AlmaLinux 9 : cups (ALSA-2025:15700)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:15700 advisory. cups: Null Pointer Dereference in CUPS ippreadio Leading to Remote DoS CVE-2025-58364 cups: Authentication Bypass in CUPS Authorization Handling...

CVE-2025-11138: Improper Neutralization of Special Elements used in an OS Command

A vulnerability was found in mirweiye wenkucms up to 3.4. This impacts the function createPathOne of the file app/common/common.php. The manipulation results in os command injection. The attack may be launched remotely. The exploit has been made public and could be used...

PT-2025-39806

Name of the Vulnerable Software and Affected Versions mirweiye wenkucms versions up to 3.4 Description A flaw exists that allows for remote operating system command injection. This occurs due to manipulation of the createPathOne function within the app/common/common.php file. The exploit has been...

CVE-2025-11073 Keyfactor RG-EW5100BE HTTP POST Request cmd command injection

A vulnerability was detected in Keyfactor RG-EW5100BE EW3.0B11P280EW5100BE-PRO12183019. The affected element is an unknown function of the file /cgi-bin/luci/api/cmd of the component HTTP POST Request Handler. The manipulation of the argument url results in command injection. The attack can be...

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow via the uclincludecommon function. An attacker can execute arbitrary code or cause a denial of service by supplying crafted input to this function. Remediation A fix was pushed into the master branch but not y...

CVE-2025-11010

A vulnerability has been found in vstakhov libucl up to 0.9.2. Affected by this vulnerability is the function uclincludecommon of the file /src/uclutil.c. Such manipulation leads to heap-based buffer overflow. Local access is required to approach this attack. The exploit has been disclosed to the...

CVE-2025-11010 vstakhov libucl ucl_util.c ucl_include_common heap-based overflow

A vulnerability has been found in vstakhov libucl up to 0.9.2. Affected by this vulnerability is the function uclincludecommon of the file /src/uclutil.c. Such manipulation leads to heap-based buffer overflow. Local access is required to approach this attack. The exploit has been disclosed to the...

PT-2025-39631

Name of the Vulnerable Software and Affected Versions libucl versions up to 0.9.2 Description A flaw exists in the ucl include common function within the /src/ucl util.c file. This can lead to a heap-based buffer overflow. Local access is needed for exploitation. The exploit details have been...

ae-toolbox (0.2.0), aihwkit (>=0.7.0, <=0.7.1) +60 more potentially affected by CVE-2025-55557 via torch (1.13.0)

torch PYPI version 1.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on torch and may be impacted: - ae-toolbox 0.2.0 - aihwkit =0.7.0, =0.1.0, =1.0.14, =1.0.1, =0.1.15, =0.0.9, =0.3.0, =0.1.0, =0.1.8rc3, =0.1.8rc4 and more Source cves: CVE-2025-5555...

ae-toolbox (0.2.0), aihwkit (>=0.7.0, <=0.7.1) +60 more potentially affected by CVE-2025-55551 via torch (1.13.0)

torch PYPI version 1.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on torch and may be impacted: - ae-toolbox 0.2.0 - aihwkit =0.7.0, =0.1.0, =1.0.14, =1.0.1, =0.1.15, =0.0.9, =0.3.0, =0.1.0, =0.1.8rc3, =0.1.8rc4 and more Source cves: CVE-2025-5555...

CTEM's Core: Prioritization and Validation

Despite a coordinated investment of time, effort, planning, and resources, even the most up-to-date cybersecurity systems continue to fail. Every day. Why? It’s not because security teams can't see enough. Quite the contrary. Every security tool spits out thousands of findings. Patch this. Block...

MAL-2025-47524 Malicious code in @kahoot-frontend/builder-common (npm)

The package @kahoot-frontend/builder-common was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f53ccdf6a282cfb91d99e8cccd2eea71cc0e2af65b1838e33733b3b872cec92e Any computer that has this package installed or running should be...

Malware in @kahoot-frontend/builder-common

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious Package

Overview @kahoot-frontend/builder-common is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and th...

Malicious code in @kahoot-frontend/builder-common (npm)

The package @kahoot-frontend/builder-common was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f53ccdf6a282cfb91d99e8cccd2eea71cc0e2af65b1838e33733b3b872cec92e Any computer that has this package installed or running should be...

Ensure That a Common User Cannot Use pkexec for Privilege Escalation

The pkexec command enables a common user to have the permissions of the superuser or other users. After the authentication is successful, the common user runs the corresponding program with the permissions of the superuser. The pkexec command provides a convenient way for users to change their...

Malicious code in vault-hux-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f0e642811b789c4f724d3169822154751db4b210ded1f45f3eda9396725cb30e The OpenSSF Package Analysis project identified 'vault-hux-common' @ 9000.0.0 npm as malicious. It is considered malicious because: - The packag...

MAL-2025-47516 Malicious code in vault-hux-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f0e642811b789c4f724d3169822154751db4b210ded1f45f3eda9396725cb30e The OpenSSF Package Analysis project identified 'vault-hux-common' @ 9000.0.0 npm as malicious. It is considered malicious because: - The packag...

CVE-2025-21484

creationtimestamp| type| source ---|---|--- 2025-09-24 15:53:07+00:00| seen| Telegram/j2l8d6qe1QrgVFL7uh2A01P1R1oUKtw8we6Q5j5mnTiQWU...

Important: Red Hat Security Advisory: kpatch-patch-4_18_0-477_67_1, kpatch-patch-4_18_0-477_81_1, kpatch-patch-4_18_0-477_89_1, and kpatch-patch-4_18_0-477_97_1 security update

An update for multiple packages is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...