Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990787)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990787 advisory. In the Linux kernel, the following vulnerability has been resolved: tracing: Fix wild-memory-access in registersynthevent In registersynthevent, if...

EUVD-2025-100232

Malicious code in wildgullz3n npm...

EUVD-2025-87779

Malicious code in wildswanz3n npm...

EUVD-2025-87778

Malicious code in wildwildfowlz3n npm...

EUVD-2025-80038

Malicious code in wildviper0xrequest npm...

EUVD-2025-72917

Malicious code in wildbadgerz3n npm...

EUVD-2025-61755

Malicious code in wildsolez3n npm...

EUVD-2025-51065

Malicious code in wild-fuchsia-marlin npm...

EUVD-2025-51062

Malicious code in wild-teal-cod npm...

EUVD-2025-51063

Malicious code in wild-gold-chipmunk npm...

MAL-2025-71586 Malicious code in wild-gold-chipmunk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc154e347ffcc4db9fa6fc50d733b668e04518ac419ef2df682dfea70b7b010f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-51064

Malicious code in wild-fuchsia-pheasant npm...

EUVD-2025-51066

Malicious code in wild-blush-dingo npm...

PT-2025-46508

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description A race condition exists in the Windows Kernel due to improper synchronization when multiple threads concurrently access shared kernel resources. This flaw allows a local authenticat...

About Elevation of Privilege – Windows Remote Access Connection Manager (CVE-2025-59230) vulnerability

About Elevation of Privilege - Windows Remote Access Connection Manager CVE-2025-59230 vulnerability. A vulnerability from the October Microsoft Patch Tuesday. The Windows Remote Access Connection Manager RasMan service is a core Windows component that manages dial-up and Virtual Private Network...

EUVD-2025-49030

Malicious code in wildplanarianz3n npm...

EUVD-2025-49031

Malicious code in wilddragonz3n npm...

PT-2025-44459

Name of the Vulnerable Software and Affected Versions Seeyon Zhiyuan OA Web Application System versions up to and including 7.0 SP1 Description The software does not properly decode and parse the enc parameter in the thirdpartyController.do endpoint. The decoded map values can influence session...

CVE-2024-58274

Hikvision CSMP Comprehensive Security Management Platform iSecure Center through 2024-08-01 allows execution of a command within $ in /center/api/installation/detection JSON data, as exploited in the wild in 2024 and 2025...

CVE-2023-53691

Hikvision CSMP Comprehensive Security Management Platform iSecure Center through 2023-06-25 allows file upload via /center/api/files directory traversal, as exploited in the wild in 2024 and 2025...