New Ransomware Charon Uses Earth Baxia APT Techniques to Target Enterprises

We uncovered Charon, a new ransomware strainfamily that uses advanced APT-style techniques, including DLL sideloading, process injection, and anti-EDR capabilities, to target organizations with customized ransom demands...

Linux Distros Unpatched Vulnerability : CVE-2022-49783

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - x86/fpu: Drop fpregs lock before inheriting FPU permissions Mike Galbraith reported the following against an old fork of preempt-rt but the same issue also...

New Ransomware Charon Uses Earth Baxia APT Techniques To Target Enterprises

We uncovered Charon, a new ransomware strainfamily that uses advanced APT-style techniques, including DLL sideloading, process injection, and anti-EDR capabilities, to target organizations with customized ransom demands...

PT-2025-32647

Name of the Vulnerable Software and Affected Versions Siemens Web Installer affected versions not specified Description The setup component is vulnerable to DLL hijacking, a technique where an application is tricked into loading a malicious dynamic-link library DLL instead of the intended one. Th...

Intel RealSense Dynamic Calibrator 代码问题漏洞

Intel RealSense Dynamic Calibrator is a software for optimizing and fine-tuning the depth and image quality of a camera from Intel Corporation USA. A code issue vulnerability exists in Intel RealSense Dynamic Calibrator versions prior to 2.14.2.0, which stems from an uncontrolled search path that...

PT-2025-32715 · Intel · Intel Realsense Dynamic Calibration

Name of the Vulnerable Software and Affected Versions: IntelR RealSenseTM Dynamic Calibrator versions prior to 2.14.2.0 Description: An uncontrolled search path issue exists in some IntelR RealSenseTM Dynamic Calibrator software. An authenticated user may be able to escalate privileges via local...

BIT-LIBPYTHON-2020-8315

In Python CPython 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8 through 3.8.1, an insecure dependency load upon launch on Windows 7 may result in an attacker's copy of api-ms-win-core-path-l1-1-0.dll being loaded and used instead of the system's copy. Windows 8 and later are unaffected...

BIT-LIBPYTHON-2020-15523

In Python 3.6 through 3.6.10, 3.7 through 3.7.8, 3.8 through 3.8.4, and 3.9 through 3.9.0 on Windows, a Trojan horse python3.dll might be used in cases where CPython is embedded in a native application. This occurs because python3X.dll may use an invalid search path for python3.dll loading after...

Linux Distros Unpatched Vulnerability : CVE-2025-52889

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incus is a system container and virtual machine manager. When using an ACL on a device connected to a bridge, Incus version 6.12 and 6.13 generates nftables rul...

Obfuscated Quantum and Post-Quantum Cryptography

In this work, we present an experimental deployment of a new design for combined quantum key distribution QKD and post-quantum cryptography PQC. Novel to our system is the dynamic obfuscation of the QKD-PQC sequence of operations, the number of operations, and parameters related to the operations...

Linux Distros Unpatched Vulnerability : CVE-2024-26738

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries/iommu: DLPAR add doesn't completely initialize pcicontroller When a PCI devi...

Linux Distros Unpatched Vulnerability : CVE-2025-38076

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: alloctag: allocate percpu counters for module tags dynamically When a module gets unloaded i...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: contour, yunikorn-k8shim, kubescape-operator-fips, seaweedfs, loki-fips, kubernetes-csi-external-provisioner-fips, kubescape, otel-cli, external-dns-fips, kubernetes-dashboard-metrics-scraper-fips, tigera-operator, rekor-fips, overmind, flux-helm-controller-fips,...

Linux Distros Unpatched Vulnerability : CVE-2022-49892

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ftrace: Fix use-after-free for dynamic ftraceops KASAN reported a use-after-free with ftrace ops 1. It was found from vmcore that perf had registered two ops wi...

The vulnerability of the cw_stad demon in FortiOS operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the cwstad module in FortiOS operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code...

Linux Distros Unpatched Vulnerability : CVE-2025-38280

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Avoid bpfprogret0warn when jit fails syzkaller reported an issue: WARNING: CPU: 3 PID: 217 at kernel/bpf/core.c:2357 bpfprogret0warn+0xa/0x20...

Linux Distros Unpatched Vulnerability : CVE-2024-56695

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Use dynamic allocation for CU occupancy array in 'kfdgetcuoccupancy' The...

Linux Distros Unpatched Vulnerability : CVE-2025-38041

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - clk: sunxi-ng: h616: Reparent GPU clock during frequency changes The H616 manual does not state that the GPU PLL supports dynamic frequency configuration, so we...

kernel: powerpc: Fix access beyond end of drmem array

A flaw was found in the Linux kernel, specifically affecting the PowerPC architecture's pseries memory hotplug functionality. The issue arises from the dlparmemoryremovebyindex function, which may access memory beyond the bounds of the drmem logical memory block LMB array when it fails to find a...

Brave Desktop 1.81.131 Security Fixes

Added clickjacking protection on DDNS interstitials as reported on HackerOne by newfunction. - Fixed inactive split view tab displaying a permission prompt as reported on HackerOne by frozzipies. Upgraded Chromium to 139.0.7258.66 — refer to Google Chrome advisories for inherited CVEs...