CVE-2025-43026

HP Support Assistant is affected in versions prior to 9.44.18.0 by a local privilege-escalation vulnerability via arbitrary file write. The issue is documented across multiple sources (NVD/NiST/Nessus plugin and vendor guidance) with a consistent remediation: upgrade to version 9.44.18.0 or later...

CVE-2025-43026 HP Support Assistant – Potential Escalation of Privilege

A potential security vulnerability has been identified in the HP Support Assistant for versions prior to 9.44.18.0. The vulnerability could potentially allow a local attacker to escalate privileges via an arbitrary file write...

SUSE-SU-2025:20393-1 Security update for docker

This update for docker fixes the following issues: Always clear SUSEConnect suse secrets when starting containers regardless of whether the daemon was built with SUSEConnect support. Not doing this causes containers from SUSEConnect-enabled daemons to fail to start when running with...

CVE-2025-5641

A vulnerability was found in Radare2 5.9.9. It has been rated as problematic. This issue affects the function rconsisbreaked in the library /libr/cons/cons.c of the component radiff2. The manipulation of the argument -T leads to memory corruption. It is possible to launch the attack on the local...

CVE-2025-5641

Radare2 5.9.9 contains CVE-2025-5641 affecting the function r_cons_is_breaked in libr/cons/cons.c of radiff2. The -T argument manipulation leads to memory corruption and local access is required. Reported attack complexity is high, with exploitation described as difficult; public disclosure of ex...

WordPress Sola Support Ticket plugin <= 3.18 - Arbitrary Content Deletion Vulnerability

Arbitrary Content Deletion Vulnerability discovered by luckybuddy in WordPress Plugin Sola Support Ticket versions = 3.18...

Hewlett Packard Enterprise Insight Remote Support processAttachmentDataStream Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hewlett Packard Enterprise Insight Remote Support. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the processAttachmentDataStream...

PT-2025-23970 · Hewlett Packard · Hp Support Assistant

Name of the Vulnerable Software and Affected Versions: HP Support Assistant versions prior to 9.44.18.0 Description: A potential security issue has been identified that could allow a local attacker to escalate privileges via an arbitrary file write. Recommendations: For versions prior to 9.44.18....

PT-2025-23950 · Hewlett Packard · Hpe Insight Remote Support

Name of the Vulnerable Software and Affected Versions: HPE Insight Remote Support IRS versions prior to 7.15.0.646 Description: A path traversal issue exists. Recommendations: For versions prior to 7.15.0.646, update to version 7.15.0.646 or later to resolve the issue...

PT-2025-23949 · Hewlett Packard · Hpe Insight Remote Support

Name of the Vulnerable Software and Affected Versions: HPE Insight Remote Support versions prior to 7.15.0.646 Description: A vulnerability in HPE Insight Remote Support may allow an unauthenticated denial of service. Recommendations: For versions prior to 7.15.0.646, update to version 7.15.0.646...

Binary Vulnerability in Unisys UOS Desktop Professional Edition by Unisys Software Technology Co.

Unisys UOS Desktop Professional Edition is a commercial desktop operating system based on Linux kernel, which supports all CPU architectures including AMD64, ARM64, LoongArch64, SW64 and other mainstream architectures, and is suitable for domestic CPU platforms e.g., Haikuang, Zhaoshen, etc.. The...

HP Support Assistant – Potential Escalation of Privilege

A potential security vulnerability has been identified in the HP Support Assistant for versions prior to 9.44.18.0. The vulnerability could potentially allow a local attacker to escalate privileges via an arbitrary file write. HP has identified affected versions and the minimum version that...

HP Support Assistant 安全漏洞

HP Support Assistant is a suite of solutions from Hewlett-Packard HP in the United States that provides support and other features for PCs and printers. A security vulnerability exists in HP Support Assistant versions prior to 9.44.18.0, which stems from a vulnerability that could lead to arbitra...

Important: Red Hat Security Advisory: Red Hat Developer Hub 1.5.2 release.

Red Hat Developer Hub 1.5.2 has been released. Red Hat Developer Hub RHDH is Red Hat's enterprise-grade, self-managed, customizable developer portal based on Backstage.io. RHDH is supported on OpenShift and other major Kubernetes clusters AKS, EKS, GKE. The core features of RHDH include a single...

CVE-2025-2336

Improper sanitization of the value of the 'href' and 'xlink:href' attributes in '' SVG elements in AngularJS's 'ngSanitize' module allows attackers to bypass common image source restrictions. This can lead to a form of Content Spoofing https://owasp.org/www-community/attacks/ContentSpoofing and...

SUSE: Security Advisory (SUSE-SU-2025:01802-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

This Week in Spring - June 3rd, 2025

Hi, Spring fans! Welcome to another installment of This Week in Spring! I just finished recording my session with IntelliJ IDEA project lead Aleksey Stukalov about all the amazing features coming to IntelliJ IDEA to better support Java, Kotlin, and Spring developers. It went off without a hitch...

PT-2025-28992

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains an issue within the networking subsystem, specifically related to the b53 driver for Broadcom BCM63xx switches. The driver attempts to enable Energy Efficient...

Fingerprinting Deep Learning Models Via Network Traffic Patterns in Federated Learning

Federated Learning FL is increasingly adopted as a decentralized machine learning paradigm due to its capability to preserve data privacy by training models without centralizing user data. However, FL is susceptible to indirect privacy breaches via network traffic analysis-an area not explored in...

kernel security update

5.14.0-570.19.1.0.16.OL9 - nvme-pci: remove two deallocate zeroes quirks Orabug: 37756650 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys lis...