Researchers Spot XZ Utils Backdoor in Dozens of Docker Hub Images, Fueling Supply Chain Risks

New research has uncovered Docker images on Docker Hub that contain the infamous XZ Utils backdoor, more than a year after the discovery of the incident. More troubling is the fact that other images have been built on top of these infected base images, effectively propagating the infection furthe...

ROS-20250812-06

Vulnerability of Sofia-SIP user agent library session initiation protocol is related to the the ability to write outside of a buffer in memory. Exploitation of the vulnerability could allow an attacker, acting remotely, to execute arbitrary code by sending specially crafted STUN packets The...

CVE-2025-26513

The installer for SAN Host Utilities for Windows versions prior to 8.0 is susceptible to a vulnerability which when successfully exploited could allow a local user to escalate their privileges...

CVE-2025-26513

The installer for SAN Host Utilities for Windows versions prior to 8.0 is susceptible to a vulnerability which when successfully exploited could allow a local user to escalate their privileges...

CVE-2025-26513

The installer for SAN Host Utilities for Windows versions prior to 8.0 is susceptible to a vulnerability which when successfully exploited could allow a local user to escalate their privileges...

CVE-2025-26513

CVE-2025-26513 affects NetApp SAN Host Utilities for Windows prior to 8.0. The vulnerability in the installer could allow a local user to escalate privileges (local, high impact). No exploitation details are provided in the documents. Remediation per PT-2025-32310 is to update to version 8.0 or l...

CVE-2025-26513

The installer for SAN Host Utilities for Windows versions prior to 8.0 is susceptible to a vulnerability which when successfully exploited could allow a local user to escalate their privileges...

CVE-2025-26513

The installer for SAN Host Utilities for Windows versions prior to 8.0 is susceptible to a vulnerability which when successfully exploited could allow a local user to escalate their privileges...

USN-7688-1 cifs-utils vulnerabilities

Aurélien Aptel discovered that cifs-utils invoked a shell when requesting a password. In certain environments, a local attacker could possibly use this issue to escalate privileges. CVE-2020-14342 It was discovered that cifs-utils incorrectly used host credentials when mounting a krb5 CIFS file...

PT-2025-32310 · Unknown · San Host Utilities For Windows

Name of the Vulnerable Software and Affected Versions: SAN Host Utilities for Windows versions prior to 8.0 Description: The installer is susceptible to a vulnerability that could allow a local user to escalate their privileges when successfully exploited. Recommendations: Update to version 8.0 o...

NetApp SAN Host Utilities for Windows 安全漏洞

NetApp SAN Host Utilities for Windows is a software from NetApp, Inc. that is used to configure and optimize the performance and stability of Windows host-to-NetApp storage system connections. A security vulnerability exists in NetApp SAN Host Utilities for Windows versions prior to 8.0, which...

CVE-2025-26513: Improper Privilege Management

The installer for SAN Host Utilities for Windows versions prior to 8.0 is susceptible to a vulnerability which when successfully exploited could allow a local user to escalate their privileges...

SUSE CVE-2025-6224

Certificate generation in juju/utils using the cert.NewLeaf function could include private information. If this certificate were then transferred over the network in plaintext, an attacker listening on that network could sniff the certificate and trivially extract the private key from it...

[SECURITY] Fedora 42 Update: binutils-2.44-6.fc42

Binutils is a collection of binary utilities, including ar for creating, modifying and extracting from archives, as a family of GNU assemblers, gprof for displaying call graph profile data, ld the GNU linker, nm for listing symbols from object files, objcopy for copying and translating object...

OESA-2025-1954 iputils security update

The iputils package contains basic utilities for monitoring a network, including ping. The ping command sends a series of ICMP protocol ECHOREQUEST packets to a specified network host to discover whether the target machine is alive and receiving network traffic. Security Fixes: ping in iputils...

Malicious code in nodemailer-utils (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in keypair-encryption-utils (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in wallets-utils (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in sentry-utils (npm)

The package communicates with a domain associated with malicious activity...

RLSA-2025:8421 Moderate: ghostscript security update

The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed. Security Fixes: Ghostscript: NPDL device: Compression buffer overflow CVE-2025-27832 For more details...