107 matches found
Linux Distros Unpatched Vulnerability : CVE-2025-61731
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Building a malicious file with cmd/go can cause can cause a write to an attacker-controlled file with partial control of the file content. The cgo pkg-config:...
CVE-2025-58891
The WordPress Sanger theme (AncoraThemes Sanger)
Security update for go1.24
This update for go1.24 fixes the following issues: go1.24.11 released 2025-12-02 includes two security fixes to the crypto/x509 package, as well as bug fixes to the runtime. bsc1236217 CVE-2025-61727 CVE-2025-61729: go76460 go76445 bsc1254431 security: fix CVE-2025-61729 crypto/x509: excessive...
OPENSUSE-SU-2025:15796-1 go1.24-1.24.11-1.1 on GA media
These are all security issues fixed in the go1.24-1.24.11-1.1 package on the GA media of openSUSE Tumbleweed...
Golang 1.24.x < 1.24.8 / 1.25.x < 1.25.2 Multiple Vulnerabilities (qZN5nc-mBgAJ)
The version of Golang running on the remote host is 1.24.x prior to 1.24.8, 1.25.x prior to 1.25.2. It is, therefore, affected by multiple vulnerabilities as referenced in qZN5nc-mBgAJ advisory. - The Parse function permitted values other than IPv6 addresses to be included in square brackets with...
OPENSUSE-SU-2025:15608-1 go1.24-1.24.8-1.1 on GA media
These are all security issues fixed in the go1.24-1.24.8-1.1 package on the GA media of openSUSE Tumbleweed...
EUVD-2018-18816
Malware in sbrugna...
EUVD-2025-28043
Malicious code in bioql PyPI...
EUVD-2025-28907
Malicious code in bioql PyPI...
CVE-2025-10251
A vulnerability was detected in FoxCMS up to 1.24. Affected by this issue is the function batchCope of the file /app/admin/controller/Images.php. The manipulation of the argument ids results in sql injection. It is possible to launch the attack remotely. The exploit is now public and may be used...
CVE-2025-10251
FoxCMS
CVE-2025-10251 FoxCMS Images.php batchCope sql injection
A vulnerability was detected in FoxCMS up to 1.24. Affected by this issue is the function batchCope of the file /app/admin/controller/Images.php. The manipulation of the argument ids results in sql injection. It is possible to launch the attack remotely. The exploit is now public and may be used...
PT-2025-37181
Name of the Vulnerable Software and Affected Versions: FoxCMS versions prior to 1.24 Description: A SQL injection issue exists in FoxCMS due to the manipulation of the ids argument within the batchCope function located in the /app/admin/controller/Images.php file. This allows for remote...
Linux Distros Unpatched Vulnerability : CVE-2021-32723
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Prism is a syntax highlighting library. Some languages before 1.24.0 are vulnerable to Regular Expression Denial of Service ReDoS. When Prism is used to highlig...
go1.24-1.24.6-1.1 on GA media (moderate)
go1.24-1.24.6-1.1 on GA media Announcement ID: openSUSE-SU-2025:15423-1 Rating: moderate Cross-References: CVE-2025-47906 CVE-2025-47907 CVSS scores: CVE-2025-47906 SUSE : 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVE-2025-47906 SUSE : 2.1...
OPENSUSE-SU-2025:15423-1 go1.24-1.24.6-1.1 on GA media
These are all security issues fixed in the go1.24-1.24.6-1.1 package on the GA media of openSUSE Tumbleweed...
SUSE-SU-2025:20535-1 Security update for docker
This update for docker fixes the following issues: - Update to Go 1.24 for builds, to match upstream. - Update to Docker 28.3.2-ce. See upstream changelog online at - Update to Docker 28.3.1-ce. See upstream changelog online at - Update to Docker 28.3.0-ce. See upstream changelog online at...
OPENSUSE-SU-2025:15329-1 go1.24-1.24.5-1.1 on GA media
These are all security issues fixed in the go1.24-1.24.5-1.1 package on the GA media of openSUSE Tumbleweed...
Security update for distribution
This update for distribution fixes the following issues: The package is rebuild with more recent go go1.24, fixing respective security issues bsc1244471 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...
Security update for go1.24
This update for go1.24 fixes the following issues: Update to go1.24.3 bsc1236217: Security fixes: CVE-2025-22873: Fixed os.Root permits access to parent directory bsc1242715 Changelog: go73556 go73555 security: fix CVE-2025-22873 os: Root permits access to parent directory go73082 os: Root.Open...