CVE-2025-60706

Out-of-bounds read in Windows Hyper-V allows an authorized attacker to disclose information locally...

EUVD-2025-145534

Malicious code in gracewhite npm...

MAL-2025-155382 Malicious code in guras-asia-v (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be45faebf774d4bc77174806ed291f085e894027e5145addc89728ddac5c45f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in madrid-ucl-v (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0527b191c6c44cd3b4d886b4f2eb29bd8a8251b36514401f864066fe0b0ad7fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120860

Malicious code in ursa-protractor-eleventy-antares npm...

EUVD-2025-117199

Malicious code in nutty-emerald-bison npm...

EUVD-2025-99902

Malicious code in dewi-otak-otak65-riris npm...

EUVD-2025-100003

Malicious code in dewanto-nasiuduk48-riris npm...

Microsoft Patch Tuesday, November 2025 Security Update Review

Microsoft released its November Patch Tuesday Security Updates. Here's a quick breakdown of what you need to know. Microsoft Patch Tuesday for November 2025 This month's release addresses 68 vulnerabilities, including five critical and 59 important-severity vulnerabilities. In this month's update...

CVE-2025-60706

Out-of-bounds read in Windows Hyper-V allows an authorized attacker to disclose information locally...

CVE-2025-60706 Windows Hyper-V Information Disclosure Vulnerability

...

CVE-2025-60706

According to the NCSC advisory, CVE-2025-60706 is a vulnerability in Windows Hyper-V where an out-of-bounds read can allow an authorized local attacker to disclose information (impact: access to sensitive data). The CVE is listed under Windows Hyper-V in the advisory with a CVSS v3.1 base score o...

CVE-2025-60706 Windows Hyper-V Information Disclosure Vulnerability

...

CVE-2025-63384

A vulnerability was discovered in RISC-V Rocket-Chip v1.6 and before implementation where the SRET Supervisor-mode Exception Return instruction fails to correctly transition the processor's privilege level. Instead of downgrading from Machine-mode M-mode to Supervisor-mode S-mode as specified by...

EUVD-2025-78446

Malicious code in remotepikez3n npm...

EUVD-2025-83498

Malicious code in wawan-taiwan79-ruro npm...

EUVD-2025-69848

Malicious code in indah-liwet45-ruro npm...

EUVD-2025-71323

Malicious code in toughcondorz3n npm...

EUVD-2025-59221

Malicious code in ida-keripik5-sluey npm...

Microsoft Hyper-V 缓冲区错误漏洞

Microsoft Hyper-V is an application from Microsoft Corporation USA. A system hypervisor virtualization technology that enables desktop virtualization. A buffer error vulnerability exists in Microsoft Hyper-V. An attacker exploiting this vulnerability could gain access to sensitive information. Th...