Security update for the Linux Kernel

This update provides the initial livepatch for this kernel update. This update does not contain any fixes and will be updated with livepatches later. Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this SUSE update use the SUSE...

Malicious code in @malware-test-later-pupas-moxas-merls/test-mlw3-later-pupas-moxas-merls (npm)

The package @malware-test-later-pupas-moxas-merls/test-mlw3-later-pupas-moxas-merls was found to contain malicious code...

Apple Security Update: iOS 18.6.1

Apple recommends to install security update iOS 18.6.1 on devices iPhone XS and later...

PT-2025-33228 · WordPress · Yith Woocommerce Popup

Name of the Vulnerable Software and Affected Versions: YITH WooCommerce Popup versions through 1.48.0 Description: A Cross-Site Request Forgery CSRF issue exists in YITH WooCommerce Popup, potentially allowing attackers to perform actions on behalf of authenticated users. Recommendations: Update...

PT-2025-33369 · Unknown · Kodeshpa Simplified

Name of the Vulnerable Software and Affected Versions: kodeshpa Simplified versions n/a through 1.0.9 Description: A Server-Side Request Forgery SSRF vulnerability exists in kodeshpa Simplified. This issue allows for Server Side Request Forgery. Recommendations: Update kodeshpa Simplified to a...

PT-2025-33345 · Netbula +1 · Nebula +1

Name of the Vulnerable Software and Affected Versions: Malwarebytes versions 4.6.14.326 through 5.1.5.116 Nebula versions 2020-10-21 and later Description: A stack buffer out-of-bounds access issue exists due to an integer underflow when handling newline characters. Recommendations: Update...

PT-2025-33160 · Unknown · Idonatepro

Name of the Vulnerable Software and Affected Versions: IDonatePro versions through 2.1.9 Description: IDonatePro is susceptible to a PHP Local File Inclusion due to improper control of filename for include/require statements. This allows for the inclusion of local files. Recommendations: Update...

PT-2025-32761 · Adobe · Illustrator

Name of the Vulnerable Software and Affected Versions: Illustrator versions 28.7.8 and earlier Illustrator version 29.6.1 and earlier Description: Illustrator is susceptible to an out-of-bounds write issue, potentially leading to arbitrary code execution with the privileges of the current user...

PT-2025-32906 · Adobe · Substance3D - Painter

Name of the Vulnerable Software and Affected Versions: Substance3D - Painter versions 11.0.2 and earlier Description: Substance3D - Painter versions 11.0.2 and earlier are affected by an out-of-bounds read issue that may lead to the disclosure of sensitive memory. Exploitation of this issue...

CLSA-2025-1754940262 Fix CVE(s): CVE-2024-46901

SECURITY UPDATE: Insufficient validation of filenames against control characters in repositories served via moddavsvn - debian/patches/CVE-2024-46901.patch: fix moddavsvn denial-of-service via control characters in paths...

PT-2025-32505 · Unknown · Openharmony

Name of the Vulnerable Software and Affected Versions: OpenHarmony versions prior to 5.0.4 Description: The software contains a use-after-free flaw in the trusted computing base tcb component that could allow a local attacker to execute arbitrary code. Recommendations: Update to version 5.0.4 or...

Linux Distros Unpatched Vulnerability : CVE-2019-12474

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Wikimedia MediaWiki 1.23.0 through 1.32.1 has an information leak. Privileged API responses that include whether a recent change has been patrolled may be cache...

PT-2025-32566

Name of the Vulnerable Software and Affected Versions: ABB Aspect versions prior to 3.08.04-s01 Description: A vulnerability exists in ABB Aspect. Recommendations: Update to version 3.08.04-s01 or later...

PT-2025-32420

Name of the Vulnerable Software and Affected Versions Fedify versions prior to 1.3.20 Fedify versions 1.4.0-dev.585 through 1.4.12 Fedify versions 1.5.0-dev.636 through 1.5.4 Fedify versions 1.6.0-dev.754 through 1.6.7 Fedify versions 1.7.0-pr.251.885 through 1.7.8 Fedify versions 1.8.0-dev.909...

AZL-65073 CVE-2025-27613 affecting package git for versions less than 2.40.4-2

Gitk is a Tcl/Tk based Git history browser. Starting with 1.7.0, when a user clones an untrusted repository and runs gitk without additional command arguments, files for which the user has write permission can be created and truncated. The option Support per-file encoding must have been enabled...

BIT-PYTHON-MIN-2024-12718 Bypass extraction filter to modify file metadata outside extraction directory

Allows modifying some file metadata e.g. last modified with filter="data" or file permissions chmod with filter="tar" of files outside the extraction directory. You are affected by this vulnerability if using the tarfile module to extract untrusted tar archives using TarFile.extractall or...

DEBIAN-CVE-2022-50177

In the Linux kernel, the following vulnerability has been resolved: rcutorture: Fix ksoftirqd boosting timing and iteration The RCU priority boosting can fail in two situations: 1 If nrcpus= maxcpus=, which means if the total number of CPUs is higher than those brought online at boot, then...

Microsoft Office Multiple Remote Code Execution Vulnerabilities (Jun 2025) - Mac OS X

This host is missing an important security update for Microsoft Office on Mac OSX according to Microsoft security update June 2025 SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

CVE-2025-30279

An improper certificate validation vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the following version: File Station ...

CVE-2025-4330

Allows the extraction filter to be ignored, allowing symlink targets to point outside the destination directory, and the modification of some file metadata. You are affected by this vulnerability if using the tarfile module to extract untrusted tar archives using TarFile.extractall or...