ALSA-2025:10873 Important: java-21-openjdk security update

The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit. Security Fixes: JDK: Better Glyph drawing CVE-2025-30749 JDK: Enhance TLS protocol support CVE-2025-30754 JDK: Improve HTTP client header handling CVE-2025-50059 JDK: Better...

QNAP QuTS hero Heap-Based Buffer Overflow Vulnerability (QSA-21-02, Baron Samedit)

QNAP QuTS hero is prone to a heap-based buffer overflow vulnerability in sudo dubbed SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Important: java-21-openjdk security update

The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit. Security Fixes: JDK: Better Glyph drawing CVE-2025-30749 JDK: Enhance TLS protocol support CVE-2025-30754 JDK: Improve HTTP client header handling CVE-2025-50059 JDK: Better...

ai.swim:swim-js (=3.10.0), ai.swim:swim-vm (=3.10.0) +3052 more potentially affected by CVE-2025-50059 via org.graalvm.sdk:graal-sdk (>=19.0.0 <=21.0.0.2)

org.graalvm.sdk:graal-sdk MAVEN version =19.0.0, =0.0.1, =0.1.5, =0.1.5, =0.0.2, =0.0.2, =1.5.1, =1.0.0, =1.0.2, =1.0.0, =1.0.2, =1.0.2, =1.1.4 and more Source cves: CVE-2025-50059 Source advisory: SNYK:JAVA-ORGGRAALVMSDK-11998135...

Oracle Linux 10 : java-21-openjdk (ELSA-2025-7508)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-7508 advisory. 1:21.0.7.0.6-1.0.1 - Add Oracle vendor bug URL Orabug: 34340155 1:21.0.7.0.6-1 - Update to jdk-21.0.7+6 GA - Update release notes to 21.0.7+6 - Rebase...

CVE-2025-52999

creationtimestamp| type| source ---|---|--- 2025-06-25 18:06:23+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19492 2026-01-21 21:18:16+00:00| seen| https://vulnerability.circl.lu/bundle/bbcbc485-b88d-4831-b8e9-6e37e7bd9875...

Security Bulletin: Multiple vulnerabilities in IBM® SDK, Java™ Technology Edition affect IBM Storage Protect Operations Center (CVE-2025-1470, CVE-2025-1471).

Summary IBM Storage Protect Operations Center is affected by multiple vulnerabilities in the IBM® SDK Java™ Technology Edition, Version 8. These vulnerabilities could potentially affect OpenJ9 internal ASCII to EBCDIC string wrapper on z/OS. Vulnerability Details CVEID:CVE-2025-1470 DESCRIPTION: ...

CVE-2025-6410

creationtimestamp| type| source ---|---|--- 2025-06-21 16:44:07+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19119 2025-06-21 19:54:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls5dfoy33m2q...

CVE-2025-5289

creationtimestamp| type| source ---|---|--- 2025-06-21 11:43:13+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19113 2025-06-21 13:48:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls4oyhx4fm2i...

CVE-2025-5034

creationtimestamp| type| source ---|---|--- 2025-06-21 06:42:07+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19109...

GHSA-WWC9-WMM3-2PMF

creationtimestamp| type| source ---|---|--- 2025-06-21 03:45:49+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19105...

CVE-2025-52794

creationtimestamp| type| source ---|---|--- 2025-06-20 16:17:19+00:00| seen| Telegram/vPkHdTlHK4ikWxmUX8woH5Q86R3jDi2hkiCmD7tIHBczmU 2025-06-23 16:47:21+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19228...

The vulnerability of the SolarWinds Serv-U File Server file server arises from incorrect path name restrictions for the restricted access directory, allowing a hacker to execute arbitrary code.

The vulnerability of the SolarWinds Serv-U File Server file server is related to an incorrect limitation on the path name for the restricted access directory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by connecting to port 21...

CVE-2023-25999

creationtimestamp| type| source ---|---|--- 2025-06-09 16:56:21+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17716...

Malicious code in atlasctf-21-prod-06 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 40700739340f4f0bb3e0439a94754cb868827b002cad84a1dfca90da1dfa032d On installation or importing, the package attempts to exfiltrate some basic information, e.g. /etc/passwd --- Category: PROBABLYPENTEST - Packages looking like...

Malicious code in atlasctf-21-prod-15 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 101bfa86fba4ba58c3e91f1094d96934acad78a88046c5482a16e3ab969ea545 On installation or importing, the package attempts to exfiltrate some basic information, e.g. /etc/passwd --- Category: PROBABLYPENTEST - Packages looking like...

Malicious code in atlasctf-21-prod-21 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 79c8505b253779798971bd98108a76e3e9ba4a7a590fa35b73eef9782c70616d On installation or importing, the package attempts to exfiltrate some basic information, e.g. /etc/passwd --- Category: PROBABLYPENTEST - Packages looking like...

Malicious code in atlasctf-21-prod-00 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 14e4ae78e884590292b3a8ef6ebe2093e02ffc05d89f37718d9f2573e8a9e5e0 On installation or importing, the package attempts to exfiltrate some basic information, e.g. /etc/passwd --- Category: PROBABLYPENTEST - Packages looking like...

Malicious code in atlasctf-21-prod-13 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 773b90b87addef84f41e3bec0ed50198f5217f97c58686c8700726e2c5911f39 On installation or importing, the package attempts to exfiltrate some basic information, e.g. /etc/passwd --- Category: PROBABLYPENTEST - Packages looking like...

Malicious code in atlasctf-21-prod-11 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ece7411f662f1c3b05a8f6bbda7c94099f1e20acc383cefb69bc8195da83e86a On installation or importing, the package attempts to exfiltrate some basic information, e.g. /etc/passwd --- Category: PROBABLYPENTEST - Packages looking like...