Ukrainian Woman in US Custody for Aiding Russian NoName057 Hacker Group

Ukrainian national Victoria Dubranova is in U.S. custody, accused of supporting Russian hacker group NoName057 in cyberattacks on critical infrastructure. She has pleaded not guilty...

CVE-2025-65942

VictoriaMetrics is a scalable solution for monitoring and managing time series data. In versions from 1.0.0 to before 1.110.23, from 1.111.0 to before 1.122.8, and from 1.123.0 to before 1.129.1, affected versions are vulnerable to DoS attacks because the snappy decoder ignored VictoriaMetrics...

CVE-2025-65942 VictoriaMetrics Snappy Decoder DoS Vulnerability is Causing OOM

VictoriaMetrics is a scalable solution for monitoring and managing time series data. In versions from 1.0.0 to before 1.110.23, from 1.111.0 to before 1.122.8, and from 1.123.0 to before 1.129.1, affected versions are vulnerable to DoS attacks because the snappy decoder ignored VictoriaMetrics...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the snappy:Decoder function. An attacker can cause excessive memory consumption and potential out-of-memory errors by sending malformed blocks that bypass request size limits. This...

VictoriaMetrics' Snappy Decoder DoS Vulnerability is Causing OOM

Impact Affected versions are vulnerable to DoS attacks because the snappy decoder ignored VictoriaMetrics request size limits allowing malformed blocks to trigger excessive memory use. This could lead to OOM errors and service instability. The fix enforces block-size checks based on MaxRequest...

VictoriaMetrics 安全漏洞

VictoriaMetrics is a time series database open-sourced by VictoriaMetrics. A security vulnerability exists in VictoriaMetrics versions 1.0.0 through 1.110.23 prior, 1.111.0 through 1.122.8 prior, and 1.123.0 through 1.129.1 prior, which stems from a request size limit being ignored by the snappy...

PT-2025-48095

Name of the Vulnerable Software and Affected Versions VictoriaMetrics versions 1.0.0 through 1.110.22 VictoriaMetrics versions 1.111.0 through 1.122.7 VictoriaMetrics versions 1.123.0 through 1.129.0 Description The software is susceptible to Denial of Service DoS attacks. The snappy decoder did...

Malicious code in victoria-wallet-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 305ff7c4db9d9046f3637aeb746d2f95c58e1083e6fd8cfecf220f9a20911162 The package victoria-wallet-validator was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-199202

Malicious code in victoria-wallet-validator npm...

MAL-2025-191149 Malicious code in victoria-wallet-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 305ff7c4db9d9046f3637aeb746d2f95c58e1083e6fd8cfecf220f9a20911162 The package victoria-wallet-validator was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191148 Malicious code in victoria-wallet-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52da1ed8745249f87107187efa740b8362b45543bfa3e003ebdfd585b2e7ef2e The package victoria-wallet-utils was found to contain malicious code. Source: ghsa-malware...

Malicious code in victoria-wallet-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52da1ed8745249f87107187efa740b8362b45543bfa3e003ebdfd585b2e7ef2e The package victoria-wallet-utils was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-199203

Malicious code in victoria-wallet-utils npm...

MAL-2025-191147 Malicious code in victoria-wallet-type (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db5621bc10f18615bd2282fd957a36730167a4e9318f35873c35258f033b2aad The package victoria-wallet-type was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-199204

Malicious code in victoria-wallet-type npm...

Malicious code in victoria-wallet-type (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db5621bc10f18615bd2282fd957a36730167a4e9318f35873c35258f033b2aad The package victoria-wallet-type was found to contain malicious code. Source: ghsa-malware...

Malicious code in victoria-wallet-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 924849bafc2cba1cd7f57e91e4081641157914e17ec847844133b3b281afebcd The package victoria-wallet-core was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-199207

Malicious code in victoria-wallet-core npm...

MAL-2025-191146 Malicious code in victoria-wallet-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 924849bafc2cba1cd7f57e91e4081641157914e17ec847844133b3b281afebcd The package victoria-wallet-core was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191145 Malicious code in victoria-wallet-constants (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 386cd3860a3dba5eeaebaa25b379430bd515f2295a2639ef6228b28b9dabb3cd The package victoria-wallet-constants was found to contain malicious code. Source: ghsa-malware...