CVE-2025-71152

In the Linux kernel, the following vulnerability has been resolved: net: dsa: properly keep track of conduit reference Problem description ------------------- DSA has a mumbo-jumbo of reference handling of the conduit net device and its kobject which, sadly, is just wrong and doesn't make sense...

CVE-2025-71152

CVE-2025-71152 is a vulnerability reported in the Linux kernel and appears in multiple OS advisories. Connected entries indicate patches for Root Linux (rootio-linux) across Debian 11/12/13 variants, and additional OSV records show Debian-based and Chainguard advisories patching Root packages. Pu...

Azure Linux 3.0 Security Update: kernel (CVE-2024-38570)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-38570 advisory. - In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix potential glock use-after- fre...

Azure Linux 3.0 Security Update: kernel (CVE-2025-37864)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-37864 advisory. - In the Linux kernel, the following vulnerability has been resolved: net: dsa: clean up FDB, MDB, VLAN entrie...

Azure Linux 3.0 Security Update: samba (CVE-2021-3738)

The version of samba installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-3738 advisory. - In DCE/RPC it is possible to share the handles cookies for resource state between multiple connections via a...

Azure Linux 3.0 Security Update: kernel (CVE-2025-37786)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-37786 advisory. - In the Linux kernel, the following vulnerability has been resolved: net: dsa: free routing table on probe...

RustFS http_auth.rs Unauthorized Access

The vulnerability of the httpauth.rs script in the distributed RustFS storage system is related to the disclosure of information through registration files. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

MiracleLinux 9 : gnutls-3.7.6-23.el9_3.3 (AXSA:2024-7484:02)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-7484:02 advisory. gnutls: timing side-channel in the RSA-PSK authentication CVE-2023-5981 gnutls: incomplete fix for CVE-2023-5981 CVE-2024-0553 gnutls: rejects...

PT-2026-37465

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Distributed Lock Manager DLM where the len parameter in the dlm dump rsb name function is not validated. Because this parameter is derived from network messages,...

CVE-2025-63648

A NULL pointer dereference in the dacpreplyplayqueueeditmove function src/httpddacp.c of owntone-server commit b7e385f allows attackers to cause a Denial of Service DoS via sending a crafted DACP request to the server...

MiracleLinux 9 : nghttp2-1.43.0-5.el9.1 (AXSA:2023-6518:02)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-6518:02 advisory. HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack Rapid Reset Attack CVE-2023-44487 Tenable has extracted the preceding description...

Unicornscan 0.4.43

Unicornscan is an information gathering and correlation engine built for and by members of the security research and testing communities. It was designed to provide an engine that is Scalable, Accurate, Flexible, and Efficient. It is released for the community to use under the terms of the GPL...

Many Hands Make Light Work: An LLM-Based Multi-Agent System for Detecting Malicious PyPI Packages

Malicious code in open-source repositories such as PyPI poses a growing threat to software supply chains. Traditional rule-based tools often overlook the semantic patterns in source code that are crucial for identifying adversarial components. Large language models LLMs show promise for software...

Linux Distros Unpatched Vulnerability : CVE-2026-23528

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Dask distributed is a distributed task scheduler for Dask. Prior to 2026.1.0, when Jupyter Lab, jupyter- server-proxy, and Dask distributed are all run together...

ICE Agent Doxxing Platform was Crippled After Coordinated DDoS Attack

The activist website called "ICE List" was offline after a massive DDoS attack. The crash followed a leak of 4,500 federal agent names linked to the Renee Nicole Good shooting...

Cross-site Scripting (XSS)

Overview distributed is a Distributed scheduler for Dask Affected versions of this package are vulnerable to Cross-site Scripting XSS via the interaction between Jupyter Lab, jupyter-server-proxy, and the Dask dashboard. An attacker can execute arbitrary code by enticing a user to click a phishin...

bioio-qptiff (0.1.0), celldega (>=0.24.0, <=0.26.1) +21 more potentially affected by CVE-2026-23528 via distributed (>=2025.10.0, <=2025.12.0)

distributed PYPI version =2025.10.0, =0.24.0, =0.1.0, =0.1.15, =0.1.0, =0.1.8, =0.6.3, =0.2.0, =0.1.0, =0.2.39, =2510.1.0, =0.2.0, =0.4.5, =0.5.9 and more Source cves: CVE-2026-23528 Source advisory: SNYK:PYTHON-DISTRIBUTED-15032761...

calitp-data-analysis (>=2026.1.30, <=2026.3.5), cellmap-analyze (>=0.0.2, <=0.5.0) +58 more potentially affected by CVE-2026-23528 via distributed (>=2025.1.0, <=2025.9.1)

distributed PYPI version =2025.1.0, =2026.1.30, =0.0.2, =1.0.0, =25.4.0, =25.4.0, =25.10.0, =25.4.0, =25.4.0, =25.4.0, =25.4.0, =25.4.0, =25.4.0, =25.5.0, =25.10.0, =25.10.1 and more Source cves: CVE-2026-23528 Source advisory: SNYK:PYTHON-DISTRIBUTED-15032761...

devito (4.2.3) potentially affected by CVE-2026-23528 via distributed (2.22.0)

distributed PYPI version 2.22.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - devito 4.2.3 Source cves: CVE-2026-23528 Source advisory: OSV:PYSEC-2026-169...

dask-cuda (>=21.6.0a210607, <=21.8.0a210608), mosartwmpy (>=0.0.5, <=0.0.7) +1 more potentially affected by CVE-2026-23528 via distributed (2021.5.1)

distributed PYPI version 2021.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - dask-cuda =21.6.0a210607, =0.0.5, =1.2.1, =1.4.2 Source cves: CVE-2026-23528 Source advisory: OSV:PYSEC-2026-169...