Desktop Alert PingAlert 安全漏洞

Desktop Alert PingAlert is a network status monitoring tool developed by Desktop Alert, Inc. and is mainly used to monitor the status of network devices in real time and send alerts. Desktop Alert PingAlert suffers from a server-side request forgery vulnerability, which stems from the server not...

CVE-2025-54560: Server-Side Request Forgery (SSRF)

A Server-side Request Forgery vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows Probing of internal infrastructure...

The vulnerability of Microsoft Configuration Manager software for managing IT infrastructure, related to access control errors, allows attackers to escalate their privileges.

The vulnerability of Microsoft Configuration Manager software for managing IT infrastructure is related to access control errors. Exploiting this vulnerability can allow attackers to enhance their privileges...

CVE-2025-64709

Typebot is an open-source chatbot builder. In versions prior to 3.13.1, a Server-Side Request Forgery SSRF vulnerability in the Typebot webhook block HTTP Request component functionality allows authenticated users to make arbitrary HTTP requests from the server, including access to AWS Instance...

CVE-2025-64740

CVE-2025-64740 affects Zoom Workplace VDI Client for Windows prior to 6.3.14, 6.4.12, or 6.5.10. Root cause: improper verification of the installer’s cryptographic signature, enabling an authenticated local user to escalate privileges. Remediation: upgrade to the fixed versions (6.3.14+, 6.4.12+,...

CISA and Partners Release Advisory Update on Akira Ransomware

Today, Cybersecurity and Infrastructure Security Agency CISA, in collaboration with the Federal Bureau of Investigation, Department of Defense Cyber Crime Center, Department of Health and Human Services, and international partners, released an updated joint Cybersecurity Advisory, StopRansomware:...

PT-2025-46835

Name of the Vulnerable Software and Affected Versions Zoom Workplace VDI Plugin versions 6.3.0 through 6.3.13 Zoom Workplace VDI Plugin versions 6.4.0 through 6.4.13 Zoom Workplace VDI Plugin versions 6.5.0 through 6.5.9 Description The installer for the Zoom Workplace VDI Plugin on macOS is...

USN-7835-6 linux-aws-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - ACPI drivers; - Ublk userspace block driver; -...

USN-7835-6: Linux kernel (AWS) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - ACPI drivers; - Ublk userspace block driver; -...

The vulnerability of the panthor_groupdestroy() function in the drivers/gpu/drm/panthor/panthor_sched.c driver module exposes the Direct Rendering Infrastructure (DRI) kernel of the Linux operating system, allowing a malicious actor to cause a service failure.

The vulnerability of the panthorgroupdestroy function in the drivers/gpu/drm/panthor/panthorsched.c driver for the Direct Rendering Infrastructure DRI support in the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an...

A week in security (November 3 – November 9)

Last week on Malwarebytes Labs: Malwarebytes scores 100% in AV-Comparatives Stalkerware Test 2025 Fake CAPTCHA sites now have tutorial videos to help victims install malware Hackers commit highway robbery, stealing cargo and goods Android malware steals your card details and PIN to make instant A...

The vulnerability in the function dcn401_init_hw() of the drivers/gpu/drm/amd/display/dc/hwss/dcn401/dcn401_hwseq.c driver module allows a hacker to cause a service failure. This vulnerability is related to the Direct Rendering Infrastructure (DRI) support in AMD graphics cards for Linux operating systems.

The vulnerability of the dcn401inithw function in the drivers/gpu/drm/amd/display/dc/hwss/dcn401/dcn401hwseq.c driver module is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability in the function dcn32_acquire_idle_pipe_pipe_for_head_pipe_in_layer(), located in the driver/gpu/drm/amd/display/dc/resource/dcn32/dcn32_resource.c file of the Direct Rendering Infrastructure (DRI) support driver for AMD graphics cards in Linux operating systems, allows a malicious actor to cause a service failure.

The vulnerability of the dcn32acquireidlepipepipeforheadpipeinlayer function in the driver/gpu/drm/amd/display/dc/resource/dcn32/dcn32resource.c file, a driver for AMD Direct Rendering Infrastructure DRI graphics cards in Linux operating systems, is related to pointer aliasing. Exploiting this...

The vulnerability of the dcn32_set_output_transfer_func() function in the drivers/gpu/drm/amd/display/dc/dcn32/dcn32_hwseq.c driver module allows a hacker to cause a service failure. This vulnerability is related to the Direct Rendering Infrastructure (DRI) support for AMD graphics cards in Linux operating systems.

The vulnerability of the dcn32setoutputtransferfunc function in the drivers/gpu/drm/amd/display/dc/dcn32/dcn32hwseq.c driver module of the Direct Rendering Infrastructure DRI support driver for AMD graphics cards in Linux operating systems is related to the use of pointers. Exploiting this...

The vulnerability of the dcn20_set_output_transfer_func() function in the drivers/gpu/drm/amd/display/dc/dcn20/dcn20_hwseq.c driver module allows a hacker to cause a service failure. This vulnerability is related to the Direct Rendering Infrastructure (DRI) support for AMD graphics cards in Linux operating systems.

The vulnerability of the dcn20setoutputtransferfunc function in the drivers/gpu/drm/amd/display/dc/dcn20/dcn20HWSeq.c driver module of the Direct Rendering Infrastructure DRI support driver for AMD graphics cards in Linux operating systems is related to the use of pointers. Exploiting this...

The vulnerability of the guc_exec_queue_timedout_job() function in the drivers/gpu/drm/xe/xe_guc_submit.c driver, a part of the Direct Rendering Infrastructure (DRI) support driver for the Linux operating system, allows a malicious actor to trigger a service failure.

The vulnerability of the gucexecqueuetimedoutjob function in the drivers/gpu/drm/xe/xegucsubmit.c driver, a part of the Direct Rendering Infrastructure DRI support driver for the Linux operating system, relates to the reallocation of memory after it is freed. Exploiting this vulnerability could...

USN-7835-5 linux-oracle-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - ACPI drivers; - Ublk userspace block driver; -...

USN-7835-5: Linux kernel (Oracle) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - ACPI drivers; - Ublk userspace block driver; -...

Cyberattacks on UK water systems reveal rising risks to critical infrastructure

Digital intruders have been targeting UK drinking water systems in what seems to be a growing risk. Recorded Future News sent a request to the UK's Drinking Water Inspectorate DWI, the organization responsible for ensuring that drinking water is safe, for details on cyberattacks affecting the...

The vulnerability of the amdgpu_dm_update_cursor() function in the drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c driver module allows a hacker to trigger a service failure in AMD graphics cards that support Direct Rendering Infrastructure (DRI) in Linux operating systems.

The vulnerability of the amdgpudmupdatecursor function in the drivers/gpu/drm/amd/display/amdgpudm/amdgpudm.c driver module relates to the Direct Rendering Infrastructure DRI of AMD graphics cards in Linux operating systems. The vulnerability allows a attacker to cause a service failure...