[SECURITY] [DSA 6037-1] openjdk-21 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6037-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 24, 2025 https://www.debian.org/security/faq -...

CVE-2025-46425

Dell Storage Center - Dell Storage Manager, versions 20.1.20, contains an Improper Restriction of XML External Entity Reference vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access...

CVE-2025-46425

Dell Storage Center - Dell Storage Manager, versions 20.1.20, contains an Improper Restriction of XML External Entity Reference vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access...

EUVD-2025-35854

Dell Storage Center - Dell Storage Manager, versions 20.1.20, contains an Improper Restriction of XML External Entity Reference vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access...

CVE-2025-46425

The CVE-2025-46425 entry concerns Dell Storage Manager (Dell Storage Center) with version 20.1.20, where an XML External Entity (XXE) vulnerability arises from improper restriction of external entities. Root cause: XML processing flaw in the affected component allows a low-privilege, remote attac...

CVE-2025-46425

Dell Storage Center - Dell Storage Manager, versions 20.1.20, contains an Improper Restriction of XML External Entity Reference vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access...

CVE-2025-46425

Dell Storage Center - Dell Storage Manager, versions 20.1.20, contains an Improper Restriction of XML External Entity Reference vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access...

Exploit for Improper Input Validation in Atlassian Confluence_Data_Center

LetsDefend-SOC235-Atlassian-Confluence-Broken-Access-Control-0...

Malicious code in discord-utils-enhanced (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 678d1a77a40407ca303a4cb46ec3bafa609ffa4d3e354eac59e799a499fb4b68 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48584 Malicious code in tailwind-magic (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c44f5a090a9395704332bdcdb8d6cdeb4f73b208b4c55bd59d7b8d67325fd08 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48572 Malicious code in mender-configure-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e954036412bb11454b4f5fb99bb6ac9b672d9b5542bdbaf870a9a0e20b444d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

D-Link DIR600L 安全漏洞

D-Link DIR600L is a wireless router for home users, belonging to D-Link's "Cloud Router" series, with an external antenna design, supporting 802.11n standard, with a maximum wireless transmission rate of 150Mbps. The D-Link DIR600L suffers from a buffer overflow vulnerability, which originates fr...

Debian dsa-6037 : openjdk-21-dbg - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6037 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6037-1 [email protected] https://www.debian.org/securit...

Dell Storage Manager和Dell Storage Center 代码问题漏洞

Dell Storage Manager is a centralized storage management tool from Dell that is used to manage storage devices such as SC Series, PS Series and FluidFS, providing unified monitoring, configuration and replication capabilities. An XML External Entity Reference Improper Restriction vulnerability...

PT-2025-43626

Name of the Vulnerable Software and Affected Versions Dell Storage Manager version 20.1.20 Description Dell Storage Manager contains an Improper Restriction of XML External Entity Reference issue. A low-privileged attacker with remote access could potentially exploit this, leading to unauthorized...

Light & Wonder Deck Mate 安全漏洞

Light & Wonder Deck Mate is an automated licensing device from Light & Wonder, UK. A security vulnerability exists in the Light & Wonder Deck Mate that originates from executing firmware directly from an external EEPROM without verifying authenticity or integrity, which could lead a physically...

PT-2025-43689

Name of the Vulnerable Software and Affected Versions Deck Mate 1 affected versions not specified Description Deck Mate 1 executes firmware directly from an external EEPROM without verifying its authenticity or integrity. An attacker with physical access can replace or reflash the EEPROM to execu...

Security Bulletin: multiple vulerability in IBM Spectrum Symphony with IBM WebSphere Application Server Liberty

Summary multiple vulerability in IBM Spectrum Symphony with IBM WebSphere Application Server Liberty Vulnerability Details CVEID:CVE-2023-50312 DESCRIPTION: IBM WebSphere Application Server Liberty 17.0.0.3 through 24.0.0.2 could provide weaker than expected security for outbound TLS connections...

CVE-2025-22172

Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able to read external reports without the required permission...

GO-2025-3982 Rancher sends sensitive information to external services through the `/meta/proxy` endpoint in github.com/rancher/rancher

Rancher sends sensitive information to external services through the /meta/proxy endpoint in github.com/rancher/rancher. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive...