MAL-2025-42085 Malicious code in solidity-utils-docify (npm)

The package solidity-utils-docify was found to contain malicious code...

MAL-2025-41965 Malicious code in d360-test-utils (npm)

The package d360-test-utils was found to contain malicious code...

Malicious code in d360-test-utils (npm)

The package d360-test-utils was found to contain malicious code...

CVE-2025-9650 yeqifu carRental AppFileUtils.java removeFileByPath path traversal

A vulnerability has been found in yeqifu carRental up to 3fabb7eae93d209426638863980301d6f99866b3. This affects the function removeFileByPath of the file src/main/java/com/yeqifu/sys/utils/AppFileUtils.java. The manipulation of the argument carimg leads to path traversal. The attack is possible t...

CVE-2025-9650 yeqifu carRental AppFileUtils.java removeFileByPath path traversal

A vulnerability has been found in yeqifu carRental up to 3fabb7eae93d209426638863980301d6f99866b3. This affects the function removeFileByPath of the file src/main/java/com/yeqifu/sys/utils/AppFileUtils.java. The manipulation of the argument carimg leads to path traversal. The attack is possible t...

ROS-20250829-01

A vulnerability in the mount.cifs.c component of the CIFS network file system mount utility package cifs-utils of the Linux operating system is related to writing beyond buffer boundaries in memory. Exploitation exploitation of the vulnerability could allow an attacker to escalate his privileges...

Malicious code in @rbapp/utils (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-41933 Malicious code in @rbapp/utils (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

Malicious code in @rbacore/utils (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-41924 Malicious code in @rbacore/utils (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

Malicious code in https-proxy-utils (npm)

--- -= Per source details. Do not edit below this line.=-...

Google Android rfc_utils.cc file memory misreference vulnerability

Google Android is a Linux-based open source operating system from Google. A memory misreference vulnerability exists in the Google Android rfcutils.cc file, which can be exploited by an attacker to execute arbitrary code on the system...

Linux Distros Unpatched Vulnerability : CVE-2022-21682

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Flatpak is a Linux application sandboxing and distribution framework. A path traversal vulnerability affects versions of Flatpak prior to 1.12.3 and 1.10.6...

Linux Distros Unpatched Vulnerability : CVE-2019-3689

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The nfs-utils package in SUSE Linux Enterprise Server 12 before and including version 1.3.0-34.18.1 and in SUSE Linux Enterprise Server 15 before and including...

MAL-2025-47794 Malicious code in py-sys-utils (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 0f9d0b03bfee3afe8585a595eb40b5bb3d9d59db389bc864641b19aadd6bb764 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

CLSA-2025-1755623284 Update of amazon-efs-utils

Bump release...

CLSA-2025-1755622959 Update of amazon-efs-utils

Bump release...

@antonyfaris/prefix-node-builtins (>=1.0.0 <=1.0.1), @awesome-myst/myst-awesome (>=0.0.1 <=0.0.7) +7 more potentially affected by CVE-2025-55303 via astro (>=5.0.0-beta.5 <=5.13.10)

astro NPM version =5.0.0-beta.5, =1.0.0, =0.0.1, =0.0.1, =0.1.8, =0.0.1, =0.0.1, =1.249.8, =1.267.0 Source cves: CVE-2025-55303 Source advisory: SNYK:JS-ASTRO-12027668...

OPENSUSE-SU-2025:15461-1 aws-efs-utils-2.3.3-1.1 on GA media

These are all security issues fixed in the aws-efs-utils-2.3.3-1.1 package on the GA media of openSUSE Tumbleweed...

Beneath the Mask: Can Contribution Data Unveil Malicious Personas in Open-Source Projects?

In February 2024, after building trust over two years with project maintainers by making a significant volume of legitimate contributions, GitHub user "JiaT75" self-merged a version of the XZ Utils project containing a highly sophisticated, well-disguised backdoor targeting sshd processes running...