CVE-2025-12508

When using domain users as BRAIN2 users, communication with Active Directory services is unencrypted. This can lead to the interception of authentication data and compromise confidentiality...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: Wifi: ath11k: Update the channel list in the notifier instead of using the reg worker Currently, when ath11k receives a new channel list, it processes it according to the following steps: 1. Update the new channel list and queue ...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Validating UAC3 power domain descriptors as well. The UAC3 power domain descriptors also need to be verified using their variable bLength, in order to avoid unexpected out-of-band OOB accesses by malicious firmwa...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Added more checks for DSC / HUBP ONO guarantees REASON For non-zero DSC instances, it’s possible that the HUBP domain required to drive sequential ONO ASICs is not met. This could cause the logic to enter an...

Malicious code in u8ymp15aglfp7y (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3d0583d85e1bebaa0c44fe4ef6e449c155b034a7146cf881a9bf27d5e8b7b7b The package u8ymp15aglfp7y was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-49308 Malicious code in u8ymp15aglfp7y (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3d0583d85e1bebaa0c44fe4ef6e449c155b034a7146cf881a9bf27d5e8b7b7b The package u8ymp15aglfp7y was found to contain malicious code. Source: ossf-package-analysis...

[SECURITY] Fedora 43 Update: kea-3.0.2-1.fc43

DHCP implementation from Internet Systems Consortium, Inc. that features fully functional DHCPv4, DHCPv6 and Dynamic DNS servers. Both DHCP servers fully support server discovery, address assignment, renewal, rebinding and release. The DHCPv6 server supports prefix delegation. Both servers suppor...

CVE-2025-48983

A vulnerability in the Mount service of Veeam Backup & Replication, which allows for remote code execution RCE on the Backup infrastructure hosts by an authenticated domain user...

CVE-2025-48984

A vulnerability allowing remote code execution RCE on the Backup Server by an authenticated domain user...

PT-2025-44722

Name of the Vulnerable Software and Affected Versions OpenSMTPD affected versions not specified Description The software is susceptible to a denial-of-service condition through the use of a UNIX domain socket. The issue involves a potential for disruption of service. Recommendations At the moment...

Fedora 43 : unbound (2025-16df491a66)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-16df491a66 advisory. Update to 1.24.1 - Enables DNS over QUIC server in unbound - Fix CVE-2025-11411, possible domain hijacking attack, reported by Yuxiao Wu, Yunyi Zhang, Baojun...

MGASA-2025-0254 Updated bind packages fix security vulnerabilities

Resource exhaustion via malformed DNSKEY handling CVE-2025-8677. Cache poisoning attacks with unsolicited RRs CVE-2025-40778. Cache poisoning due to weak PRNG CVE-2025-40780...

EUVD-2025-37365

When using domain users as BRAIN2 users, communication with Active Directory services is unencrypted. This can lead to the interception of authentication data and compromise confidentiality...

Security update for bind

This update for bind fixes the following issues: Upgrade to release 9.20.15: CVE-2025-8677: DNSSEC validation fails if matching but invalid DNSKEY is found bsc1252378. CVE-2025-40778: Address various spoofing attacks bsc1252379. CVE-2025-40780: Cache-poisoning due to weak pseudo-random number...

SUSE-SU-2025:3903-1 Security update for bind

This update for bind fixes the following issues: Upgrade to release 9.20.15: - CVE-2025-8677: DNSSEC validation fails if matching but invalid DNSKEY is found bsc1252378. - CVE-2025-40778: Address various spoofing attacks bsc1252379. - CVE-2025-40780: Cache-poisoning due to weak pseudo-random numb...

CVE-2025-12508

When using domain users as BRAIN2 users, communication with Active Directory services is unencrypted. This can lead to the interception of authentication data and compromise confidentiality...

CVE-2025-12508

CVE-2025-12508 affects BRAIN2: when domain users act as BRAIN2 users, communication with Active Directory services is unencrypted, risking interception of authentication data and confidentiality. Documents consistently identify BRAIN2 as the affected software and describe the unencrypted AD traff...

CVE-2025-12508 Unencrypted communication to Active Directory services

When using domain users as BRAIN2 users, communication with Active Directory services is unencrypted. This can lead to the interception of authentication data and compromise confidentiality...

CVE-2025-12508 Unencrypted communication to Active Directory services

When using domain users as BRAIN2 users, communication with Active Directory services is unencrypted. This can lead to the interception of authentication data and compromise confidentiality...

Malicious code in sechub-openapi-ts-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbfa8eb5cccd4e8e722c4df1147efab7d4c4084b31710e417b10b87bf1d63267 The package sechub-openapi-ts-client was found to contain malicious code. Source: ghsa-malware...