PT-2025-33706 · Red Hat · Red Hat Developer Hub Rhdh/Rhdh-Hub-Rhel9

Name of the Vulnerable Software and Affected Versions: Red Hat Developer Hub rhdh/rhdh-hub-rhel9 container image affected versions not specified Description: An insufficient access control issue exists in the Red Hat Developer Hub rhdh/rhdh-hub-rhel9 container image. A cluster admin/user with...

Linux Distros Unpatched Vulnerability : CVE-2020-36191

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - JupyterHub 1.1.0 allows CSRF in the admin panel via a request that lacks an xsrf field, as demonstrated by a /hub/api/user request to add or remove a user...

Linux Distros Unpatched Vulnerability : CVE-2023-3357

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A NULL pointer dereference flaw was found in the Linux kernel AMD Sensor Fusion Hub driver. This flaw allows a local user to crash the system. CVE-2023-3357 Not...

Malicious code in node-red-azure-iot-hub (npm)

The package node-red-azure-iot-hub was found to contain malicious code...

MAL-2025-23265 Malicious code in integration-hub-worker-base (npm)

The package integration-hub-worker-base was found to contain malicious code...

MAL-2025-8075 Malicious code in @ice-desktop/hub (npm)

The package @ice-desktop/hub was found to contain malicious code...

MAL-2025-27640 Malicious code in node-red-azure-iot-hub (npm)

The package node-red-azure-iot-hub was found to contain malicious code...

MAL-2025-28339 Malicious code in opent2t-translator-com-hue-hub (npm)

The package opent2t-translator-com-hue-hub was found to contain malicious code...

Malicious code in @ice-desktop/hub (npm)

The package @ice-desktop/hub was found to contain malicious code...

Malicious code in opent2t-translator-com-hue-hub (npm)

The package opent2t-translator-com-hue-hub was found to contain malicious code...

Researchers Spot XZ Utils Backdoor in Dozens of Docker Hub Images, Fueling Supply Chain Risks

New research has uncovered Docker images on Docker Hub that contain the infamous XZ Utils backdoor, more than a year after the discovery of the incident. More troubling is the fact that other images have been built on top of these infected base images, effectively propagating the infection furthe...

Researchers Spot XZ Utils Backdoor in Dozens of Docker Hub Images, Fueling Supply Chain Risks

New research has uncovered Docker images on Docker Hub that contain the infamous XZ Utils backdoor, more than a year after the discovery of the incident. More troubling is the fact that other images have been built on top of these infected base images, effectively propagating the infection furthe...

CVE-2025-53793 Azure Stack Hub Information Disclosure Vulnerability

...

CVE-2025-53793 Azure Stack Hub Information Disclosure Vulnerability

...

CVE-2025-53765 Azure Stack Hub Information Disclosure Vulnerability

...

CVE-2025-53765 Azure Stack Hub Information Disclosure Vulnerability

...

Azure Stack Hub Information Disclosure Vulnerability

Improper authentication in Azure Stack allows an unauthorized attacker to disclose information over a network...

Azure Stack Hub Information Disclosure Vulnerability

Exposure of private personal information to an unauthorized actor in Azure Stack allows an authorized attacker to disclose information locally...

KLA86583 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to gain privileges, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Microsoft Azure File Sync ca...

Microsoft Azure Stack 路径遍历漏洞

Microsoft Azure Stack is a hybrid cloud computing software solution based on the Azure cloud platform from Microsoft USA. The product supports building and deploying hybrid applications. A path traversal vulnerability exists in Microsoft Azure Stack. An attacker exploiting this vulnerability coul...