrary Content Deletion vulnerability

Missing Authorization vulnerability in tsecher ts-tree ts-tree allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ts-tree: from n/a through = 0.1.1...

CVE-2025-23515

CVE-2025-23515 corresponds to a Missing Authorization vulnerability in the WordPress plugin ts-tree, affecting ts-tree versions up to 0.1.1. The vulnerability is described as Arbitrary Content Deletion due to insufficient access control (Authenticated/Subscriber+ level). Public data confirms the ...

MAL-2025-2035 Malicious code in console-node-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ecc4bf06f248fd5a32e4fed3e3e70f9b5de43bde1b2d52cb55eca94c6f7810b0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in console-node-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ecc4bf06f248fd5a32e4fed3e3e70f9b5de43bde1b2d52cb55eca94c6f7810b0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

WordPress plugin ts-tree 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

MAL-2025-1636 Malicious code in ts-debugtools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a3f6757bf5754d4382f2a30e27ab0f9da0cb59e71231e5222d92ce9fd9c5065 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ts-debugtools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a3f6757bf5754d4382f2a30e27ab0f9da0cb59e71231e5222d92ce9fd9c5065 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ts-alpha-archive (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 70c8f2ae0b7a59a7ccefbf9994c9b2bbfbdae35fc8a5e00813f91126eba04074 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1635 Malicious code in ts-alpha-archive (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 70c8f2ae0b7a59a7ccefbf9994c9b2bbfbdae35fc8a5e00813f91126eba04074 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

DEBIAN-CVE-2022-49456

In the Linux kernel, the following vulnerability has been resolved: bonding: fix missed rcu protection When removing the rcureadlock in bondethtoolgettsinfo as discussed 1, I didn't notice it could be called via setsockopt, which doesn't hold rcu lock, as syzbot pointed: stack backtrace: CPU: 0...

PT-2025-8390 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.18.0-rc5-syzkaller-01392-g01f4685797a5 Description: A vulnerability in the Linux kernel has been resolved. The issue was related to the removal of the rcu read lock in the bond ethtool get ts info function,...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from the lack of rcu protection in the bondethtoolgettsinfo function...

MAL-2025-1381 Malicious code in ts-plugin-file-path-support (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a29c99a3decf55fe58b9d10ce858b903ae55f7d999f98549a8416b4c12352e65 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...