CVE-2025-31218

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.5. An app may be able to observe the hostnames of new network connections...

Apple macOS 安全漏洞

Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS that stems from the removal of vulnerable code that could cause an application to observe the hostname of a new network connection...

Apple macOS 安全漏洞

Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS that originates from a connection to a malicious AFP server that could corrupt kernel memory...

Malicious code in com.unity.furioos-connection-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 68c58a66214f806ff93b92a26cc583bbad8e5b14bde97afe154c5c850bc40585 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SpecialFolderDatablock - Windows LNK File Special UNC Path NTLM Leak

This module creates a malicious Windows shortcut LNK file that specifies a special UNC path in SpecialFolderDatablock of Shell Link .LNK that can trigger an authentication attempt to a remote server. This can be used to harvest NTLM authentication credentials. When a victim browse to the location...

CVE-2025-41431

When connection mirroring is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel TMM to terminate in the standby BIG-IP systems in a traffic group. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

OESA-2025-1504 wxGTK3 security update

wxWidgets is a C++ library for cross-platform GUI. With wxWidgets, you can create applications for different GUIs GTK+, Motif, MS Windows, MacOS X, Windows CE, GPE from the same source code. This package contains all library of GTK3-backed wxWidgets. Security Fixes: In wxWidgets before 3.2.7, a...

CVE-2025-41431

When connection mirroring is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel TMM to terminate in the standby BIG-IP systems in a traffic group. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2025-41431

When connection mirroring is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel TMM to terminate in the standby BIG-IP systems in a traffic group. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2025-41431 TMM Vulnerability

When connection mirroring is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel TMM to terminate in the standby BIG-IP systems in a traffic group. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2025-41431

CVE-2025-41431 affects BIG-IP with the Traffic Management Microkernel (TMM) when connection mirroring is configured on a virtual server. Undisclosed requests can cause TMM to terminate on standby BIG-IP systems within a traffic group, creating a DoS-like disruption as redundancy is reduced during...

CVE-2025-41431 TMM Vulnerability

When connection mirroring is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel TMM to terminate in the standby BIG-IP systems in a traffic group. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

openldap bug fix update

An update is available for openldap. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list OpenLDAP is an open-source suite of Lightweight Directory Access Protocol LD...

openssh bug fix update

An update is available for openssh. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list OpenSSH is an SSH protocol implementation supported by a number of Linux, UNI...

CVE-2024-47619 tranport: TLS host name wildcard matching too lax

syslog-ng is an enhanced log daemo. Prior to version 4.8.2, tlswildcardmatch matches on certificates such as foo..bar although that is not allowed. It is also possible to pass partial wildcards such as foo.ac.bar which glib matches but should be avoided / invalidated. This issue could have an...

K000150668: TMM vulnerability CVE-2025-41431

Security Advisory Description When connection mirroring is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel TMM to terminate in the standby BIG-IP systems in a traffic group. CVE-2025-41431 Impact Traffic in other traffic groups may be disrupted...

F5 Networks BIG-IP : TMM vulnerability (K000150668)

The version of F5 Networks BIG-IP installed on the remote host is prior to 17.1.2.2. It is, therefore, affected by a vulnerability as referenced in the K000150668 advisory. When connection mirroring is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkern...

Configure Proper Association Policies for INPUT and OUTPUT of iptables

Although you can configure protocols, IP addresses, and port numbers to add policies for packets entering and leaving a server to the INPUT and OUTPUT chains, it is difficult to configure suitable policies using the sport parameter due to complicated situations. For example, a client accesses the...

Configure a Proper Value for MaxAuthTries

MaxAuthTries indicates the maximum number of user authentication failures allowed in a single connection. If the number of user authentication failures exceeds the value, the connection is automatically disconnected. You are advised to set this field to a value less than or equal to 3. If this...

F5 BIG-IP 缓冲区错误漏洞

F5 BIG-IP is an application delivery platform that integrates network traffic management, application security management, and load balancing from F5 USA. A buffer error vulnerability exists in F5 BIG-IP that stems from a connection mirroring configuration that causes the standby system TMM to...