CVE-2025-55039 Apache Spark, Apache Spark: RPC encryption defaults to unauthenticated AES-CTR mode, enabling man-in-the-middle ciphertext modification attacks

This issue affects Apache Spark versions before 3.4.4, 3.5.2 and 4.0.0. Apache Spark versions before 4.0.0, 3.5.2 and 3.4.4 use an insecure default network encryption cipher for RPC communication between nodes. When spark.network.crypto.enabled is set to true it is set to false by default, but...

From Detection to Patch: Fortra Reveals Full Timeline of CVE-2025-10035 Exploitation

Fortra on Thursday revealed the results of its investigation into CVE-2025-10035, a critical security flaw in GoAnywhere Managed File Transfer MFT that's assessed to have come under active exploitation since at least September 11, 2025. The company said it began its investigation on September 11...

EUVD-2021-26120

Malware in sbrugna...

EUVD-2016-5327

Malware in sbrugna...

EUVD-2008-6666

Malware in sbrugna...

EUVD-2008-6668

Malware in sbrugna...

EUVD-2008-6667

Malware in sbrugna...

EUVD-2008-6669

Malware in sbrugna...

EUVD-2008-6536

Malware in sbrugna...

EUVD-2008-6537

Malware in sbrugna...

EUVD-2017-10300

Malware in sbrugna...

EUVD-2008-3763

Malware in sbrugna...

EUVD-2024-43269

Malicious code in bioql PyPI...

EUVD-2022-35196

Malicious code in bioql PyPI...

EUVD-2025-13004

Malicious code in bioql PyPI...

EUVD-2024-53762

Malicious code in bioql PyPI...

Do Not Install the Avahi Service

Avahi is a zero-configuration networking implementation, including a system for multicast DNS/DNS-SD service discovery and automatic broadcast. For example, you can connect a server to the network and use Avahi to automatically broadcast network services running on the server for other user to...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from not properly checking the probe enablement state, which could lead to a null pointer dereference...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from not checking if MSI-X/MSI is enabled, which could lead to a crash...

Security update for busybox, busybox-links

This update for busybox, busybox-links fixes the following issues: Updated to version 1.37.0 jscPED-13039: - CVE-2023-42363: Fixed use-after-free vulnerability in xasprintf function in xfuncsprintf.c bsc1217580 - CVE-2023-42364: Fixed use-after-free in the awk.c evaluate function bsc1217584 -...