Debian dsa-5991 : libnode-dev - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5991 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5991-1 [email protected] https://www.debian.org/securit...

Hybrid Cryptographic Monitoring System for Side-Channel Attack Detection on PYNQ SoCs

AES-128 encryption is theoretically secure but vulnerable in practical deployments due to timing and fault injection attacks on embedded systems. This work presents a lightweight dual-detection framework combining statistical thresholding and machine learning ML for real-time anomaly detection. B...

Exploit for Missing Authentication for Critical Function in Erlang Erlang\/Otp

CVE-2025-32433 – Erlang/OTP SSH RCE Vulnerability 📌 Summary...

Exploit for Out-of-bounds Write in Apple Macos

CVE-2025-31200: CoreAudio APAC Channel Remapping Buffer Overfl...

CVE-2025-54738

Authentication Bypass Using an Alternate Path or Channel vulnerability in NooTheme Jobmonster noo-jobmonster allows Authentication Abuse.This issue affects Jobmonster: from n/a through = 4.7.9...

PT-2025-35073

Name of the Vulnerable Software and Affected Versions: uxper Golo versions through 1.7.0 Description: An Authentication Bypass Using an Alternate Path or Channel vulnerability exists in uxper Golo, allowing Authentication Abuse. Recommendations: Update uxper Golo to a version later than 1.7.0...

ImageMagick < 7.1.2-1 Heap-Buffer Overflow (GHSA-cjc8-g9w8-chfw)

The remote host has a version of ImageMagick installed that is prior to 7.1.2-1. It is, therefore, affected by a vulnerability as referenced in GHSA-cjc8-g9w8-chfw advisory. - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-1,...

Important: Red Hat Security Advisory: kernel-rt security update

An update for kernel-rt is now available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

CVE-2024-4437

creationtimestamp| type| source ---|---|--- 2025-08-27 13:18:19+00:00| seen| Telegram/RZsgBjEKFpqvyCP045mGfeIhNqahv01cUbn8KU7bsiulOCE...

kernel: net: qrtr: start MHI channel after endpoit creation

In the Linux kernel, the following vulnerability has been resolved: net: qrtr: start MHI channel after endpoit creation MHI channel may generates event/interrupt right after enabling. It may leads to 2 race conditions issues. 1 Such event may be dropped by qcommhiqrtrdlcallback at check: if !qdev...

Linux Distros Unpatched Vulnerability : CVE-2019-13628

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wolfSSL and wolfCrypt 4.0.0 and earlier when configured without --enable-fpecc, --enable-sp, or --enable- sp-math contain a timing side channel in ECDSA signatu...

PT-2025-44139

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the tty subsystem, specifically in the n gsm component. The issue arises from the potential to block the input queue while waiting for a Modem...

Linux Distros Unpatched Vulnerability : CVE-2022-39319

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing input length validation in the urbdrc channel. A malicio...

Linux Distros Unpatched Vulnerability : CVE-2023-50979

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Crypto++ aka cryptopp through 8.9.0 has a Marvin side channel during decryption with PKCS1 v1.5 padding. CVE-2023-50979 Note that Nessus relies on the presence ...

Linux Distros Unpatched Vulnerability : CVE-2022-39347

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing path canonicalization and base path check for drive...

Linux Distros Unpatched Vulnerability : CVE-2020-35904

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the crossbeam-channel crate before 0.4.4 for Rust. It has incorrect expectations about the relationship between the memory allocation...

Linux Distros Unpatched Vulnerability : CVE-2020-11713

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wolfSSL 4.3.0 has mulmod code in wceccmulmodex in ecc.c that does not properly resist timing side- channel attacks. CVE-2020-11713 Note that Nessus relies on th...

Linux Distros Unpatched Vulnerability : CVE-2022-24349

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An authenticated user can create a link with reflected XSS payload for actions' pages, and send it to other users. Malicious code has access to all the same...

Linux Distros Unpatched Vulnerability : CVE-2018-20357

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A NULL pointer dereference was discovered in sbrprocesschannel of libfaad/sbrdec.c in Freeware Advanced Audio Decoder 2 FAAD2 2.8.8. The vulnerability causes a...

Linux Distros Unpatched Vulnerability : CVE-2020-25601

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Xen through 4.14.x. There is a lack of preemption in evtchnreset / evtchndestroy. In particular, the FIFO event channel model allows...