99 matches found
CVE-2026-74544
In the Linux kernel, the following vulnerability has been resolved: net/sched: clsu32: validate offshift to prevent shift-out-of-bounds u32change copies the user-provided tcu32sel.offshift unsigned char, 0-255 into the kernel knode object without bounds validation. When a packet later hits...
PT-2026-69573
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ublk component where the system waits on ub-completion instead of ublk dev ready. Because ub-completion is only re-armed by a successful START USER RECOVERY, a ubl...
Fedora 43 : librabbitmq (2026-436ef78874)
The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-436ef78874 advisory. Version 0.17.0 - 2026-07-01 Security - Fix sizet overflow in amqpdecodebytes bounds check leading to out-of-bounds read GHSA- jgjf-7fwf-f3c7, 888 - Fix heap...
SUSE-SU-2026:2490-1 Security update for libarchive
This update for libarchive fixes the following issues - CVE-2025-60753: bsdtar hangs and OOMs with zero-length pattern matches bsc1253088. - CVE-2026-4111: logical deadlock the RAR5 filter subsystem and the half-window output limiter leads to infinite loop and DoS bsc1259635. - CVE-2026-4424:...
EUVD-2026-28670
In the Linux kernel, the following vulnerability has been resolved: ublk: fix NULL pointer dereference in ublkctrlsetsize ublkctrlsetsize unconditionally dereferences ub-ubdisk via setcapacityandnotify without checking if it is NULL. ub-ubdisk is NULL before UBLKCMDSTARTDEV completes it is only...
CVE-2026-27814: Concurrent Execution using Shared Resource with Improper Synchronization
EVerest is an EV charging software stack. Versions prior to 2026.02.0 have a data race C++ UB triggered by an A 1-phase ↔ 3-phase switch request acswitchthreephaseswhilecharging during charging/waiting executes concurrently with the state machine loop. Version 2026.02.0 contains a patch...
CVE-2026-25541
Bytes is a utility library for working with bytes. From version 1.2.1 to before 1.11.1, Bytes is vulnerable to integer overflow in BytesMut::reserve. In the unique reclaim path of BytesMut::reserve, if the condition "vcapacity = newcap + offset" uses an unchecked addition. When newcap + offset...
Malicious code in lobac-ub-jagf (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8867d5a4adca4470b49a9ada07cc66bdd8d33802fd7b6715f89fde1562f2967b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in sonic-kots-ub (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6191a0201bc68b678aa7178537532393421df8bd55b30a21d5f64fef861d6f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in lobac-ub-afdmafdacafeu (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6e174eaa05b7b65e6ed969bc051aa0d8f9b7d7727edb3623214b55d2330175c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in lobac-ub-afdmafdacatfeu (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e95d40dd065d3ac16c6ecbba7f119369702ade4a442006780fb6891633cba58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-183394 Malicious code in lobac-ub-jma (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7932306511992d3115ceaee940c3690e668a76c9264585239ea245095346d591 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in lobac-ub-afu (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6b743762e0d76c300c0271597409ff49b03980a80296c853323e93244839899 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in lobac-ub-jfgaayuma (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30a064245ae6b242801867474940e337168fdd81ee1f1fb97262c00571db8580 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in lobac-ub-afdmau (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76c35499c93079f889ae2c4310a22ff5bbbd30925393ce56cc3f7e5b6ad8a9ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-183391 Malicious code in lobac-ub-jfuma (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc0e61a4f3e79ec5759a78db59773e4e8a7eff3a02e6e827444351ab64d832d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in lobac-ub-afdu (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24e80fb8e41c4d94f7aa38d5a729ecd5cb443f2636b59d5fe34aa647dae90387 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in lobac-ub-jm (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6007860efc7798b9e83e68f5b0fe2fd272ee355f93b3117153d20fb2c7943a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in lobac-ub-jfuma (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc0e61a4f3e79ec5759a78db59773e4e8a7eff3a02e6e827444351ab64d832d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...