Linux Distros Unpatched Vulnerability : CVE-2022-34502

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Radare2 v5.7.0 was discovered to contain a heap buffer overflow via the function consumeencodednamenew at format/wasm/wasm.c. This vulnerability allows attacker...

Linux Distros Unpatched Vulnerability : CVE-2025-29918

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. A PCRE rule can be written that leads to a...

CGA-V9J4-97RJ-3R4X

Bulletin has no description...

CVE-2025-14553

creationtimestamp| type| source ---|---|--- 2025-08-29 21:16:45+00:00| seen| https://gist.github.com/Darkcrai86/4927207aa0e4ad68563e7bbeed90ec22 2026-01-09 02:01:06+00:00| published-proof-of-concept| Telegram/9r3a4T582Uj-d8cAzOCMsayyXRdqw-Vs2IIS-Y7LNVntDY 2026-01-09 02:01:16+00:00| seen|...

CVE-2024-13984

creationtimestamp| type| source ---|---|--- 2025-08-29 21:02:24+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lxkxf7jybe2p 2025-11-24 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-11-24 2026-06-23 14:03:57+00:00| exploited|...

DoS Vulnerability in ntpd-rs

Summary A denial of service vulnerability was discovered in ntpd-rs where an attacker can induce a message storm between two NTP servers running ntpd-rs. Details Since ntpd-rs version 1.2.0, when configured as a server, incorrectly responded to all NTP messages sent to the server's port with a ti...

CVE-2025-9670 mixmark-io turndown commonmark-rules.js redos

A security flaw has been discovered in mixmark-io turndown up to 7.2.1. This affects an unknown function of the file src/commonmark-rules.js. Performing manipulation results in inefficient regular expression complexity. It is possible to initiate the attack remotely. The exploit has been released...

MAL-2025-41959 Malicious code in cookies-logger (npm)

The package cookies-logger was found to contain malicious code...

Security Bulletin: IBM Data Product Hub is affected by several vulnerabilities

Summary IBM Data Product Hub has dependencies on IBM Semeru, IBM WebSphere Application Server Liberty, Requests Python HTTP library, and Node.js Dompurify, Brace-expansion, Xmldom, Undici, and Form-data runtime modules, which are vulnerable. This bulletin contains information regarding the...

CVE-2025-44015

CVE-2025-44015 affects HybridDesk Station. The vulnerability is described as a command injection that can be exploited when an attacker has local network access to execute arbitrary commands. The available documents confirm the affected product and the underlying issue as command injection, with ...

CVE-2025-33033

CVE-2025-33033 affects QNAP Qsync Central. A path traversal vulnerability allows a remote attacker who has a user account to read unexpected files or system data. The issue is fixed in Qsync Central 4.5.0.7 and later (patch released around 2025-04-23). Affected versions prior to 4.5.0.7 should be...

CVE-2025-30273 QTS, QuTS hero

An out-of-bounds write vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then exploit the vulnerability to modify or corrupt memory. We have already fixed the vulnerability in the following versions: QTS 5.2.5.314...

CVE-2025-30265

CVE-2025-30265 describes a buffer overflow in QNAP QTS and QuTS hero. The vulnerability arises from an application boundary error when handling untrusted input, permitting a remote attacker who has a user account to modify memory or crash processes. Affected products include QTS and QuTS hero; fi...

CGA-VR55-2G25-R3J2

Bulletin has no description...

CGA-286W-X6R9-WG7Q

Bulletin has no description...

GHSA-4X4M-3C2P-QPPC vulnerabilities

Vulnerabilities for packages: yunikorn-k8shim-fips, node-feature-discovery, argo-cd-fips, longhorn-share-manager-fips, kubernetes-dns-node-cache-fips, kubernetes-dns-node-cache, argocd-image-updater-fips, azuredisk-csi-fips, rancher-webhook, local-static-provisioner, cephcsi-fips,...

GHSA-JC7W-C686-C4V9 vulnerabilities

Vulnerabilities for packages: terragrunt, packer-fips, opentofu, nuclei, cg, trivy, xeol-fips, trufflehog-fips, grafana-alloy, vcluster-fips, zot, envoy-gateway, k8s-image-swapper-fips, filebrowser, xeol, drone-fips, chainctl, mattermost, rancher-fleet-fips, kubescape-operator-fips, k9s-fips,...

Amazon Disrupts APT29 Watering Hole Campaign Abusing Microsoft Device Code Authentication

Amazon on Friday said it flagged and disrupted what it described as an opportunistic watering hole campaign orchestrated by the Russia-linked APT29 actors as part of their intelligence gathering efforts. The campaign used "compromised websites to redirect visitors to malicious infrastructure...

CGA-7M7P-CMWC-CPPQ

Bulletin has no description...

CVE-2025-9606

Portabilis i-Educar (up to 2.10; some sources indicate a fix in 2.11) has a SQL injection in /intranet/agenda_preferencias.php via the cod_agenda parameter. The vulnerability allows remote exploitation and the exploit is publicly available. Affected component: the unknown functionality surroundin...