2554 matches found
Linux Distros Unpatched Vulnerability : CVE-2020-13327
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab Runner affecting all versions starting from 13.4.0 before 13.4.2, all versions starting from 13.3.0 before 13.3.7, all...
DELL CloudLink XML External Entity References Improperly Restricted Vulnerability
DELL CloudLink is a data encryption and key management solution from Dell that is targeted at enterprise-level users and supports public, private and hybrid cloud environments. DELL CloudLink suffers from an improperly restricted XML external entity reference vulnerability that can be exploited b...
Schneider Electric EcoStruxure Power Monitoring ExpertåSchneider Electric EcoStruxure Power Operation č·Æå¾éåę¼ę“
Schneider Electric EcoStruxure Power Monitoring Expert and Schneider Electric EcoStruxure Power Operation Schneider Electric EPO are both products of the French company Schneider Electric Schneider Electric EcoStruxure Power Monitoring Expert is an appliance for power distribution monitoring in I...
[SECURITY] Fedora 41 Update: apptainer-1.4.2-1.fc41
Apptainer provides functionality to make portable containers that can be used across host environments...
Fortifying the Agentic Web: a Unified Zero-Trust Architecture against Logic-Layer Threats
This paper presents a Unified Security Architecture that fortifies the Agentic Web through a Zero-Trust IAM framework. This architecture is built on a foundation of rich, verifiable agent identities using Decentralized Identifiers DIDs and Verifiable Credentials VCs, with discovery managed by a...
GHSA-WX3R-HH3W-28WG vulnerabilities
Vulnerabilities for packages: openjdk-8-openj9, openjdk-11-openj9, openjdk-21-openj9, openjdk, openjdk-17-openj9, openjdk-26-openj9, openjdk-25-openj9...
Have You Turned Off Your Virtual Oven?
You check that the windows are shut before leaving home. Return to the kitchen to verify that the oven and stove were definitely turned off. Maybe even circle back again to confirm the front door was properly closed. These automatic safety checks give you peace of mind because you know the unlike...
Dell CloudLink 代ē é®é¢ę¼ę“
DELL CloudLink is a data encryption and key management solution from Dell that is targeted at enterprise-level users and supports public, private and hybrid cloud environments. DELL CloudLink suffers from an improperly restricted XML external entity reference vulnerability that can be exploited b...
BIT-LIBPYTHON-2024-9287 Virtual environment (venv) activation scripts don't quote paths
A vulnerability has been found in the CPython venv module and CLI where path names provided when creating a virtual environment were not quoted properly, allowing the creator to inject commands into virtual environment "activation" scripts ie "source venv/bin/activate". This means that...
From Cloud to Hybrid: 360Ā° Runtime Protection, Anywhere You Run
Wiz Sensor Workload Scanner brings runtime visibility and context to hybrid environmentsācloud, on-prem, and edgeāall in a single platform...
How to Eliminate Deployment Bottlenecks Without Sacrificing Application Security
Today, organizations increasingly rely on DevOps to accelerate software delivery, improve operational efficiency, and enhance business performance. According to RedGate, 74% have adopted DevOps, and according to Harvard Business Review Analytics, 77% of organizations currently depend on DevOps to...
PhishParrot: LLM-Driven Adaptive Crawling to Unveil Cloaked Phishing Sites
Phishing attacks continue to evolve, with cloaking techniques posing a significant challenge to detection efforts. Cloaking allows attackers to display phishing sites only to specific users while presenting legitimate pages to security crawlers, rendering traditional detection systems ineffective...
PT-2025-31845 Ā· Nvidia Ā· Nvidia Triton Inference Server
Name of the Vulnerable Software and Affected Versions: NVIDIA Triton Inference Server versions prior to 25.07 Description: NVIDIA Triton Inference Server contains a vulnerability in the Python backend that allows an attacker to cause an out-of-bounds write by sending a specially crafted request...
PT-2025-31742 Ā· Undefined Ā· Undefined
š„ Urgent Kubernetes Patch Alert! CVE-2025-02350-2 allows host-level breaches in SUSE environments. ā Step-by-step hardening guide + real-world case study. Read more:š https://t.co/6fS6OlKnna https://t.co/WvXf5cXWCi...
Docker Engine < 25.0.13 / 26.0 < 28.0.0 Network Isolation Failure
The version of the Docker Engine Moby installed on the remote host is prior to 23.0.15 or 28.0.0. When firewalld reloads, Docker fails to re-create iptables rules that isolate bridge networks, allowing any container to access all ports on any other container across different bridge networks on th...
CVE-2025-54410
Moby is an open source container framework developed by Docker Inc. that is distributed as Docker Engine, Mirantis Container Runtime, and various other downstream projects/products. A firewalld vulnerability affects Moby releases before 28.0.0. When firewalld reloads, Docker fails to re-create...
setuptools: Path Traversal Vulnerability in setuptools PackageIndex
A path traversal vulnerability in the Python setuptools library allows attackers with limited system access to write files outside the intended temporary directory by manipulating package download URLs. This flaw bypasses basic filename sanitization and can lead to unauthorized overwrites of...
PT-2025-31139 Ā· Undefined Ā· Undefined
URGENT: Patch QEMU now! CVE-2025-02530 CVSS 8.2 allows guest-to-host privilege escalation in @SUSE Linux. Impact: Cloud/hybrid environments Fix: zypper patch + config hardening Read more:š https://t.co/3PoKQoeDEU infosec SUSE https://t.co/kSt4wekVWd...
Testbed and Software Architecture for Enhancing Security in Industrial Private 5G Networks
In the era of Industry 4.0, the growing need for secure and efficient communication systems has driven the development of fifth-generation 5G networks characterized by extremely low latency, massive device connectivity and high data transfer speeds. However, the deployment of 5G networks presents...
PT-2025-30887 Ā· Silicon Ā· Openthread Rcp
Name of the Vulnerable Software and Affected Versions: Silicon Labs OpenThread RCP affected versions not specified Description: In high traffic environments, the RCP fails to clear the SPI transmit buffer, potentially sending a corrupt packet over SPI to its host. This can cause the host to reset...