MAL-2025-11774 Malicious code in @zalastax/nolb-graphql-z (npm)

The package @zalastax/nolb-graphql-z was found to contain malicious code...

MAL-2025-12706 Malicious code in @zalastax/nolb-node-z (npm)

The package @zalastax/nolb-node-z was found to contain malicious code...

Malicious code in @zalastax/nolb-node-z (npm)

The package @zalastax/nolb-node-z was found to contain malicious code...

Malicious code in @zalastax/nolb-graphql-z (npm)

The package @zalastax/nolb-graphql-z was found to contain malicious code...

Malicious code in @zalastax/nolb-demo-z (npm)

The package @zalastax/nolb-demo-z was found to contain malicious code...

MAL-2025-12250 Malicious code in @zalastax/nolb-lion-z (npm)

The package @zalastax/nolb-lion-z was found to contain malicious code...

MAL-2025-12492 Malicious code in @zalastax/nolb-ng-z (npm)

The package @zalastax/nolb-ng-z was found to contain malicious code...

MAL-2025-11234 Malicious code in @zalastax/nolb-dsr-rollback-z (npm)

The package @zalastax/nolb-dsr-rollback-z was found to contain malicious code...

MAL-2025-11835 Malicious code in @zalastax/nolb-gulp-z (npm)

The package @zalastax/nolb-gulp-z was found to contain malicious code...

MAL-2025-12190 Malicious code in @zalastax/nolb-lion-lib-z (npm)

The package @zalastax/nolb-lion-lib-z was found to contain malicious code...

SQL Injection

z-push/z-push-dev is vulnerable to SQL Injection. The vulnerability is due to unparameterized queries in the IMAP backend’s basic authentication username field, which allows an attacker to inject malicious SQL commands to access, modify, or delete sensitive data from a linked third-party database...

Security Bulletin: Multiple vulnerabilities in IBM Semeru Runtime affect z/Transaction Processing Facility

Summary There are multiple vulnerabilities in IBM® Semeru Runtime Certified Edition 11 and IBM® Semeru Runtime Certified Edition 21 that are used by the z/TPF system. z/TPF has addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2025-21587 DESCRIPTION: An unspecified vulnerability in...

Linux Distros Unpatched Vulnerability : CVE-2023-53108

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/iucv: Fix size of interrupt data iucvirqdata needs to be 4 bytes larger. These bytes are not used by the iucv module, but written by the z/VM hypervisor in...

Linux Distros Unpatched Vulnerability : CVE-2024-27009

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: s390/cio: fix race condition during online processing A race condition exists in...

Linux Distros Unpatched Vulnerability : CVE-2024-41021

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: s390/mm: Fix VMFAULTHWPOISON handling in doexception There is no support for HWPOISON,...

Linux Distros Unpatched Vulnerability : CVE-2022-49804

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: s390: avoid using global register for currentstackpointer Commit 30de14b1884b s390:...

Linux Distros Unpatched Vulnerability : CVE-2025-37974

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: s390/pci: Fix missing check for zpcicreatedevice error return The zpcicreatedevice function...

CPUID CPU-Z 安全漏洞

CPUID CPU-Z is a system hardware information detection tool from CPUID. A security vulnerability exists in CPUID CPU-Z version 1.0.5.4, which stems from unverified parameters allowing modification of MSRLSTAR and hook KiSystemCall64...

CVE-2025-8264

Versions of the package z-push/z-push-dev before 2.7.6 are vulnerable to SQL Injection due to unparameterized queries in the IMAP backend. An attacker can inject malicious commands by manipulating the username field in basic authentication. This allows the attacker to access and potentially modif...

z-push/z-push-dev SQL Injection Vulnerability

Versions of the package z-push/z-push-dev before 2.7.6 are vulnerable to SQL Injection due to unparameterized queries in the IMAP backend. An attacker can inject malicious commands by manipulating the username field in basic authentication. This allows the attacker to access and potentially modif...