EUVD-2025-7556

Malicious code in bioql PyPI...

EUVD-2022-5578

Malicious code in bioql PyPI...

EUVD-2025-24617

Malicious code in bioql PyPI...

nullcon Goa 2026 Call for Papers

The Call For Papers for nullcon Goa 2026 is now open. Nullcon is an information security conference held in Goa, India. The focus of the conference is to showcase the next generation of offensive and defensive security technology. It will take place February 28th through March 1st, 2026...

[SECURITY] Fedora 41 Update: lemonldap-ng-2.21.3-1.fc41

LemonLdap::NG is a modular Web-SSO based on Apache::Session modules. It simplifies the build of a protected area with a few changes in the application. It manages both authentication and authorization and provides headers for accounting. So you can have a full AAA protection for your web space as...

[SECURITY] Fedora 42 Update: jupyterlab-4.4.7-1.fc42

JupyterLab is the next-generation user interface for Project Jupyter offering all the familiar building blocks of the classic Jupyter Notebook notebook, terminal, text editor, file browser, rich outputs, etc. in a flexible and powerful user interface...

An Inside Look at our Next Gen Object Storage Launch

...

Linux Distros Unpatched Vulnerability : CVE-2024-52947

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A cross-site scripting XSS vulnerability in LemonLDAP::NG before 2.20.1 allows remote attackers to inject arbitrary web script or HTML via the url parameter of...

Linux Distros Unpatched Vulnerability : CVE-2019-12046

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - LemonLDAP::NG -2.0.3 has Incorrect Access Control. CVE-2019-12046 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVE...

Linux Distros Unpatched Vulnerability : CVE-2023-28862

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in LemonLDAP::NG before 2.16.1. Weak session ID generation in the AuthBasic handler and incorrect failure handling during a password che...

CVE-2025-2182

A problem with the implementation of the MACsec protocol in Palo Alto Networks PAN-OS® results in the cleartext exposure of the connectivity association key CAK. This issue is only applicable to PA-7500 Series devices which are in an NGFW cluster. A user who possesses this key can read messages...

CVE-2025-2182 PAN-OS: Firewall Clusters using the MACsec Protocol Expose the Connectivity Association Key (CAK)

A problem with the implementation of the MACsec protocol in Palo Alto Networks PAN-OS® results in the cleartext exposure of the connectivity association key CAK. This issue is only applicable to PA-7500 Series devices which are in an NGFW cluster. A user who possesses this key can read messages...

Eviction Strategies Tool Released

Today, CISA released the Eviction Strategies Tool to provide cyber defenders with critical support and assistance during the containment and eviction phases of incident response. This tool includes: Cyber Eviction Strategies Playbook Next Generation Playbook-NG : A web-based application for...

PT-2025-28938 · Ооо "Юзергейт" · Usergate Next-Generation Firewall

Уязвимость страницы блокировки межсетевого экрана UserGate Next-Generation Firewall NGFW связана с недостаточной проверкой входных данных. Эксплуатация уязвимости, может позволить нарушителю, выполнить произвольный код при переходе по специально сформированной ссылке...

CVE-2023-30802

The Sangfor Next-Gen Application Firewall version NGAF8.0.17 is vulnerable to a source code disclosure vulnerability. A remote and unauthenticated attacker can obtain PHP source code by sending an HTTP request with an invalid Content-Length field...

CVE-2020-0676

An information disclosure vulnerability exists in the Cryptography Next Generation CNG service when it fails to properly handle objects in memory.To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application.The security update...

CVE-2020-0755

An information disclosure vulnerability exists in the Cryptography Next Generation CNG service when it fails to properly handle objects in memory.To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application.The security update...

CVE-2020-0675

An information disclosure vulnerability exists in the Cryptography Next Generation CNG service when it fails to properly handle objects in memory.To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application.The security update...

CVE-2020-0677

An information disclosure vulnerability exists in the Cryptography Next Generation CNG service when it fails to properly handle objects in memory.To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application.The security update...

CVE-2020-1384

An elevation of privilege vulnerability exists when the Windows Cryptography Next Generation CNG Key Isolation service improperly handles memory, aka 'Windows CNG Key Isolation Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1359...