Malicious code in verify-taic-malasikibakulu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47b1ae88a691fd11cf0cee9bc2f9bc44388825f50a0b9a1093a25873613591ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-146495

Malicious code in verify-aiun-misiuka npm...

EUVD-2025-146338

Malicious code in verify-taic-alusakiliamu npm...

Malicious code in verify-ticaul-bisusayaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 510c47dfba0a56ed21a75451a734cc8e689341285e605b9037e84697606dc814 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-ain-ukasiamunsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47688d142037065dc59318fc285be09b89866bc93f66d707c1b48e1ab322c8d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-146506

Malicious code in verify-ain-sulapia npm...

EUVD-2025-146533

Malicious code in verify-aikun-miau npm...

EUVD-2025-146341

Malicious code in verify-taic-alusakilamu npm...

EUVD-2025-124954

In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix null pointer dereference on zero-length checksum In xdrstreamdecodeopaqueauth, zero-length checksum.len causes checksum.data to be set to NULL. This triggers a NPD when accessing checksum.data in gsskrb5verifymicv2...

CVE-2025-40129

In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix null pointer dereference on zero-length checksum In xdrstreamdecodeopaqueauth, zero-length checksum.len causes checksum.data to be set to NULL. This triggers a NPD when accessing checksum.data in gsskrb5verifymicv2...

UBUNTU-CVE-2025-40129

In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix null pointer dereference on zero-length checksum In xdrstreamdecodeopaqueauth, zero-length checksum.len causes checksum.data to be set to NULL. This triggers a NPD when accessing checksum.data in gsskrb5verifymicv2...

CVE-2025-40129

CVE-2025-40129 is a Linux kernel vulnerability addressed in Unity Linux/UTSA-2026-013110: sunrpc may dereference checksum.data due to a zero-length checksum in xdr_stream_decode_opaque_auth(), causing a null pointer dereference when gss_krb5_verify_mic_v2() accesses checksum.data. The patch ensur...

CVE-2025-40129 sunrpc: fix null pointer dereference on zero-length checksum

In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix null pointer dereference on zero-length checksum In xdrstreamdecodeopaqueauth, zero-length checksum.len causes checksum.data to be set to NULL. This triggers a NPD when accessing checksum.data in gsskrb5verifymicv2...

Linux Distros Unpatched Vulnerability : CVE-2025-40129

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sunrpc: fix null pointer dereference on zero-length checksum In xdrstreamdecodeopaqueauth, zero- length checksum.len causes checksum.data to be set to NULL. Thi...

kernel: ima: Fix a potential integer overflow in ima_appraise_measurement

In the Linux kernel, the following vulnerability has been resolved: ima: Fix a potential integer overflow in imaappraisemeasurement When the ima-modsig is enabled, the rc passed to evmverifyxattr may be negative, which may cause the integer overflow problem...

Improper Certificate Validation

Overview Affected versions of this package are vulnerable to Improper Certificate Validation due to insufficient peer verification logic in the verifyPeerCert function. An attacker can impersonate privileged API components and execute unauthorized operations by compromising a single instance and...

Improper Certificate Validation

Overview Affected versions of this package are vulnerable to Improper Certificate Validation due to insufficient peer verification logic in the verifyPeerCert function. An attacker can impersonate privileged API components and execute unauthorized operations by compromising a single instance and...

CVE-2025-46404

A denial of service vulnerability exists in the lassoproviderverifysamlsignature functionality of Entr'ouvert Lasso 2.5.1. A specially crafted SAML response can lead to a denial of service. An attacker can send a malformed SAML response to trigger this vulnerability...

CVE-2025-10740

The URL Shortener Plugin For WordPress plugin for WordPress is vulnerable to unauthorized access to functionality provided by the API due to a missing capability check on the verifyRequest function in all versions up to, and including, 3.0.7. This makes it possible for authenticated attackers, wi...

EUVD-2025-35820

The URL Shortener Plugin For WordPress plugin for WordPress is vulnerable to unauthorized access to functionality provided by the API due to a missing capability check on the verifyRequest function in all versions up to, and including, 3.0.7. This makes it possible for authenticated attackers, wi...