New Morphing Meerkat Phishing Kit Exploits DNS to Spoof 100+ Brands

A recent analysis published by Infoblox reveals a sophisticated phishing operation, dubbed Morphing Meerkat, actively exploiting DNS vulnerabilities…...

MAL-2025-191706 Malicious code in conn-utils (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 25be0eaa51dd4c4ba03afd81b4cfad938ceb07dacb0195a9179b46413178e086 Already during the installation, the file with slightly obfuscated code is loaded and starts exfiltrating information about the host. It especially targets...

CVE-2025-2838

Silicon Labs Gecko OS DNS Response Processing Infinite Loop Denial-of-Service Vulnerability. This vulnerability allows network-adjacent attackers to create a denial-of-service condition on affected installations of Silicon Labs Gecko OS. Authentication is not required to exploit this vulnerabilit...

CVE-2025-2838

Silicon Labs Gecko OS DNS Response Processing Infinite Loop Denial-of-Service Vulnerability. This vulnerability allows network-adjacent attackers to create a denial-of-service condition on affected installations of Silicon Labs Gecko OS. Authentication is not required to exploit this vulnerabilit...

CVE-2025-2838

CVE-2025-2838 affects Silicon Labs Gecko OS. The issue is a logic error in DNS response processing that can cause an infinite loop, leading to denial of service. Attack requires network adjacency and no authentication. Impact is Availability (per CVSS: AV:A, AC:L, PR:N, UI:N, S:U, C:N, I:N, A:H; ...

CVE-2025-2838 Silicon Labs Gecko OS DNS Response Processing Infinite Loop Denial-of-Service Vulnerability

Silicon Labs Gecko OS DNS Response Processing Infinite Loop Denial-of-Service Vulnerability. This vulnerability allows network-adjacent attackers to create a denial-of-service condition on affected installations of Silicon Labs Gecko OS. Authentication is not required to exploit this vulnerabilit...

CVE-2025-2838 Silicon Labs Gecko OS DNS Response Processing Infinite Loop Denial-of-Service Vulnerability

Silicon Labs Gecko OS DNS Response Processing Infinite Loop Denial-of-Service Vulnerability. This vulnerability allows network-adjacent attackers to create a denial-of-service condition on affected installations of Silicon Labs Gecko OS. Authentication is not required to exploit this vulnerabilit...

Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOPs

Summary Multiple vulnerabilities were fixed in IBM Cloud Pak for Watson AIOps version 3.6.1 Vulnerability Details CVEID:CVE-2021-25220 DESCRIPTION: ISC BIND could allow a remote attacker to bypass security restrictions, caused by an error when using DNS forwarders. An attacker could exploit this...

ROS-20250326-01

Pidgin instant messaging vulnerability is related to DNS response spoofing and redirecting client connections to a malicious server. redirecting client connections to a malicious server. Exploitation of the vulnerability could allow an attacker acting remotely, cause a denial of service to an...

CVE-2025-2838: Loop with Unreachable Exit Condition

Silicon Labs Gecko OS DNS Response Processing Infinite Loop Denial-of-Service Vulnerability. This vulnerability allows network-adjacent attackers to create a denial-of-service condition on affected installations of Silicon Labs Gecko OS. Authentication is not required to exploit this vulnerabilit...

SUSE-SU-2025:0992-1 Security update for docker

This update for docker fixes the following issues: Update to Docker 27.5.1-ce bsc1237335: - CVE-2024-29018: External DNS requests from 'internal' networks could lead to data exfiltration bsc1234089...

CLSA-2025-1742731930 openssh: Fix of CVE-2025-26465

CVE-2025-26465: fix vulnerability in OpenSSH when the VerifyHostKeyDNS option is enabled - enlarge format buffer size for certificate serial number so the log message can record any 64-bit integer without truncation openssh bz3012 Orabug: 30448895...

actix-telepathy (>=0.5.4, <=0.6.1), agnostic (>=0.1.18, <=0.2.0) +60 more potentially affected by unknown CVE via trust-dns-proto (0.23.2)

trust-dns-proto CARGO version 0.23.2 is affected by a known vulnerability. The following packages have a transitive dependency on trust-dns-proto and may be impacted: - actix-telepathy =0.5.4, =0.1.18, =0.23.0-alpha.2, =0.1.0, =0.5.0, =0.5.0, =0.5.0, =0.2.0, =0.4.2 and more Source cves: unknown C...

RUSTSEC-2025-0017 The `trust-dns` project has been rebranded to `hickory-dns`

The trust-dns-proto crate is now available as hickory-proto...

CVE-2025-30204 vulnerabilities

Vulnerabilities for packages: terraform, opentelemetry-operator, zot, aws-eks-pod-identity-agent, sigstore-scaffolding, kaniko, oauth2-proxy, kyverno-policy-reporter-ui, tekton-chains, prometheus, argocd-image-updater, flux, k3s, step-kms-plugin, fulcio, kube-metrics-adapter, git-sync,...

GHSA-MH63-6H87-95CP vulnerabilities

Vulnerabilities for packages: terraform, opentelemetry-operator, zot, aws-eks-pod-identity-agent, sigstore-scaffolding, kaniko, oauth2-proxy, kyverno-policy-reporter-ui, tekton-chains, prometheus, argocd-image-updater, flux, k3s, step-kms-plugin, fulcio, kube-metrics-adapter, git-sync,...

CLSA-2025-1742661734 openssh: Fix of CVE-2025-26465

CVE-2025-26465: fix vulnerability in OpenSSH when the VerifyHostKeyDNS option is enabled...

D-Link DIR-605L和D-Link DIR-618 安全漏洞

The D-Link DIR-605L and D-Link DIR-618 are both a wireless router from China-based AUO D-Link. An Access Control Error vulnerability exists in the D-Link DIR-618 version 2.02 and DIR-605L version 3.02, which stems from improper access control of the file /goform/formSetDDNS, and can be exploited ...

CLSA-2025-1742380145 openssh: Fix of CVE-2025-26465

CVE-2025-26465: fix vulnerability in OpenSSH when the VerifyHostKeyDNS option is enabled...

RockyLinux 9 : python-dns (RLSA-2024:9423)

The remote RockyLinux 9 host has a package installed that is affected by a vulnerability as referenced in the RLSA-2024:9423 advisory. dnspython: denial of service in stub resolver CVE-2023-29483 Tenable has extracted the preceding description block directly from the RockyLinux security advisory...