Debian dla-4402 : libsndfile1 - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4402 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4402-1 [email protected] https://www.debian.org/lts/security/...

GHSA-HXJG-2JVF-H3RX Jenkins's build authorization token is stored and displayed in plain text

Jenkins 2.540 and earlier, LTS 2.528.2 and earlier does not mask build authorization tokens displayed on the job configuration form, increasing the potential for attackers to observe and capture them...

CVE-2025-67639

A cross-site request forgery CSRF vulnerability in Jenkins 2.540 and earlier, LTS 2.528.2 and earlier allows attackers to trick users into logging in to the attacker's account...

CVE-2025-67639

A cross-site request forgery CSRF vulnerability in Jenkins 2.540 and earlier, LTS 2.528.2 and earlier allows attackers to trick users into logging in to the attacker's account...

Jenkins 安全漏洞

Jenkins is a Jenkins open source application. An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project. A security vulnerability exists in Jenkins 2.540 and earlier and LTS 2.528.2 and earlier, which stems from an unmasked bui...

Trend Vision One™ Stacks Up Against Scattered Spider and Mustang Panda in 2025 MITRE ATT&CK® Evaluations

Enterprise 2025 introduces the first full cloud adversary emulation and expanded multi-platform testing, focusing on two advanced threat areas: Scattered Spider’s cloud-centric attacks and Mustang Panda’s long-term espionage operations...

Microsoft Word 资源管理错误漏洞

Microsoft Word is a word processing software in the Office suite of the U.S. company Microsoft Microsoft. A code execution vulnerability exists in Microsoft Word. An attacker could exploit this vulnerability to execute arbitrary code on a system...

CISA Reports PRC Hackers Using BRICKSTORM for Long-Term Access in U.S. Systems

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Thursday released details of a backdoor named BRICKSTORM that has been put to use by state-sponsored threat actors from the People's Republic of China PRC to maintain long-term persistence on compromised systems. "BRICKSTORM is a...

PRC State-Sponsored Actors Use BRICKSTORM Malware Across Public Sector and Information Technology Systems

The Cybersecurity and Infrastructure Security Agency CISA is aware of ongoing intrusions by People’s Republic of China PRC state-sponsored cyber actors using BRICKSTORM malware for long-term persistence on victim systems. BRICKSTORM is a sophisticated backdoor for VMware vSphere1,2 and Windows...

Debian dla-4389 : libtorch-dev - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4389 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4389-1 [email protected] https://www.debian.org/lts/security/...

Security update for cups

This update for cups fixes the following issues: CVE-2025-61915: Fixed local denial-of-service via cupsd.conf update bsc1253783 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the...

[SECURITY] [DLA 4378-1] r-cran-gh security update

Debian LTS Advisory DLA-4378-1 [email protected] https://www.debian.org/lts/security/ Daniel Leidert November 25, 2025 https://wiki.debian.org/LTS Package : r-cran-gh Version : 1.2.0-1+deb11u1 CVE ID : CVE-2025-54956 Debian Bug : 1110481 A vulnerability has been discovered in r-cran-gh,...

Debian dla-4378 : r-cran-gh - security update

The remote Debian 11 host has a package installed that is affected by a vulnerability as referenced in the dla-4378 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4378-1 [email protected] https://www.debian.org/lts/security/...

Debian dla-4382 : libsdl2-2.0-0 - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4382 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4382-1 [email protected] https://www.debian.org/lts/security/...

Debian dla-4380 : cups-browsed - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4380 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4380-1 [email protected]...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.04 / 25.10 : Freeglut vulnerabilities (USN-7870-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.04 / 25.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7870-1 advisory. It was discovered that Freeglut incorrectly managed memory, resulting in a...

CVE-2025-25216

Improper input validation in some firmware for some IntelR Graphics Drivers and Intel LTS kernels within Ring 1: Device Drivers may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result...

EUVD-2025-93508

Improper input validation in some firmware for some IntelR Graphics Drivers and Intel LTS kernels within Ring 1: Device Drivers may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result...

[SECURITY] [DLA 4366-1] swift update

Debian LTS Advisory DLA-4366-1 [email protected] https://www.debian.org/lts/security/ Carlos Henrique Lima Melara November 07, 2025 https://wiki.debian.org/LTS Package : swift Version : 2.26.0-10+deb11u2 CVE ID : Debian Bug : 1120057 Swift, an object storage service, requires an update ...

magento-lts 安全漏洞

magento-lts is an OpenMage open source reliable replacement for the official version of Magento CE. A security vulnerability exists in magento-lts version 20.15.0 and earlier, which stems from unescaped translation strings and URLs being printed to a specific context, potentially leading to a...