Malicious code in verify-ayca-amia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d901f9f2064155ebf9ed02b03bdc4c21b78ab700ab46ea5af9f2d9ebe49d2ebb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-ai-aisai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 222ae743035d6f9b11b3e42d3795d9c7cb71dbdee9f887922c45bb52e8e9707b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170313 Malicious code in verify-ain-ukasiamunsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47688d142037065dc59318fc285be09b89866bc93f66d707c1b48e1ab322c8d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170275 Malicious code in verify-aikun-miaaku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 398973ea0ca70812f4077b5cf805843f9f2c7162a7a19a122bb238be162da60e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170415 Malicious code in verify-ayisali-gan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 153bf4eadd8b505e7149149c00446b7bf168f8fecfdb23fef449dc47b1e15a2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170321 Malicious code in verify-aiun-misuka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4afd3285b6d6a597b65790700012c91fa1236a05aeb42aa8ae1690959f84df8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170472 Malicious code in verify-taic-alusakiliabamu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector def577300a720458180524a1120162e41fd664809c46770d4711bdfa6ca49ed1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-146433

Malicious code in verify-ayic-amha npm...

EUVD-2025-124954

In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix null pointer dereference on zero-length checksum In xdrstreamdecodeopaqueauth, zero-length checksum.len causes checksum.data to be set to NULL. This triggers a NPD when accessing checksum.data in gsskrb5verifymicv2...

CVE-2025-40129

In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix null pointer dereference on zero-length checksum In xdrstreamdecodeopaqueauth, zero-length checksum.len causes checksum.data to be set to NULL. This triggers a NPD when accessing checksum.data in gsskrb5verifymicv2...

UBUNTU-CVE-2025-40129

In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix null pointer dereference on zero-length checksum In xdrstreamdecodeopaqueauth, zero-length checksum.len causes checksum.data to be set to NULL. This triggers a NPD when accessing checksum.data in gsskrb5verifymicv2...

CVE-2025-40129 sunrpc: fix null pointer dereference on zero-length checksum

In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix null pointer dereference on zero-length checksum In xdrstreamdecodeopaqueauth, zero-length checksum.len causes checksum.data to be set to NULL. This triggers a NPD when accessing checksum.data in gsskrb5verifymicv2...

CVE-2025-40129

CVE-2025-40129 is a Linux kernel vulnerability addressed in Unity Linux/UTSA-2026-013110: sunrpc may dereference checksum.data due to a zero-length checksum in xdr_stream_decode_opaque_auth(), causing a null pointer dereference when gss_krb5_verify_mic_v2() accesses checksum.data. The patch ensur...

Linux Distros Unpatched Vulnerability : CVE-2025-40129

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sunrpc: fix null pointer dereference on zero-length checksum In xdrstreamdecodeopaqueauth, zero- length checksum.len causes checksum.data to be set to NULL. Thi...

kernel: ima: Fix a potential integer overflow in ima_appraise_measurement

In the Linux kernel, the following vulnerability has been resolved: ima: Fix a potential integer overflow in imaappraisemeasurement When the ima-modsig is enabled, the rc passed to evmverifyxattr may be negative, which may cause the integer overflow problem...

Improper Certificate Validation

Overview Affected versions of this package are vulnerable to Improper Certificate Validation due to insufficient peer verification logic in the verifyPeerCert function. An attacker can impersonate privileged API components and execute unauthorized operations by compromising a single instance and...

Improper Certificate Validation

Overview Affected versions of this package are vulnerable to Improper Certificate Validation due to insufficient peer verification logic in the verifyPeerCert function. An attacker can impersonate privileged API components and execute unauthorized operations by compromising a single instance and...

CVE-2025-46404

A denial of service vulnerability exists in the lassoproviderverifysamlsignature functionality of Entr'ouvert Lasso 2.5.1. A specially crafted SAML response can lead to a denial of service. An attacker can send a malformed SAML response to trigger this vulnerability...

The vulnerability of the IBM Verify Identity Access system (formerly IBM Security Verify Access) relates to errors in privilege management, allowing attackers to elevate their privileges.

The vulnerability of the IBM Verify Identity Access system formerly IBM Security Verify Access is related to errors in privilege management. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

The vulnerability of the IBM Verify Identity Access system (formerly IBM Security Verify Access) relates to the inclusion of functions from an unreliable controlled area, allowing a perpetrator to execute arbitrary code.

The vulnerability of the IBM Verify Identity Access system formerly IBM Security Verify Access lies in the fact that its functions are integrated into an unverified controlled area. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...