Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-986385)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986385 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: iscsitcp: Fix UAF during login when accessing the shost ipaddress If during...

EUVD-2022-33928

Malicious code in bioql PyPI...

EUVD-2025-27218

Malicious code in bioql PyPI...

EUVD-2022-34994

Malicious code in bioql PyPI...

CVE-2025-43777

Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.9, 2025.Q1.0 through 2025.Q1.16, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13 and 2024.Q1.1 through 2024.Q1.19 exposes "Internal Server Error" in the response body when a...

CVE-2025-43777

Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.9, 2025.Q1.0 through 2025.Q1.16, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13 and 2024.Q1.1 through 2024.Q1.19 exposes "Internal Server Error" in the response body when a...

Unable to Login to Web UI After Enabling MFA

Article Applicability This article is regarding a issue that was discovered in Veeam Recovery Orchestrator build 7.2.1.286, which was available for download between 2025-07-08 and 2025-07-17. The issue documented in this article was discovered, confirmed, and patched and a new build was released...

CVE-2025-44203

In HotelDruid 3.0.0 and 3.0.7, the unauthenticated database-setup endpoint creadb.php can be reached before setup is completed and performs database creation without locking. By sending many concurrent requests, an attacker can trigger a race condition during which verbose SQL error messages...

SICK Field Analytics和SICK Media Server 安全漏洞

SICK Field Analytics and SICK Media Server are both products of the German company SICK.SICK Field Analytics is software for evaluating manufacturing data.SICK Media Server is a media server. A security vulnerability exists in SICK Field Analytics and SICK Media Server that stems from a different...

Linux VDA login fail

The newly installed LVDA encountered a login failure. When launching the virtual desktop, the Linux login screen appears, but even after manually entering the correct username and password, the system fails to authenticate and proceed to the desktop environment...

Schweitzer Engineering Laboratories SEL Series 安全漏洞

Schweitzer Engineering Laboratories SEL Series is a series of software and firmware products from Schweitzer Engineering Laboratories, Inc. A security vulnerability exists in Schweitzer Engineering Laboratories SEL Series that stems from the fact that the failed login response may vary depending ...

CVE-2025-31947

Mattermost versions 10.6.x = 10.6.1, 10.5.x = 10.5.2, 10.4.x = 10.4.4, 9.11.x = 9.11.11 fail to lockout LDAP users following repeated login failures, which allows attackers to lock external LDAP accounts through repeated login failures through Mattermost...

Authentication Bypass

Mattermost is vulnerable to Authentication Bypass. The vulnerability is due to insufficient enforcement of login failure limits due to the failure to lock out LDAP users after repeated unsuccessful login attempts, allowing attackers to trigger external LDAP account lockouts via brute-force attemp...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from not properly handling node reference counting after FLOGI and PLOGI failures, which could lead to null point...

Enumerate the Microsoft Windows Registry

Using the supplied credentials, Nessus was unable to log into the remote Windows host, enumerate registry keys and values required for vulnerability scans and store them in the knowledge base for other plugins to use. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Reedos aiM-Star 安全漏洞

Reedos aiM-Star is a software product from Reedos for mutual fund distribution. A security vulnerability exists in Reedos aiM-Star version 2.0.1, which stems from the lack of a restriction on excessive failed authentication attempts for API-based logins, which could lead to unauthorized access an...

CVE-2024-28077

A denial-of-service issue was discovered on certain GL-iNet devices. Some websites can detect devices exposed to the external network through DDNS, and consequently obtain the IP addresses and ports of devices that are exposed. By using special usernames and special characters such as half...

Citrix Provisioning Services Target Device Displays Incorrect Windows Time

Target Devices may display the incorrect time. The Device time differs from that of the domain controllers. The symptoms can vary but include: 1. The inability to login to the Target Device 2. The Device domain Trust Relationship breaks. 3. VDA registration continues to fail...

CVE-2023-43742

An authentication bypass in Zultys MX-SE, MX-SE II, MX-E, MX-Virtual, MX250, and MX30 with firmware versions prior to 17.0.10 patch 17161 and 16.04 patch 16109 allows an unauthenticated attacker to obtain an administrative session via a protection mechanism failure in the authentication function...

CVE-2023-43742

An authentication bypass in Zultys MX-SE, MX-SE II, MX-E, MX-Virtual, MX250, and MX30 with firmware versions prior to 17.0.10 patch 17161 and 16.04 patch 16109 allows an unauthenticated attacker to obtain an administrative session via a protection mechanism failure in the authentication function...