Linux Distros Unpatched Vulnerability : CVE-2017-9178

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service invalid write and SEGV, related to the ReadImage function in...

Linux Distros Unpatched Vulnerability : CVE-2018-15919

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Remotely observable behaviour in auth-gss2.c in OpenSSH through 7.8 could be used by remote attackers to detect existence of users on a target system when GSS2 ...

Linux Distros Unpatched Vulnerability : CVE-2014-9822

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted quantum file. CVE-2014-9822 Note that Nessus relies o...

Linux Distros Unpatched Vulnerability : CVE-2018-10999

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Exiv2 0.26. The Exiv2::Internal::PngChunk::parseTXTChunk function has a heap- based buffer over-read. CVE-2018-10999 Note that Nessus...

Linux Distros Unpatched Vulnerability : CVE-2017-9047

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A buffer overflow was discovered in libxml2 20904-GITv2.9.4-16-g0741801. The function xmlSnprintfElementContent in valid.c is supposed to recursively dump the...

Linux Distros Unpatched Vulnerability : CVE-2013-2384

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 an...

Linux Distros Unpatched Vulnerability : CVE-2015-3228

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow in the gsheapallocbytes function in base/gsmalloc.c in Ghostscript 9.15 and earlier allows remote attackers to cause a denial of service crash...

GO-2025-3460 Distribution's token authentication allows attacker to inject an untrusted signing key in a JWT in github.com/distribution/distribution

Distribution's token authentication allows attacker to inject an untrusted signing key in a JWT in github.com/distribution/distribution...

Linux Distros Unpatched Vulnerability : CVE-2007-6067

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Algorithmic complexity vulnerability in the regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 befor...

Linux Distros Unpatched Vulnerability : CVE-2010-3773

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, when the XMLHttpRequestSpy module in the Firebug add-on is used, does not...

PYSEC-2025-7 Posts scraped data to IP address associated with other malware distribution attacks.

Published in 2021, the imblog package is a Python library that scrapes data from a blog page to an IP address associated with other malware distribution attacks...

Posts scraped data to IP address associated with other malware distribution attacks.

Published in 2021, the imblog package is a Python librarythat scrapes data from a blog page to an IP address associated with other malware distribution attacks...

PT-2025-8758 · Pypi · Imblog

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue concerns a Python library that scrapes data from a blog page to an IP address associated with other malware distribution attacks. Recommendations: At the moment, there is no...

Hackers Exploit Fake GitHub Repositories to Spread GitVenom Malware

Kaspersky's Securelist exposes the GitVenom campaign involving fake GitHub repositories to distribute malware. Targeting developers with seemingly legitimate…...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: dask-gateway, terraform-docs, direnv, velero-plugin-for-microsoft-azure, configmap-reload, argo-rollouts, helm-operator, controller-gen, gobump, nri-prometheus, croc, kafka-proxy, kserve-modelmesh-serving, nri-nginx, kubernetes-csi-livenessprobe, fluent-operator,...

CVE-2025-27144 vulnerabilities

Vulnerabilities for packages: timestamp-authority, grafana-mimir, dgraph, gomplate, guac, buildah, bank-vaults, neuvector-scanner, k3d, boring-registry, openbao, kyverno-notation-aws, opentofu, sigstore-scaffolding, frp, pulumi, vault-benchmark, weaviate, trufflehog, apko, spire-controller-manage...

GHSA-C6GW-W398-HV78 vulnerabilities

Vulnerabilities for packages: timestamp-authority, grafana-mimir, dgraph, gomplate, guac, buildah, bank-vaults, neuvector-scanner, k3d, boring-registry, openbao, kyverno-notation-aws, opentofu, sigstore-scaffolding, frp, pulumi, vault-benchmark, weaviate, trufflehog, apko, spire-controller-manage...

CVE-2025-27143 Beter Auth has an Open Redirect via Scheme-Less Callback Parameter

Better Auth is an authentication and authorization library for TypeScript. Prior to version 1.1.21, the application is vulnerable to an open redirect due to improper validation of the callbackURL parameter in the email verification endpoint and any other endpoint that accepts callback url. While...

A week in security (February 17 – February 23)

Last week on Malwarebytes Labs: Healthcare security lapses keep piling up SecTopRAT bundled in Chrome installer distributed via Google Ads Google Docs used by infostealer ACRStealer as part of attack DeepSeek found to be sharing user data with TikTok parent company ByteDance Malwarebytes introduc...

[SECURITY] [DSA 5869-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5869-1 [email protected] https://www.debian.org/security/ Andres Salomon February 21, 2025 https://www.debian.org/security/faq -...