GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: cilium, prometheus-elasticsearch-exporter, crossplane-provider-aws-datasync, grype-fips, crossplane-provider-aws-sesv2-fips, gatus, longhorn-cli, atlantis-fips, kyverno-policy-reporter-plugins-kyverno, crossplane-provider-aws-efs-fips, crossplane-provider-aws-backup,...

kernel security update

6.12.0-124.31.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...

EUVD-2025-20796

Malicious code in bioql PyPI...

Malicious code in twilio-datasync (npm)

The package twilio-datasync was found to contain malicious code...

MAL-2025-37373 Malicious code in twilio-datasync (npm)

The package twilio-datasync was found to contain malicious code...

CVE-2025-7379

A security bypass vulnerability allows exploitation via Reverse Tabnabbing, a type of phishing attack where attackers can manipulate the content of the original tab, leading to credential theft and other security risks. This issue affects DataSync Center: from 1.1.0 before 1.1.0.r207, and from...

CVE-2025-7379

A security bypass vulnerability allows exploitation via Reverse Tabnabbing, a type of phishing attack where attackers can manipulate the content of the original tab, leading to credential theft and other security risks. This issue affects DataSync Center: from 1.1.0 before 1.1.0.r207, and from...

CVE-2025-7379 A security bypass vulnerability was found in DataSync Center installed on ADM

A security bypass vulnerability allows exploitation via Reverse Tabnabbing, a type of phishing attack where attackers can manipulate the content of the original tab, leading to credential theft and other security risks. This issue affects DataSync Center: from 1.1.0 before 1.1.0.r207, and from...

CVE-2025-7379 A security bypass vulnerability was found in DataSync Center installed on ADM

A security bypass vulnerability allows exploitation via Reverse Tabnabbing, a type of phishing attack where attackers can manipulate the content of the original tab, leading to credential theft and other security risks. This issue affects DataSync Center: from 1.1.0 before 1.1.0.r207, and from...

ASUSTOR DataSync Center 安全漏洞

ASUSTOR DataSync Center is a cloud storage service management program from Hua Yun Technology ASUSTOR, Inc. of Taipei, China. A security vulnerability exists in ASUSTOR DataSync Center versions prior to 1.1.0.r207 and prior to 1.2.0.r206, which stems from susceptibility to reverse tag hijacking...

PT-2025-28862 · Unknown · Datasync Center

Name of the Vulnerable Software and Affected Versions: DataSync Center versions 1.1.0 through 1.1.0.r207 DataSync Center versions 1.2.0 through 1.2.0.r206 Description: A security bypass issue allows exploitation via Reverse Tabnabbing, a type of phishing attack where attackers can manipulate the...

DataSync - Customized SSL, Redefined SSL Common Names verifier, Runtime privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application DataSync published at the 'play' market has multiple vulnerabilities...