EUVD-2025-73136

Malicious code in universalhornetrequirement npm...

Malicious code in universal_moth_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0279e38d43b41193c8d4e515d7f4ae50828e69fd137bf1d54fc3481f92d5c745 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in universal_trout_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31d6f1942156b19e2690861533f499f7a2b84efd5852aef077da91a42b60a6b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97153 Malicious code in universal_albatross_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1030513190f779cdc56f77b105a851e606b9c3798d25a00fac1eb1def6731561 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-65722

Malicious code in universalbarnaclez3n npm...

MAL-2025-91532 Malicious code in universal_barnacle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d2cc5e48c99528d151c60ba57e1fd2c217c288fc38ce6a7f716dcbd00b704b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-51338

Malicious code in universal-cyan-stingray npm...

MAL-2025-71311 Malicious code in universal-cyan-stingray (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1219ebce5c6e3e4ce4b6f83e4d055e91fe956f20a6d23116054154b23665700 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-51337

Malicious code in universal-purple-pike npm...

EUVD-2025-51339

Malicious code in universal-amaranth-raccoon npm...

Malicious code in universal-cyan-stingray (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1219ebce5c6e3e4ce4b6f83e4d055e91fe956f20a6d23116054154b23665700 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Security Bulletin: Multiple security vulnerabilities in RedHat UBI affect IBM Robotic Process Automation for Cloud Pak

Summary Multiple vulnerabilities in RedHat UBI affect IBM Robotic Process Automation for Cloud Pak. RedHat UBI is used as base imaged for IBM Robotic Process Automation for Cloud Pak images. This bulletin identifies the fixes required to address the vulnerabilites. Vulnerability Details...

[SECURITY] Fedora 41 Update: golang-github-openprinting-ipp-usb-0.9.30-7.fc41

HTTP reverse proxy, backed by IPP-over-USB connection to device. It enables driverless support for USB devices capable of using IPP-over-USB protocol...

[SECURITY] Fedora 42 Update: golang-github-openprinting-ipp-usb-0.9.30-7.fc42

HTTP reverse proxy, backed by IPP-over-USB connection to device. It enables driverless support for USB devices capable of using IPP-over-USB protocol...

Cryptographic Binding Should Not Be Optional: A Formal-Methods Analysis of FIDO UAF Channel Binding

As a case study in cryptographic binding, we present a formal-methods analysis of the cryptographic channel binding mechanisms in the Fast IDentity Online FIDO Universal Authentication Framework UAF authentication protocol, which seeks to reduce the use of traditional passwords in favor of...

USN-7853-3 linux-azure, linux-azure-4.15 vulnerabilities

Jean-Claude Graf, Sandro Rüegge, Ali Hajiabadi, and Kaveh Razavi discovered that the Linux kernel contained insufficient branch predictor isolation between a guest and a userspace hypervisor for certain processors. This flaw is known as VMSCAPE. An attacker in a guest VM could possibly use this t...

CVE-2025-62065

creationtimestamp| type| source ---|---|--- 2025-11-06 22:00:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4yksy7iet2s...

EUVD-2025-38049

On Elspec G5 devices through 1.2.2.19, a person with physical access to the device can reset the Admin password by inserting a USB drive containing a publicly documented reset string into a USB port...

CVE-2025-59392

The CVE describes a vulnerability in Elspec G5 devices (versions up to and including 1.2.2.19) where a user with physical access can reset the Admin password by inserting a USB drive containing a publicly documented reset string. Root cause is physical access combined with USB-based reset data; i...

PT-2025-45256

Name of the Vulnerable Software and Affected Versions Elspec G5 versions through 1.2.2.19 Description A person with physical access to the device can reset the Admin password by inserting a USB drive containing a publicly documented reset string into a USB port. Recommendations Versions prior to...