397 matches found
Weblate has improper validation upon invitation acceptance
Impact It was possible to accept an invitation opened by a different Weblate user. Patches https://github.com/WeblateOrg/weblate/pull/16913 Workarounds Users should avoid leaving Weblate sessions with an unattended opened invitation. References Thanks to Nahid0x for responsibly disclosing this...
CLSA-2025-1764321653 bind: Fix of CVE-2025-40778
CVE-2025-40778: fix issue with BIND being too lenient when accepting records from answers to prevent the injection of forged data into the cache...
Astra Linux - уязвимость в linux-5.10
In the Linux kernel, the following vulnerability has been resolved: efi/unaccepted: touch soft lockup during memory accept Commit 50e782a86c98 "efi/unaccepted: Fix soft lockups caused by parallel memory acceptance" has released the spinlock so other CPUs can do memory acceptance in parallel and n...
UBUNTU-CVE-2025-40778
Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker to inject forged data into the cache. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.11.3-S1 through...
EUVD-2021-12587
Malware in sbrugna...
EUVD-2021-10897
Malware in sbrugna...
EUVD-1999-0477
Malware in sbrugna...
EUVD-2022-3834
Malicious code in bioql PyPI...
EUVD-2022-3777
Malicious code in bioql PyPI...
EUVD-2024-41448
Malicious code in bioql PyPI...
EUVD-2024-27856
Malicious code in bioql PyPI...
EUVD-2024-37106
Malicious code in bioql PyPI...
EUVD-2025-13539
Malicious code in bioql PyPI...
EUVD-2022-26875
Malicious code in bioql PyPI...
EUVD-2022-36900
Malicious code in bioql PyPI...
EUVD-2024-3385
Malicious code in bioql PyPI...
Fedora 43 : perl-JSON-XS (2025-8b24ea25bb)
The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-8b24ea25bb advisory. This update updates perl-JSON-XS 4.04. This version fixes heap overflow causing crashes, possibly information disclosure or worse CVE-2025-40928 and causes...
Send to Which Account? Evaluation of an LLM-Based Scambaiting System
Scammers are increasingly harnessing generative AIGenAI technologies to produce convincing phishing content at scale, amplifying financial fraud and undermining public trust. While conventional defenses, such as detection algorithms, user training, and reactive takedown efforts remain important,...
