[SECURITY] [DSA 5869-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5869-1 [email protected] https://www.debian.org/security/ Andres Salomon February 21, 2025 https://www.debian.org/security/faq -...

CVE-2025-26794

Exim 4.98 before 4.98.1, when SQLite hints and ETRN serialization are used, allows remote SQL injection. Resolving SQL injection requires an update to 4.99.1 in certain non-default rate-limit configurations...

CVE-2025-26794

Exim 4.98 before 4.98.1, when SQLite hints and ETRN serialization are used, allows remote SQL injection. Resolving SQL injection requires an update to 4.99.1 in certain non-default rate-limit configurations...

CVE-2025-25667

creationtimestamp| type| source ---|---|--- 2025-02-20 23:16:59+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/4826 2025-02-21 00:55:14+00:00| seen| https://t.me/cvedetector/18610 2025-02-21 19:48:42+00:00| seen|...

CVE-2025-25958

Cross Site Scripting vulnerabilities in phpcmsv9 v.9.6.3 allows a remote attacker to escalate privileges via a crafted script...

CVE-2025-26305

creationtimestamp| type| source ---|---|--- 2025-02-20 19:00:24+00:00| seen| https://t.me/cvedetector/18559 2025-02-21 21:22:34+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/4984 2025-02-21 23:48:51+00:00| seen|...

CVE-2025-26304

creationtimestamp| type| source ---|---|--- 2025-02-20 19:00:23+00:00| seen| https://t.me/cvedetector/18558 2025-02-21 21:22:35+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/4985 2025-02-21 23:48:51+00:00| seen|...

CVE-2025-26305

A memory leak has been identified in the parseSWFSOUNDINFO function in util/parser.c of libming v0.4.8, which allows attackers to cause a denial of service via a crafted SWF file...

Important: Red Hat Security Advisory: postgresql security update

An update for postgresql is now available for Red Hat Enterprise Linux 9.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

CVE-2024-13855

creationtimestamp| type| source ---|---|--- 2025-02-20 12:41:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3limctgtfot2c 2025-02-20 13:08:55+00:00| seen| https://t.me/cvedetector/18524...

CVE-2024-13520

creationtimestamp| type| source ---|---|--- 2025-02-20 12:41:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3limctfhwyb2l 2025-02-20 13:09:00+00:00| seen| https://t.me/cvedetector/18527...

CVE-2025-27218

creationtimestamp| type| source ---|---|--- 2025-02-20 06:41:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lilooxkrnx2a 2025-02-20 08:07:57+00:00| seen| https://t.me/cvedetector/18517 2025-02-20 23:26:54+00:00| seen| Telegram/bIWqiOjr1i5Jv8o-lCPyoqx7UdJEMKQ-dr8MIYLvX8SvXV-l...

CVE-2025-1492

A flaw was found in Wireshark. Bundle Protocol and CBOR dissector crashes in Wireshark allow denial of service via packet injection or crafted capture file. Mitigation No mitigation is available for this issue other than updating the affected package to the version containing the fix. However, by...

CVE-2025-26304

A memory leak vulnerability exists in libming v0.4.8 within the parseSWF_EXPORTASSETS function located in util/parser.c. This issue is caused by improper memory management , where the application fails to release allocated memory. The vulnerability can be triggered by processing specially crafted...

CVE-2025-26305

A memory leak has been identified in the parseSWFSOUNDINFO function in util/parser.c of libming v0.4.8, which allows attackers to cause a denial of service via a crafted SWF file...

CVE-2025-26304

A memory leak has been identified in the parseSWFEXPORTASSETS function in util/parser.c of libming v0.4.8...

CVE-2025-25667

Tenda AC8V4 V16.03.34.06 was discovered to contain a stack overflow via the urls parameter in the function getparentControllistInfo...

CVE-2025-26309

A memory leak has been identified in the parseSWFDEFINESCENEANDFRAMEDATA function in util/parser.c of libming v0.4.8, which allows attackers to cause a denial of service via a crafted SWF file...

CVE-2024-12284 Authenticated privilege escalation

Authenticated privilege escalation in NetScaler Console and NetScaler Agent allows...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.14.48 security update

Red Hat OpenShift Container Platform release 4.14.48 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.14. Red Hat Product Security has rated this update as having a...