PT-2025-30063 · Splashin · Splashin

Name of the Vulnerable Software and Affected Versions: Splashin iOS version 2.0 Description: The Splashin iOS application version 2.0 does not enforce server-side interval restrictions for location updates for free-tier users. Recommendations: Update to a newer version that contains a fix for thi...

CBL Mariner 2.0 Security Update: redis / valkey (CVE-2025-48367)

The version of redis / valkey installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-48367 advisory. - Redis is an open source, in-memory database that persists on disk. An unauthenticated connection can...

CBL Mariner 2.0 Security Update: gdk-pixbuf2 (CVE-2025-7345)

The version of gdk-pixbuf2 installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-7345 advisory. - A flaw exists in gdkpixbuf within the gdkpixbufjpegimageloadincrement function io-jpeg.c and in glib's...

BADBOX 2.0 Found Preinstalled on Android IoT Devices Worldwide

BADBOX variant BADBOX 2.0 found preinstalled on Android IoT devices in 222 countries, turning them into proxy nodes used in fraud and large-scale malicious activity...

CBL Mariner 2.0 Security Update: ceph (CVE-2025-52939)

The version of ceph installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-52939 advisory. - Out-of-bounds Write vulnerability in dail8859 NotepadNext src/lua/src modules. This vulnerability is associate...

CBL Mariner 2.0 Security Update: glib (CVE-2025-3360)

The version of glib installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-3360 advisory. - A flaw was found in GLib. An integer overflow and buffer under-read occur when parsing a long invalid ISO 8601...

CBL Mariner 2.0 Security Update: reaper (CVE-2024-6484)

The version of reaper installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-6484 advisory. - A vulnerability has been identified in Bootstrap that exposes users to Cross-Site Scripting XSS attacks. The...

CBL Mariner 2.0 Security Update: msft-golang (CVE-2025-4673)

The version of msft-golang installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-4673 advisory. - Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaki...

CBL Mariner 2.0 Security Update: cloud-init (CVE-2024-6174)

The version of cloud-init installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-6174 advisory. - When a non-x86 platform is detected, cloud-init grants root access to a hardcoded url with a local IP...

CBL Mariner 2.0 Security Update: systemd / systemd-bootstrap (CVE-2023-7008)

The version of systemd / systemd-bootstrap installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-7008 advisory. - A vulnerability was found in systemd-resolved. This issue May allow systemd-resolved to...

CBL Mariner 2.0 Security Update: cert-manager / helm (CVE-2025-32386)

The version of cert-manager / helm installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-32386 advisory. - Helm is a tool for managing Charts. A chart archive file can be crafted in a manner where it...

CBL Mariner 2.0 Security Update: libsoup (CVE-2025-32910)

The version of libsoup installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-32910 advisory. - A flaw was found in libsoup, where soupauthdigestauthenticate is vulnerable to a NULL pointer dereference...

CBL Mariner 2.0 Security Update: libsoup (CVE-2025-4476)

The version of libsoup installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-4476 advisory. - A denial-of-service vulnerability has been identified in the libsoup HTTP client library. This flaw can be...

CBL Mariner 2.0 Security Update: python-requests (CVE-2024-47081)

The version of python-requests installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-47081 advisory. - Requests is a HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 May leak...

CBL Mariner 2.0 Security Update: golang (CVE-2023-24532)

The version of golang installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-24532 advisory. - The ScalarMult and ScalarBaseMult methods of the P256 Curve May return an incorrect result if called with so...

CBL Mariner 2.0 Security Update: CBL-Mariner Releases / grub2 (CVE-2020-14311)

The version of CBL-Mariner Releases / grub2 installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2020-14311 advisory. - There is an issue with grub2 before version 2.06 while handling symlink on ext...

CBL Mariner 2.0 Security Update: nbdkit (CVE-2025-47711)

The version of nbdkit installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-47711 advisory. - There's a flaw in the nbdkit server when handling responses from its plugins regarding the status of data...

CBL Mariner 2.0 Security Update: binutils (CVE-2025-5244)

The version of binutils installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-5244 advisory. - A vulnerability was found in GNU Binutils up to 2.44. It has been rated as critical. Affected by this issue...

CBL Mariner 2.0 Security Update: docker-buildx / moby-buildx (CVE-2025-0495)

The version of docker-buildx / moby-buildx installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-0495 advisory. - Buildx is a Docker CLI plugin that extends build capabilities using BuildKit. Cache...

CBL Mariner 2.0 Security Update: net-tools (CVE-2025-46836)

The version of net-tools installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-46836 advisory. - net-tools is a collection of programs that form the base set of the NET-3 networking distribution for the...