CVE-2025-9602 Xinhu RockOA index.php publicsaveAjax improper authorization

A vulnerability was found in Xinhu RockOA up to 2.6.9. Impacted is the function publicsaveAjax of the file /index.php. Performing manipulation results in improper authorization. The attack is possible to be carried out remotely. The exploit has been made public and could be used...

CVE-2025-9602 Xinhu RockOA index.php publicsaveAjax improper authorization

A vulnerability was found in Xinhu RockOA up to 2.6.9. Impacted is the function publicsaveAjax of the file /index.php. Performing manipulation results in improper authorization. The attack is possible to be carried out remotely. The exploit has been made public and could be used...

PT-2025-41787

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description The Linux kernel contains a flaw within the xfrm alloc spi function in the net/xfrm/xfrm state.c module. Specifically, the function incorrectly handles Security Parameter Index SPI...

Malicious code in tronwebwpy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c27676f6a6e649c59ad385440b50b50e0a2506b1d5795da736ce5ce10ecb5217 Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...

MAL-2025-47780 Malicious code in kraken-virus (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 253e231b0e3766eaed4ed178b3116a95c315877e381674a339d0a8b217936ca3 As even described, the package contains a malicious code collecting large amount of data. The description suggests educational use, yet, the code can cause rea...

Malicious code in kraken-virus (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 253e231b0e3766eaed4ed178b3116a95c315877e381674a339d0a8b217936ca3 As even described, the package contains a malicious code collecting large amount of data. The description suggests educational use, yet, the code can cause rea...

Malicious code in krakenvirus (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 be8d805ccb8e7b1ab32ad3a831ff1de9fae755190610c88fed7e0460aee1349e As even described, the package contains a malicious code collecting large amount of data. The description suggests educational use, yet, the code can cause rea...

MAL-2025-47781 Malicious code in krakenvirus (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 be8d805ccb8e7b1ab32ad3a831ff1de9fae755190610c88fed7e0460aee1349e As even described, the package contains a malicious code collecting large amount of data. The description suggests educational use, yet, the code can cause rea...

Malicious code in iamenumerat (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 469c5e69f2b343a59f385bcbf2cbc4ff0fa7a0b0790a341b9bd07f3990c2ca84 Before creating the boto3 client, package exfiltrates user's credentials. Packages from the campaign are used as dependency in a GitHub project promising...

MAL-2025-47773 Malicious code in iamenumerat (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 469c5e69f2b343a59f385bcbf2cbc4ff0fa7a0b0790a341b9bd07f3990c2ca84 Before creating the boto3 client, package exfiltrates user's credentials. Packages from the campaign are used as dependency in a GitHub project promising...

CVE-2025-8067

A flaw was found in the Udisks daemon, where it allows unprivileged users to create loop devices using the D-BUS system. This is achieved via the loop device handler, which handles requests sent through the D-BUS interface. As two of the parameters of this handle, it receives the file descriptor...

AZL-73051 CVE-2025-8067 affecting package udisks2 2.9.4-6

A flaw was found in the Udisks daemon, where it allows unprivileged users to create loop devices using the D-BUS system. This is achieved via the loop device handler, which handles requests sent through the D-BUS interface. As two of the parameters of this handle, it receives the file descriptor...

DEBIAN-CVE-2025-8067

A flaw was found in the Udisks daemon, where it allows unprivileged users to create loop devices using the D-BUS system. This is achieved via the loop device handler, which handles requests sent through the D-BUS interface. As two of the parameters of this handle, it receives the file descriptor...

Contao discloses sensitive information in the front end search index

Impact Protected content elements that are rendered as fragments are indexed and become publicly available in the front end search. Patches Update to Contao 4.13.56, 5.3.38 or 5.6.1. Workarounds Disable the front end search. For more information If you have any questions or comments about this...

CVE-2025-8067

A flaw was found in the Udisks daemon, where it allows unprivileged users to create loop devices using the D-BUS system. This is achieved via the loop device handler, which handles requests sent through the D-BUS interface. As two of the parameters of this handle, it receives the file descriptor...

CVE-2025-8067 Udisks: out-of-bounds read in udisks daemon

A flaw was found in the Udisks daemon, where it allows unprivileged users to create loop devices using the D-BUS system. This is achieved via the loop device handler, which handles requests sent through the D-BUS interface. As two of the parameters of this handle, it receives the file descriptor...

CVE-2025-8067 Udisks: out-of-bounds read in udisks daemon

A flaw was found in the Udisks daemon, where it allows unprivileged users to create loop devices using the D-BUS system. This is achieved via the loop device handler, which handles requests sent through the D-BUS interface. As two of the parameters of this handle, it receives the file descriptor...

CVE-2025-8067

Summary: CVE-2025-8067 is an out-of-bounds read in the UDisks2 daemon via the D-Bus loop device handler, where a negative index is not validated. This can allow unprivileged users to crash the daemon or perform local privilege escalation by accessing files owned by privileged users. What’s affect...

CVE-2025-8067 Udisks: out-of-bounds read in udisks daemon

A flaw was found in the Udisks daemon, where it allows unprivileged users to create loop devices using the D-BUS system. This is achieved via the loop device handler, which handles requests sent through the D-BUS interface. As two of the parameters of this handle, it receives the file descriptor...

CVE-2025-8067

A flaw was found in the Udisks daemon, where it allows unprivileged users to create loop devices using the D-BUS system. This is achieved via the loop device handler, which handles requests sent through the D-BUS interface. As two of the parameters of this handle, it receives the file descriptor...