MAL-2025-49287 Malicious code in month_year_dropdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d30f8bd0beed9617d4eaeb8717a7dfcbe805a095a59966041e4af31d174f9d2 The package monthyeardropdown was found to contain malicious code...

Malicious code in month_year_dropdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d30f8bd0beed9617d4eaeb8717a7dfcbe805a095a59966041e4af31d174f9d2 The package monthyeardropdown was found to contain malicious code...

EUVD-2025-37277

Malicious code in monthyeardropdown npm...

EUVD-2025-37273

Malicious code in yeardropdown npm...

CVE-2025-34277

creationtimestamp| type| source ---|---|--- 2025-10-31 00:13:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4h6yfsfn62j 2025-10-31 06:01:26+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m4hsgbse2e24...

CVE-2024-58272

creationtimestamp| type| source ---|---|--- 2025-10-30 23:32:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4h4ouqoee2x...

CVE-2023-53688

creationtimestamp| type| source ---|---|--- 2025-10-30 21:53:00+00:00| seen| Telegram/wj0jpqPhuw2Hsyj5RbPV7iIlUMyoT03JszkKEMuRDfeig...

CVE-2025-64096

creationtimestamp| type| source ---|---|--- 2025-10-30 17:57:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4gjxe74lg2w 2026-01-10 00:04:56+00:00| published-proof-of-concept| Telegram/ylcODQd3Ghku3NxDdtmMfOkVOnWhDQ3Q3s4y1swSp7-7I...

CVE-2025-40086

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Don't allow evicting of BOs in same VM in array of VM binds An array of VM binds can potentially evict other buffer objects BOs within the same VM under certain conditions, which may lead to NULL pointer dereferences late...

CVE-2025-40099

In the Linux kernel, the following vulnerability has been resolved: cifs: parsedfsreferrals: prevent oob on malformed input Malicious SMB server can send invalid reply to FSCTLDFSGETREFERRALS - reply smaller than sizeofstruct getdfsreferralrsp - reply with number of referrals smaller than...

CVE-2025-40092

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fncm: Refactor bind path to use free After an bind/unbind cycle, the ncm-notifyreq is left stale. If a subsequent bind fails, the unified error label attempts to free this stale request, leading to a NULL pointer...

CVE-2025-40098

creationtimestamp| type| source ---|---|--- 2025-10-30 11:36:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4fupetqe22w 2026-08-12 20:45:02+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260806...

CVE-2024-45162

creationtimestamp| type| source ---|---|--- 2025-10-30 08:44:47+00:00| seen| https://bsky.app/profile/blackwiremedia.bsky.social/post/3m4fl3hqxmp22...

CVE-2025-10636

creationtimestamp| type| source ---|---|--- 2025-10-30 07:44:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4fhqamhge2n 2025-10-30 08:45:33+00:00| seen| https://gist.github.com/Darkcrai86/94ace44f12d07ca7515b88870b81a27b...

CVE-2025-12487

creationtimestamp| type| source ---|---|--- 2025-10-30 04:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-982/ 2025-11-06 22:04:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4yl2nrkwt2n 2025-11-07 00:01:49+00:00| seen|...

EUVD-2025-36729

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2025-40103

In the Linux kernel, the following vulnerability has been resolved: smb: client: Fix refcount leak for cifssbtlink Fix three refcount inconsistency issues related to cifssbtlink. Comments for cifssbtlink state that cifsputtlink needs to be called after successful calls to cifssbtlink. Three calls...

CVE-2025-56558

creationtimestamp| type| source ---|---|--- 2025-10-29 22:04:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4ehc5i3rg2w...

CVE-2025-40084

In the Linux kernel, the following vulnerability has been resolved: ksmbd: transportipc: validate payload size before reading handle handleresponse dereferences the payload as a 4-byte handle without verifying that the declared payload size is at least 4 bytes. A malformed or truncated message fr...

CVE-2023-7324

In the Linux kernel, the following vulnerability has been resolved: scsi: ses: Fix possible addldescptr out-of-bounds accesses Sanitize possible addldescptr out-of-bounds accesses in sesenclosuredataprocess...