Ubuntu: Security Advisory (USN-7797-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-7793-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-7796-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-7791-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-7755-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gardener Extension for AWS provider 代码注入漏洞

Gardener Extension for AWS provider is an =extension controller= for Gardener open source. A code injection vulnerability exists in Gardener Extension for AWS provider, which stems from a vulnerability that could allow a user with administrative privileges to gain control of a seeded cluster via...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: harbor-cli, docker-credential-gcr, argo-events, prometheus-operator, tkn, src, wait-for-port, nodetaint, terraform-provider-azapi, spire-controller-manager, containerd, cloud-sql-proxy, rancher-agent, kube-logging-operator, blob-csi, nri-f5,...

CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: karpenter-fips, sftpgo-plugin-geoipfilter, modelmesh-runtime-adapter, knative-eventing, lvm-driver, kuberay-operator, configmap-reload-fips, kubernetes-csi-node-driver-registrar-fips, addon-resizer, local-path-provisioner, ctop, kserve-rest-proxy, dagdotdev,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: karpenter-fips, sftpgo-plugin-geoipfilter, modelmesh-runtime-adapter, knative-eventing, lvm-driver, kuberay-operator, configmap-reload-fips, kubernetes-csi-node-driver-registrar-fips, addon-resizer, local-path-provisioner, ctop, kserve-rest-proxy, dagdotdev,...

Ubuntu: Security Advisory (USN-7754-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-0193 vulnerabilities

Vulnerabilities for packages: linux-qemu-generic, linux-azure, linux-gcp, linux-qemu-rc, linux-gcp-generic, linux-aws, linux-vmware, linux-vmware-generic, linux-qemu, linux-aws-generic, linux-azure-generic...

GHSA-52X7-WCQQ-WFJP vulnerabilities

Vulnerabilities for packages: linux-qemu-generic, linux-azure, linux-gcp, linux-qemu-rc, linux-gcp-generic, linux-aws, linux-vmware, linux-vmware-generic, linux-qemu, linux-aws-generic, linux-azure-generic...

GHSA-VCF9-7QJV-G6Q4 vulnerabilities

Vulnerabilities for packages: linux-qemu-generic, linux-azure, linux-gcp, linux-qemu-rc, linux-gcp-generic, linux-aws, linux-vmware, linux-vmware-generic, linux-qemu, linux-aws-generic, linux-azure-generic...

Linux Distros Unpatched Vulnerability : CVE-2022-41562

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The HTML escaping component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server - Community Edition, TIB...

GitHub Account Compromise Led to Salesloft Drift Breach Affecting 22 Companies

Salesloft has revealed that the data breach linked to its Drift application started with the compromise of its GitHub account. Google-owned Mandiant, which began an investigation into the incident, said the threat actor, tracked as UNC6395, accessed the Salesloft GitHub account from March through...

payloadsallthethings

This is an offensive tool for AWS exploitation. The repository contains a collection of tools and scripts for testing the security of Amazon Web Services AWS environments. The tools include: Pacu: an AWS exploitation framework designed for testing the security of AWS environments Bucket Finder: a...

Linux Distros Unpatched Vulnerability : CVE-2023-51651

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - AWS SDK for PHP is the Amazon Web Services software development kit for PHP. Within the scope of requests to S3 object keys and/or prefixes containing a Unix...

Ubuntu: Security Advisory (USN-7726-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-7727-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GHSA-V2CH-C8V8-FGR7 Versity panic induced by AWS chunked data sent to port

Sending AWS chunk data with no Content-Length HTTP header causes the panic, every time. Reproduction Setup versity server running on port 7071, no SSL for ease of packet tracing with tshark. Problem can be reproduced with or without SSL on the versity end. Use nginx to reverse proxy on port 7070...