CLSA-2025-1744219291 Update of alt-php

Bump ABI 4.15.0-246...

Containerd Find Exclude Path Detect (Linux)

Binary data containerddetect.nbin...

Sante PACS Server Web Detection

Binary data santepacsserverwebdetect.nbin...

Sante PACS Server Path Traversal (CVE-2025-2264)

Binary data santepacsservercve-2025-2264.nbin...

CVE-2025-27078

A vulnerability in a system binary of AOS-8 Instant and AOS-10 AP could allow an authenticated remote attacker to inject commands into the underlying operating system while using the CLI. Successful exploitation could lead to complete system compromise...

CVE-2025-27078 Authenticated Remote Command Execution caused by Insecure Function Usage in System Binary

A vulnerability in a system binary of AOS-8 Instant and AOS-10 AP could allow an authenticated remote attacker to inject commands into the underlying operating system while using the CLI. Successful exploitation could lead to complete system compromise...

CVE-2025-27078 Authenticated Remote Command Execution caused by Insecure Function Usage in System Binary

A vulnerability in a system binary of AOS-8 Instant and AOS-10 AP could allow an authenticated remote attacker to inject commands into the underlying operating system while using the CLI. Successful exploitation could lead to complete system compromise...

ABB Arctic Wireless Gateways

SUMMARY ABB is aware of public reports of the vulnerabilities in the product versions listed as affected in this advisory. An attacker who successfully exploited modem module vulnerabilities could run arbitrary code in the wireless modem module of the product. This could lead to denial of...

CRI-O Installed (Linux)

Binary data cri-odetect.nbin...

CrushFTP < 11.3.1 Authentication Bypass (CVE-2025-31161) (Direct Check)

Binary data crushftpCVE-2025-31161.nbin...

The vulnerability of the binary file mongocryptd and the library mongocryptv1.so of the MongoDB database management system, which involves the transmission of critical information in plaintext, allows attackers to gain unauthorized access to protected information.

The vulnerability of the binary file mongocryptd and the MongoDB database library v1.so involves the transmission of critical information in plaintext. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

AWS SAM CLI Installed (Windows)

Binary data awssamcliwindetect.nbin...

CVE-2025-29570

An issue in Shenzhen Libituo Technology Co., Ltd LBT-T300-T400 v3.2 allows a local attacker to escalate privileges via the function tftpimagecheck of a binary named rc...

Security update for apparmor

This update for apparmor fixes the following issue: Allow dovecot-auth to execute unix check password from /sbin, not only from /usr/bin bsc1234452. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternativel...

OESA-2025-1352 edk2 security update

EDK II is a modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications. Security Fixes: Issue summary: Use of the low-level GF2^m elliptic curve APIs with untrusted explicit values for the field polynomial can lead to out-of-bounds memory reads or...

Shenzhen Libituo Technology LBT-T300-T400 安全漏洞

Shenzhen Libituo Technology LBT-T300-T400 is an industrial router from Shenzhen Libituo Technology China. A security vulnerability exists in the Shenzhen Libituo Technology LBT-T300-T400 version 3.2, which stems from a flaw in the tftpimagecheck function in the rc binary, which could lead to...

PT-2025-14733 · Binary Carpenter · Binarycarpenter Free Woocommerce Product Table View

Name of the Vulnerable Software and Affected Versions: BinaryCarpenter Free Woocommerce Product Table View versions 1.78 and earlier Description: The issue is related to a Missing Authorization vulnerability, allowing exploitation of incorrectly configured access control security levels. This can...

CVE-2025-29570

CVE-2025-29570 concerns Shenzhen Libituo Technology Co., Ltd. LBT-T300-T400, version 3.2. Multiple sources describe a local privilege-escalation issue in the tftp_image_check function of the binary named rc . The root cause is not deeply detailed across the documents, but the vulnerability is ass...

PT-2025-19699 · Opensuse +1 · Apparmor +1

Name of the Vulnerable Software and Affected Versions: apparmor affected versions not specified Description: This issue allows dovecot-auth to execute the unix check password function from /sbin, not only from /usr/bin. Recommendations: At the moment, there is no information about a newer version...

PT-2025-14789 · Unknown · Lbt-T300-T400

Name of the Vulnerable Software and Affected Versions: Shenzhen Libituo Technology Co., Ltd LBT-T300-T400 version 3.2 Description: An issue in Shenzhen Libituo Technology Co., Ltd LBT-T300-T400 version 3.2 allows a local attacker to escalate privileges via the tftp image check function of a binar...