MAL-2025-2687 Malicious code in mathjax-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5b3b67677f9fc901fefa32f5a65afd65ac6a199d7ebb72be98b9ace3dbbad19 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Ubuntu: Security Advisory (USN-7362-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Moderate: Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.19.0 release

Red Hat OpenShift Dev Spaces 3.19 has been released. All containers have been updated to include feature enhancements, bug fixes and CVE fixes. Following the Red Hat Product Security standards this update is rated as having a security impact of Important. The Common Vulnerability Scoring System...

Linux Distros Unpatched Vulnerability : CVE-2018-15594

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - arch/x86/kernel/paravirt.c in the Linux kernel before 4.18.1 mishandles certain indirect calls, which makes it easier for attackers to conduct Spectre-v2 attack...

Malicious code in sip.js-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc79a8a90b9e2756012e6ea436db1bc15c17b4596bcedc556ce70cfd8800d99c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1662 Malicious code in sip.js-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc79a8a90b9e2756012e6ea436db1bc15c17b4596bcedc556ce70cfd8800d99c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1661 Malicious code in ringcentral-web-phone-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f5d0cdb47587dfa64b594d26d1b33dea3d9cb70b7f8a581fa66d1f005df4ee60 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in huma-contracts-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ffcd8e55c63708841725749619d1aa01ac52fa1345eab2c6dc53f3b9f2615581 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1560 Malicious code in huma-contracts-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ffcd8e55c63708841725749619d1aa01ac52fa1345eab2c6dc53f3b9f2615581 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-53573

Unifiedtransform v2.X is vulnerable to Incorrect Access Control. Unauthorized users can access and manipulate endpoints intended exclusively for administrative use. This issue specifically affects teacher/edit/id...

Malicious code in @starkgate-v2/web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fd18cb51b9bfc804c264ad648ce51fda4711022cb95ee99b35e70739222662ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1515 Malicious code in @starkgate-v2/web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fd18cb51b9bfc804c264ad648ce51fda4711022cb95ee99b35e70739222662ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-26552

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in badrHan Naver Syndication V2 badr-naver-syndication allows Stored XSS.This issue affects Naver Syndication V2: from n/a through = 0.8.3...

CVE-2025-26552

CVE-2025-26552 affects the WordPress plugin Naver Syndication V2 (versions up to 0.8.3). It describes a CSRF-to-Stored Cross‑Site Scripting vulnerability caused by improper input neutralization during web page generation. Public details in provided documents confirm the issue and affected product...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: inetdiag: The pad field in struct inetdiagreqv2 should be initialized. KMSAN reported an uninitialized access to uninitvalue in rawlookup. For raw sockets, the pad field in struct inetdiagreqv2 is used for the underlying...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Firmware: csdsp: Prevent buffer overflows when processing V2 algorithm headers. It is necessary to ensure that all fields of a V2 algorithm header fit within the available firmware data buffer. The wmfw V2 format introduced...

CVE-2024-22066

There is a privilege escalation vulnerability in ZTE ZXR10 ZSR V2 intelligent multi service router . An authenticated attacker could use the vulnerability to obtain sensitive information about the device...

Microsoft Exchange Autodiscover V2 User Enumeration

On-Premise installation of Microsoft Exchange is prone to a user enumeration through the ActiveSync protocol using the AutodiscoverV2 endpoint. No source data...

SUSE CVE-2024-5660

Use of Hardware Page Aggregation HPA and Stage-1 and/or Stage-2 translation on Cortex-A77, Cortex-A78, Cortex-A78C, Cortex-A78AE, Cortex-A710, Cortex-X1, Cortex-X1C, Cortex-X2, Cortex-X3, Cortex-X4, Cortex-X925, Neoverse V1, Neoverse V2, Neoverse V3, Neoverse V3AE, Neoverse N2 may permit bypass o...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from the net/smc module not properly checking the v2extoffset, eidcnt, and ismgidcnt fields when receiving an offer...