429 matches found
CVE-2022-50567 fs: jfs: fix shift-out-of-bounds in dbAllocAG
In the Linux kernel, the following vulnerability has been resolved: fs: jfs: fix shift-out-of-bounds in dbAllocAG Syzbot found a crash : UBSAN: shift-out-of-bounds in dbAllocAG. The underlying bug is the missing check of bmp-dbagl2size. The field can be greater than 64 and trigger the...
PT-2025-43095
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the RISCV architecture related to ftrace and kernel preemption. The issue arises from the use of an AUIPC + JALR instruction pair to encode an...
Malicious Package
Overview phoenix-upper-funnel is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
EUVD-2017-15253
Malware in sbrugna...
EUVD-2019-2402
Malware in sbrugna...
EUVD-2019-7971
Malware in sbrugna...
EUVD-2009-4418
Malware in sbrugna...
EUVD-2019-5285
Malware in sbrugna...
PT-2025-44108
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.16.0-rc6 Description The Linux kernel contains a flaw in the ksm madvise function related to how flags are handled during MADV UNMEARGEABLE operations on memory regions registered for userfaultfd UFFD in MINOR...
EUVD-2025-27885
Malicious code in bioql PyPI...
EUVD-2022-0283
Malicious code in bioql PyPI...
EUVD-2025-26087
Malicious code in bioql PyPI...
EUVD-2023-2424
Malicious code in bioql PyPI...
EUVD-2023-59824
Malicious code in bioql PyPI...
EUVD-2024-2653
Malicious code in bioql PyPI...
Malicious code in phoenix-upper-funnel (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 63faa5490a7a15613381071d036657935856797ccd344b5cbc23f00075462078 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-47825 Malicious code in phoenix-upper-funnel (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 63faa5490a7a15613381071d036657935856797ccd344b5cbc23f00075462078 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in rc-phoenix-tpp-upper-funnel (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e7339748c4b25b1fb792f426edc2468aea1f9a626a53d8b25a29b364b48165d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-47826 Malicious code in rc-phoenix-tpp-upper-funnel (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e7339748c4b25b1fb792f426edc2468aea1f9a626a53d8b25a29b364b48165d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
SUSE CVE-2025-39874
In the Linux kernel, the following vulnerability has been resolved: macsec: sync features on RTMNEWLINK Syzkaller managed to lock the lower device via ETHTOOLSFEATURES: netdevlock include/linux/netdevice.h:2761 inline netdevlockops include/net/netdevlock.h:42 inline netdevsynclowerfeatures...