MAL-2025-2297 Malicious code in auth-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 76847b48ca1b5549990fb4ce13215fc4034a40d098eb03794a245e5ea28df8d7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in empty-array-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 349e81874005a4e4ed11f5e452324e817f3fc61d4a22f5237445d562df83fb60 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in empty-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e4f29eb4e06a456c0243473ddb4cf4b5953ab107489b4a79b5f3ccbebf67ebcd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in array-empty-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9923e27ee77980880cfc13a3c78c4903c58bed58f9257ac0407d57841fcc7853 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2308 Malicious code in empty-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e4f29eb4e06a456c0243473ddb4cf4b5953ab107489b4a79b5f3ccbebf67ebcd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2296 Malicious code in array-empty-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9923e27ee77980880cfc13a3c78c4903c58bed58f9257ac0407d57841fcc7853 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2307 Malicious code in empty-array-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 349e81874005a4e4ed11f5e452324e817f3fc61d4a22f5237445d562df83fb60 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in yoojae-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc98fbe305ce2dc7d6ada4fca1d13920ebb82e43a8cf91af458cd37c509ed466 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2336 Malicious code in yoojae-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc98fbe305ce2dc7d6ada4fca1d13920ebb82e43a8cf91af458cd37c509ed466 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in is-buffer-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec624113b772adb7a894fb1633bfeb1846f0b05bc072b04aabcb7cf0ffd36812 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2317 Malicious code in is-buffer-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec624113b772adb7a894fb1633bfeb1846f0b05bc072b04aabcb7cf0ffd36812 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Security Bulletin: Hibernate Hibernate Validator could allow a remote attacker to bypass security restriction which affects watsonx.data

Summary Hibernate Hibernate Validator could allow a remote attacker to bypass security restrictions, caused by a flaw in the message interpolation processor, which may impact watsonx.data. Vulnerability Details CVEID:CVE-2020-10693 DESCRIPTION: Hibernate Hibernate Validator could allow a remote...

Horcrux Double Sign Possibility

Horcrux Incident Disclosure: Possible Double-Sign Summary On March 6, 2025, a Horcrux user 01node experienced a double-signing incident on the Osmosis network, resulting in a 5% slash penalty approximately 75,000 OSMO or $20,000 USD. After thorough investigation, we have identified a race conditi...

GHSA-6WXF-7784-62FP Horcrux Double Sign Possibility

Horcrux Incident Disclosure: Possible Double-Sign Summary On March 6, 2025, a Horcrux user 01node experienced a double-signing incident on the Osmosis network, resulting in a 5% slash penalty approximately 75,000 OSMO or $20,000 USD. After thorough investigation, we have identified a race conditi...

Linux Distros Unpatched Vulnerability : CVE-2024-50343

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - symfony/validator is a module for the Symphony PHP framework which provides tools to validate values. It is possible to trick a Validator configured with a...

Linux Distros Unpatched Vulnerability : CVE-2022-49433

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/hfi1: Prevent use of lock before it is initialized If there is a failure during probe of hfi1 before the sdmamaplock is initialized, the call to...

Linux Distros Unpatched Vulnerability : CVE-2017-7536

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Hibernate Validator 5.2.x before 5.2.5 final, 5.3.x, and 5.4.x, it was found that when the security manager's reflective permissions, which allows it to acce...

CVE-2022-49433

In the Linux kernel, the following vulnerability has been resolved: RDMA/hfi1: Prevent use of lock before it is initialized If there is a failure during probe of hfi1 before the sdmamaplock is initialized, the call to hfi1freedevdata will attempt to use a lock that has not been initialized. If th...

CVE-2022-49433

The CVE-2022-49433 entry is confirmed with concrete details in connected advisories: in the Linux kernel RDMA/hfi1 driver, a path may call hfi1_free_devdata() with sdma_map_lock uninitialized if probe of hfi1 fails before sdma_map_lock is set up. This could lead to locking operations being perfor...

Debian: Security Advisory (DLA-4066-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...