CVE-2025-1211

Versions of the package hackney before 1.21.0 are vulnerable to Server-side Request Forgery SSRF due to improper parsing of URLs by URI built-in module and hackey. Given the URL http://[email protected]/, the URI function will parse and see the host as 127.0.0.1 which is correct, and hackney...

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

CVE-2025-25243

creationtimestamp| type| source ---|---|--- 2025-02-11 01:16:28+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhuidjjek42i 2025-02-11 01:56:20+00:00| seen| https://infosec.exchange/users/cve/statuses/113982765819276646 2025-02-11 02:48:14+00:00| seen|...

USN-7263-1 firefox vulnerabilities

Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information across domains, or execute arbitrary code. CVE-2025-1011, CVE-2025-1013,...

USN-7263-1: Firefox vulnerabilities

Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information across domains, or execute arbitrary code. CVE-2025-1011, CVE-2025-1013,...

CVE-2025-24875

CVE-2025-24875 corresponds to SAP Commerce where the Backoffice authentication cookies are by default configured with SameSite=None. Root cause: cookies set to None, weakening CSRF protections. Impact: CSRF risk with potential confidentiality/integrity concerns; exploitation status not detailed i...

Hotfix XS82ECU1082 - For Citrix Hypervisor 8.2 Cumulative Update 1

Who Should Install This Hotfix? This is a hotfix for customers running Citrix Hypervisor 8.2 Cumulative Update 1 and is only available to customers on theCustomer Success Servicesprogram. Note: Citrix Hypervisor 8.2 Cumulative Update 1 reaches end of life on Jun 25, 2025. Upgrade toXenServer...

PT-2025-6690

Name of the Vulnerable Software and Affected Versions grub2 affected versions not specified Description A defect was found in grub2. When reading a symbolic link's name from a UFS filesystem, grub2 fails to validate the string length taken as an input. This lack of validation may lead to a heap...

Adobe Illustrator < 28.7.4 / 29.0.0 < 29.2.1 Multiple Arbitrary code execution (APSB25-11) (macOS)

The version of Adobe Illustrator installed on the remote macOS host is prior to 28.7.4, 29.2.1. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB25-11 advisory. - Stack-based Buffer Overflow CWE-121 potentially leading to Arbitrary code execution CVE-2025-21163 - Us...

OPENSUSE-SU-2025:14764-1 libmozjs-128-0-128.7.0-1.1 on GA media

These are all security issues fixed in the libmozjs-128-0-128.7.0-1.1 package on the GA media of openSUSE Tumbleweed...

RHEL 9 : thunderbird (RHSA-2025:1317)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2025:1317 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: thunderbird: Memory safety bugs fixed in Firefox 135...

OPENSUSE-SU-2025:14766-1 libngtcp2-16-1.10.0-1.1 on GA media

These are all security issues fixed in the libngtcp2-16-1.10.0-1.1 package on the GA media of openSUSE Tumbleweed...

FreeBSD : mozilla -- multiple vulnerabilities (e54a1413-e539-11ef-a845-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the e54a1413-e539-11ef-a845-b42e991fc52e advisory. [email protected] reports: An attacker could have caused a use-after-free via crafted XSLT...

DLA-4018-2 ruby2.7 - regression update

Bulletin has no description...

PT-2025-6187 · Unknown · Octopus Server

Name of the Vulnerable Software and Affected Versions: Octopus Server affected versions not specified Description: The preview import feature in affected versions of Octopus Server could be used to identify the existence of a target file, providing an adversary with information that may aid in...

RHEL 9 : thunderbird (RHSA-2025:1318)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2025:1318 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: thunderbird: Memory safety bugs fixed in Firefox 135...

OPENSUSE-SU-2025:14763-1 crun-1.20-1.1 on GA media

These are all security issues fixed in the crun-1.20-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2025-24970 SslHandler doesn't correctly validate packets which can lead to native crash when using native SSLEngine

Netty, an asynchronous, event-driven network application framework, has a vulnerability starting in version 4.1.91.Final and prior to version 4.1.118.Final. When a special crafted packet is received via SslHandler it doesn't correctly handle validation of such a packet in all cases which can lead...

CVE-2024-10649

wandb/openui latest commit c945bb859979659add5f490a874140ad17c56a5d contains a vulnerability where unauthenticated endpoints allow file uploads and downloads from an AWS S3 bucket. This can lead to multiple security issues including denial of service, stored XSS, and information disclosure. The...

CVE-2024-10649 Unauthenticated File Upload in wandb/openui

wandb/openui latest commit c945bb859979659add5f490a874140ad17c56a5d contains a vulnerability where unauthenticated endpoints allow file uploads and downloads from an AWS S3 bucket. This can lead to multiple security issues including denial of service, stored XSS, and information disclosure. The...