SUSE-SU-2025:1488-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: - CVE-2025-43965: mishandling of image depth after SetQuantumFormat is used in MIFF image processing. bsc1241659 - CVE-2025-46393: mishandling of packetsize leads to rendering of channels in arbitrary order in multispectral MIFF image...

Cisco NX-OS Incorrect Authorization(CVE-2024-20291)

A vulnerability in the access control list ACL programming for port channel subinterfaces of Cisco Nexus 3000 and 9000 Series Switches in standalone NX-OS mode could allow an unauthenticated, remote attacker to send traffic that should be blocked through an affected device. This vulnerability is...

EulerOS 2.0 SP12 : openssl (EulerOS-SA-2025-1431)

According to the versions of the openssl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Issue summary: A timing side-channel which could potentially allow recovering the private key exists in the ECDSA signature computation. Impact...

EulerOS 2.0 SP12 : openssl (EulerOS-SA-2025-1432)

According to the versions of the openssl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Issue summary: A timing side-channel which could potentially allow recovering the private key exists in the ECDSA signature computation. Impact...

Stable Channel Update for Desktop

The Stable channel has been updated to 136.0.7103.92/.93 for Windows, Mac and 136.0.7103.92 for Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log. Security Fixes and Rewards Note: Access to bug details and links may be kept restrict...

CVE-2021-4228

creationtimestamp| type| source ---|---|--- 2025-05-05 21:20:18+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15001...

SUSE-SU-2025:1464-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: - CVE-2025-43965: Fixed mishandling of image depth after SetQuantumFormat is used in MIFF image processing. bsc1241659 - CVE-2025-46393: Fixed mishandling of packetsize leads to rendering of channels in arbitrary order in multispectral MIFF...

CVE-2020-10826

creationtimestamp| type| source ---|---|--- 2025-05-05 17:20:14+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14928 2026-06-23 14:06:20+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/11e3103d-98de-49e0-9e1f-8023ada7fcfb 2026-06-30 12:19:19+00:00|...

CVE-2022-44792

creationtimestamp| type| source ---|---|--- 2025-05-05 16:19:59+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14907...

CVE-2022-39189

creationtimestamp| type| source ---|---|--- 2025-05-05 16:19:50+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14902...

Stegano 1.0.1

Stegano is a basic Python Steganography module. Stegano implements two methods of hiding: using the red portion of a pixel to hide ASCII messages, and using the Least Significant Bit LSB technique. It is possible to use a more advanced LSB method based on integers sets. The sets Sieve of...

Unsecured Authentication Attempt Detected (Medium)

A server allow for authentication using credentials in an unencrypted manner over unencrypted channel. Such credentials might be revealed to an attacker intercepting this traffic and used to gain access to data on the server. This plugin only works with Tenable.ot. Please visit...

Unsecured Authentication Attempt Detected (Low)

A server allow for authentication using credentials in an unencrypted manner over unencrypted channel. Such credentials might be revealed to an attacker intercepting this traffic and used to gain access to data on the server. This plugin only works with Tenable.ot. Please visit...

Acoustic Side-Channel Attacks on a Computer Mouse

Acoustic Side-Channel Attacks ASCAs extract sensitive information by using audio emitted from a computing devices and their peripherals. Attacks targeting keyboards are popular and have been explored in the literature. However, similar attacks targeting other human interface peripherals, such as...

CVE-2021-47343

creationtimestamp| type| source ---|---|--- 2025-05-04 07:18:06+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14727...

CVE-2021-47345

creationtimestamp| type| source ---|---|--- 2025-05-04 07:18:04+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14726...

CVE-2021-47354

creationtimestamp| type| source ---|---|--- 2025-05-04 07:17:51+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14717...

Enhanced Outsourced and Secure Inference for Tall Sparse Decision Trees

A decision tree is an easy-to-understand tool that has been widely used for classification tasks. On the one hand, due to privacy concerns, there has been an urgent need to create privacy-preserving classifiers that conceal the user's input from the classifier. On the other hand, with the rise of...

curl: Speculative Execution Side-Channel in `curl`

🛡️ Penetration Testing Report ========== Speculative Execution Side-Channel in curl Date: May 2025 --- 🧭 Executive Summary This report outlines a speculative execution side-channel vulnerability found in curl versions 7.12.0 to 8.9.0, specifically within builds supporting experimental QUIC...

SUSE CVE-2023-53113

In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: fix NULL-ptr deref in offchan check If, e.g. in AP mode, the link was already created by userspace but not activated yet, it has a chandef but the chandef isn't valid and has no channel. Check for this and ignore...