Huawei EulerOS: Security Advisory for unbound (EulerOS-SA-2025-2218)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GHSA-47M2-4CR7-MHCW vulnerabilities

Vulnerabilities for packages: kargo, spegel, traefik, ipfs-cluster, dkron, k3s, kyverno-policy-reporter-ui, kubernetes-dns-node-cache, kubo, frp, q, k8sgateway, caddy...

CVE-2025-59530 vulnerabilities

Vulnerabilities for packages: kargo, spegel, traefik, ipfs-cluster, dkron, k3s, kyverno-policy-reporter-ui, kubernetes-dns-node-cache, kubo, frp, q, k8sgateway, caddy...

GHSA-47M2-4CR7-MHCW vulnerabilities

Vulnerabilities for packages: k3s, kubo-fips, traefik, spegel-fips, k8sgateway-fips, q, rke2-runtime, kubo, ipfs-cluster, kargo, spegel, syncthing, frp, k8sgateway, syncthing-fips, teleport, ipfs-cluster-fips, kyverno-policy-reporter-ui-fips, caddy, eks-distro-fips, kubernetes-dns-node-cache-fips...

CVE-2025-59530 vulnerabilities

Vulnerabilities for packages: k3s, kubo-fips, traefik, spegel-fips, k8sgateway-fips, q, rke2-runtime, kubo, ipfs-cluster, kargo, spegel, syncthing, frp, k8sgateway, syncthing-fips, teleport, ipfs-cluster-fips, kyverno-policy-reporter-ui-fips, caddy, eks-distro-fips, kubernetes-dns-node-cache-fips...

EulerOS 2.0 SP11 : gdb (EulerOS-SA-2025-2222)

According to the versions of the gdb packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function bfddwarf2findnearestlinewithalt at...

EulerOS 2.0 SP11 : unbound (EulerOS-SA-2025-2218)

According to the versions of the unbound packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A multi-vendor cache poisoning vulnerability named 'Rebirthday Attack' has been discovered in caching resolvers that support EDNS Client Subnet...

CVE-2017-20203

NetSarang Xmanager Enterprise 5.0 Build 1232, Xmanager 5.0 Build 1045, Xshell 5.0 Build 1322, Xftp 5.0 Build 1218, and Xlpd 5.0 Build 1220 contain a malicious nssock2.dll that implements a multi-stage, DNS-based backdoor. The dormant library contacts a C2 DNS server via a specially crafted TXT...

RockyLinux 9 : aardvark-dns (RLSA-2025:7094)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:7094 advisory. containers/aardvark-dns: TCP Query Handling Flaw in Aardvark-dns Leading to Denial of Service CVE-2024-8418 Tenable has extracted the preceding description block...

EUVD-2017-18919

NetSarang Xmanager Enterprise 5.0 Build 1232, Xmanager 5.0 Build 1045, Xshell 5.0 Build 1322, Xftp 5.0 Build 1218, and Xlpd 5.0 Build 1220 contain a malicious nssock2.dll that implements a multi-stage, DNS-based backdoor. The dormant library contacts a C2 DNS server via a specially crafted TXT...

CVE-2017-20203

NetSarang Xmanager Enterprise 5.0 Build 1232, Xmanager 5.0 Build 1045, Xshell 5.0 Build 1322, Xftp 5.0 Build 1218, and Xlpd 5.0 Build 1220 contain a malicious nssock2.dll that implements a multi-stage, DNS-based backdoor. The dormant library contacts a C2 DNS server via a specially crafted TXT...

CVE-2017-20203 NetSarang v5.0 Malicious Backdoor Supply Chain Compromise

NetSarang Xmanager Enterprise 5.0 Build 1232, Xmanager 5.0 Build 1045, Xshell 5.0 Build 1322, Xftp 5.0 Build 1218, and Xlpd 5.0 Build 1220 contain a malicious nssock2.dll that implements a multi-stage, DNS-based backdoor. The dormant library contacts a C2 DNS server via a specially crafted TXT...

CVE-2017-20203 NetSarang v5.0 Malicious Backdoor Supply Chain Compromise

NetSarang Xmanager Enterprise 5.0 Build 1232, Xmanager 5.0 Build 1045, Xshell 5.0 Build 1322, Xftp 5.0 Build 1218, and Xlpd 5.0 Build 1220 contain a malicious nssock2.dll that implements a multi-stage, DNS-based backdoor. The dormant library contacts a C2 DNS server via a specially crafted TXT...

PT-2025-41412

NetSarang Xmanager Enterprise 5.0 Build 1232, Xmanager 5.0 Build 1045, Xshell 5.0 Build 1322, Xftp 5.0 Build 1218, and Xlpd 5.0 Build 1220 contain a malicious nssock2.dll that implements a multi-stage, DNS-based backdoor. The dormant library contacts a C2 DNS server via a specially crafted TXT...

PT-2025-41326

Name of the Vulnerable Software and Affected Versions Tenda AC7 version 15.03.06.44 Description A stack-based buffer overflow exists in Tenda AC7 routers due to improper processing of the ddnsEn argument within the /goform/SetDDNSCfg file. This manipulation allows for remote code execution. The...

NetSarang多款产品 安全漏洞

NetSarang Xshell and others are products of NetSarang, Inc. of the U.S.A. NetSarang Xshell is NetSarang Xmanager is a powerful and convenient PC X server software package.NetSarang XLPD is a remote printing tool. A security vulnerability exists in several NetSarang products that stems from a...

RockyLinux 9 : avahi (RLSA-2025:7437)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:7437 advisory. avahi: Avahi Wide-Area DNS Predictable Transaction IDs CVE-2024-52616 Tenable has extracted the preceding description block directly from the RockyLinux security...

CVE-2025-59159

SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speech voice models. In versions prior to 1.13.4, the web user interface for SillyTavern is susceptible to DNS rebinding, allowing...

CVE-2025-11328

A vulnerability was detected in Tenda AC18 15.03.05.196318. This issue affects some unknown processing of the file /goform/SetDDNSCfg. The manipulation of the argument ddnsEn results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit is now public and may be...

MLFlow server is exposed to data exfiltration and destruction due to lack of Origin validation

The MLFlow REST server is vulnerable to DNS rebinding attacks, allowing malicious websites to bypass Same-Origin Policy protections and execute unauthorized calls against REST endpoints. Once rebinding is successful, the attacker can: Query for experiments via the 2.0/mlflow/experiments/search...