AZL-56478 CVE-2025-0167 affecting package curl for versions less than 8.8.0-6

When asked to use a .netrc file for credentials and to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances. This flaw only manifests itself if the netrc file has a default entry that omits both login and password. A rare...

CVE-2025-0167 netrc and default credential leak

When asked to use a .netrc file for credentials and to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances. This flaw only manifests itself if the netrc file has a default entry that omits both login and password. A rare...

netrc and default credential leak

When asked to use a .netrc file for credentials and to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances. This flaw only manifests itself if the netrc file has a default entry that omits both login and password. A rare...

CVE-2024-51739

Combodo iTop is a simple, web based IT Service Management tool. Unauthenticated user can perform users enumeration, which can make it easier to bruteforce a valid account. As a fix the sentence displayed after resetting password no longer shows if the user exists or not. This fix is included in...

IBM Aspera Shares 安全漏洞

IBM Aspera Shares is a Web application from International Business Machines IBM. An input validation error vulnerability exists in IBM Aspera Shares, which stems from improper validation of the "Client-IP" header, and can be exploited by an attacker to spoof its IP address written to a log file...

CVE-2024-13062

An unintended entry point vulnerability has been identified in certain router models, which may allow for arbitrary command execution. Refer to the ' 01/02/2025 ASUS Router AiCloud vulnerability' section on the ASUS Security Advisory for more information...

CVE-2025-22475

creationtimestamp| type| source ---|---|--- 2025-02-04 03:16:10+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhd3r524672e 2025-02-04 06:13:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lhdfoqp3k72e 2025-02-04 06:21:46+00:00| seen|...

PT-2025-25812

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to the fixed version Description The issue is related to data races in the vxlan module of the Linux kernel. Specifically, the used and updated fields in the FDB entry structure can be accessed concurrently by...

CVE-2024-57968

creationtimestamp| type| source ---|---|--- 2025-02-03 19:16:04+00:00| seen| https://infosec.exchange/users/cve/statuses/113941555703677096 2025-02-03 20:16:45+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhced4xduj2e 2025-02-03 20:37:54+00:00| seen|...

Security update for openssh

This update for openssh fixes the following issues: CVE-2024-39894: Fixed timing attacks against echo-off password entry bsc1227318 CVE-2024-6387: Fixed race condition in a signal handler bsc1226642. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods lik...

SUSE-SU-2025:20009-1 Security update for openssh

This update for openssh fixes the following issues: - CVE-2024-39894: Fixed timing attacks against echo-off password entry bsc1227318 - CVE-2024-6387: Fixed race condition in a signal handler bsc1226642...

Casio and 16 Other Websites Hit by Double-Entry Web Skimming Attack

Researchers uncover a double-entry website skimming attack targeting Casio and 16 other sites. Learn how cybercriminals exploited vulnerabilities to steal sensitive payment data and evade detection...

CGA-H792-6GWP-GQV4

Bulletin has no description...

CVE-2025-24506

Broadcom Symantec Privileged Access Management (PAM) is cited as affected by CVE-2025-24506. The connected PT-2025-5378 entry states: a specific authentication strategy allows learning the IDs of PAM users associated with certain authentication types, but it does not specify affected versions and...

CVE-2025-0743

creationtimestamp| type| source ---|---|--- 2025-01-30 12:16:02+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxhlvhjlw27 2025-01-30 14:15:55+00:00| seen| https://t.me/cvedetector/16759 2025-01-30 15:24:55+00:00| seen|...

ocfs2: uncache inode which has failed entering the group

...

CVE-2023-35017

creationtimestamp| type| source ---|---|--- 2025-01-29 00:09:20+00:00| seen| https://infosec.exchange/users/cve/statuses/113908735032933642 2025-01-29 00:15:24+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgtouectig2n 2025-01-29 01:10:00+00:00| seen|...

CVE-2024-45336

The HTTP client drops sensitive headers after following a cross-domain redirect. For example, a request to a.com/ containing an Authorization header which is redirected to b.com/ will not send that header to b.com. In the event that the client received a subsequent same-domain redirect, however,...

CVE-2024-45340

Credentials provided via the new GOAUTH feature were not being properly segmented by domain, allowing a malicious server to request credentials they should not have access to. By default, unless otherwise set, this only affected credentials stored in the users .netrc file...

The vulnerability of the radix__set_pte_at() function in the arch/powerpc/include/asm/book3s/64/radix.h file of the Linux operating system’s kernel allows a malicious actor to cause a service failure.

The vulnerability of the radixsetpteat function in the arch/powerpc/include/asm/book3s/64/radix.h component of the Linux operating system’s kernel involves an uncontrolled consumption of resources. Exploiting this vulnerability could allow a attacker to cause a service failure...