UBUNTU-CVE-2022-49657

In the Linux kernel, the following vulnerability has been resolved: usbnet: fix memory leak in error case usbnetwritecmdasync mixed up which buffers need to be freed in which error case. v2: add Fixes tag v3: fix uninitialized buf pointer...

Important: Red Hat Security Advisory: RHODF-4.14-RHEL-9 security update

An updated images are now available for RHODF-4.14-RHEL-9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links...

This Russian Tech Bro Helped Steal $93 Million and Landed in US Prison. Then Putin Called

In the epic US-Russian prisoner swap last summer, Vladimir Putin brought home an assassin, spies, and another prized ally: the man behind one of the biggest insider trading cases of all time...

CVE-2025-25604

creationtimestamp| type| source ---|---|--- 2025-02-21 19:18:34+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/4954 2025-02-21 22:17:13+00:00| seen| https://t.me/cvedetector/18685...

CVE-2023-51311

creationtimestamp| type| source ---|---|--- 2025-02-20 17:19:58+00:00| seen| https://t.me/cvedetector/18547 2025-02-24 18:26:35+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5193...

Security update for helm

This update for helm fixes the following issues: Update to version 3.17.1: CVE-2024-45338: Fixed denial of service due to non-linear parsing of case-insensitive content bsc1235318. CVE-2024-45337: Fixed misuse of ServerConfig.PublicKeyCallback to prevent authorization bypass in golang.org/x/crypt...

UBUNTU-CVE-2025-25204

gh is GitHub’s official command line tool. Starting in version 2.49.0 and prior to version 2.67.0, under certain conditions, a bug in GitHub's Artifact Attestation cli tool gh attestation verify causes it to return a zero exit status when no attestations are present. This behavior is incorrect:...

CVE-2024-30916

creationtimestamp| type| source ---|---|--- 2025-02-14 10:01:38+00:00| seen| Telegram/86sSWzuDLrPZe8QX4PYwf-2yvE0ca2M4h9lk5rXicBEXx3tN...

CVE-2024-3365

creationtimestamp| type| source ---|---|--- 2025-02-14 10:01:37+00:00| seen| Telegram/M5Dp39ouNGShbpmDumHkhSQsyOHqO3Zaa2sLwx4HHwwu0Aw-...

CVE-2024-5365

creationtimestamp| type| source ---|---|--- 2025-02-14 09:47:00+00:00| seen| Telegram/zEXOl0-kHM8zS5bX0aBzYcz5Z8fJwstII7nw21mcUAqSKgD...

SUSE CVE-2023-4759

Arbitrary File Overwrite in Eclipse JGit = 6.6.0 In Eclipse JGit, all versions = 6.6.0.202305301015-r, a symbolic link present in a specially crafted git repository can be used to write a file to locations outside the working tree when this repository is cloned with JGit to a case-insensitive...

SUSE CVE-2024-10389

There exists a Path Traversal vulnerability in Safearchive on Platforms with Case-Insensitive Filesystems e.g., NTFS. This allows Attackers to Write Arbitrary Files via Archive Extraction containing symbolic links. We recommend upgrading past commit f7ce9d7b6f9c6ecd72d0b0f16216b046e55e44dc...

SUSE CVE-2024-56337

Time-of-check Time-of-use TOCTOU Race Condition vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.1, from 10.1.0-M1 through 10.1.33, from 9.0.0.M1 through 9.0.97. The following versions were EOL at the time the CVE was created but are known to be...

Important: Red Hat Security Advisory: ACS 4.5 enhancement and security update

Updated images are now available for Red Hat Advanced Cluster Security RHACS. The updated image includes security fixes. This release of RHACS includes fixes for the following security vulnerabilities: npm-serialize-javascript: Cross-site Scripting XSS in serialize-javascript CVE-2024-11831 go-gi...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: comedi: Flushing partial mappings in the error case If some remappfnrange calls succeeded before one failed, we still have buffer pages mapped into the user-space page tables when we drop the buffer reference with...

CVE-2024-43369

Ibexa RichText Field Type is a Field Type for supporting rich formatted text stored in a structured XML format. In versions on the 4.6 branch prior to 4.6.10, the validator for the RichText fieldtype blocklists javascript: and vbscript: in links to prevent XSS. This can leave other options open,...

Important: Red Hat Security Advisory: Red Hat OpenShift Service Mesh Containers for 2.5.8

Red Hat OpenShift Service Mesh Containers for 2.5.8 This update has a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section. Red Hat OpenShift...

CVE-2024-23331

Vite is a frontend tooling framework for javascript. The Vite dev server option server.fs.deny can be bypassed on case-insensitive file systems using case-augmented versions of filenames. Notably this affects servers hosted on Windows. This bypass is similar to CVE-2023-34092 -- with surface area...

CVE-2024-49324

Unrestricted Upload of File with Dangerous Type vulnerability in sovratecdev Sovratec Case Management sovratec-case-management allows Upload a Web Shell to a Web Server.This issue affects Sovratec Case Management: from n/a through = 1.0.0...

CVE-2024-28199

phlex is an open source framework for building object-oriented views in Ruby. There is a potential cross-site scripting XSS vulnerability that can be exploited via maliciously crafted user data. This was due to improper case-sensitivity in the code that was meant to prevent these attacks. If you...