Cross-site Request Forgery (CSRF)

Overview Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF via the HTTP request handling process. An attacker can execute unauthorized actions by sending crafted cross-site POST requests with a CORS-safelisted Content-Type, bypassing origin and content-type...

Fedora 42 : checkpointctl (2025-909f303a85)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-909f303a85 advisory. Update checkpointctl to 1.4.1 CVE-2025-47906 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...

PT-2025-47881

A security vulnerability has been detected in Eigenfocus up to 1.4.0. This vulnerability affects unknown code of the component Description Handler. The manipulation of the argument entry.description/time entry.description leads to cross site scripting. The attack is possible to be carried out...