Debian dla-4305 : firefox-esr - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4305 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4305-1 [email protected]...

Debian dla-4304 : libcjson-dev - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4304 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4304-1 [email protected] https://www.debian.org/lts/security/...

CVE-2025-59475

Jenkins (versions 2.527 and earlier , and LTS 2.516.2 and earlier ) is vulnerable to a missing permission check in the authenticated user profile dropdown menu . This flaw allows attackers who lack Overall/Read permissions to obtain limited information about the Jenkins configuration, such as ide...

PT-2025-38151

Name of the Vulnerable Software and Affected Versions Jenkins versions 2.527 and earlier Jenkins LTS versions 2.516.2 and earlier Description Jenkins does not perform a permission check in the sidepanel of a page accessible to users lacking Overall/Read permission. This allows attackers without...

Malicious code in gtts-lts (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7cfb789704a149f7b741d0c68fcb8a32a1e189444ca36f97e435e59d04e073b8 During the execution, the package silently download and runs a JAR not related to the package job. At the time of analysis, the content was corrupted ---...

MAL-2025-191745 Malicious code in gtts-lts (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7cfb789704a149f7b741d0c68fcb8a32a1e189444ca36f97e435e59d04e073b8 During the execution, the package silently download and runs a JAR not related to the package job. At the time of analysis, the content was corrupted ---...

Debian dla-4300 : libapache2-mod-shib - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4300 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4300-1 [email protected] https://www.debian.org/lts/security/...

CVE-2025-10235

A flaw has been found in Scada-LTS up to 2.7.8.1. This issue affects some unknown processing of the file /reports.shtm of the component Reports Module. This manipulation of the argument Colour causes cross site scripting. The attack may be initiated remotely. The exploit has been published and ma...

CVE-2025-10234

A vulnerability was detected in Scada-LTS up to 2.7.8.1. This vulnerability affects unknown code of the file /datapointedit.shtm of the component Data Point Edit Module. The manipulation of the argument Text Renderer properties results in cross site scripting. The attack can be launched remotely...

USN-7744-1 qemu vulnerabilities

It was discovered that QEMU incorrectly handled certain virtio devices. A privileged guest attacker could use this issue to cause QEMU to crash, leading to a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. CVE-2024-3446 It was...

CVE-2025-10235

A flaw has been found in Scada-LTS up to 2.7.8.1. This issue affects some unknown processing of the file /reports.shtm of the component Reports Module. This manipulation of the argument Colour causes cross site scripting. The attack may be initiated remotely. The exploit has been published and ma...

CVE-2025-10235 Scada-LTS Reports reports.shtm cross site scripting

A flaw has been found in Scada-LTS up to 2.7.8.1. This issue affects some unknown processing of the file /reports.shtm of the component Reports Module. This manipulation of the argument Colour causes cross site scripting. The attack may be initiated remotely. The exploit has been published and ma...

CVE-2025-10235

CVE-2025-10235 affects Scada-LTS up to 2.7.8.1 in the Reports Module, via manipulation of the Colour argument in /reports.shtm that enables cross-site scripting. The attack can be initiated remotely and an exploit has been published. Remediation per sources: upgrade to Scada-LTS 2.7.8.2 or later;...

CVE-2025-10235 Scada-LTS Reports reports.shtm cross site scripting

A flaw has been found in Scada-LTS up to 2.7.8.1. This issue affects some unknown processing of the file /reports.shtm of the component Reports Module. This manipulation of the argument Colour causes cross site scripting. The attack may be initiated remotely. The exploit has been published and ma...

CVE-2025-10234

A vulnerability was detected in Scada-LTS up to 2.7.8.1. This vulnerability affects unknown code of the file /datapointedit.shtm of the component Data Point Edit Module. The manipulation of the argument Text Renderer properties results in cross site scripting. The attack can be launched remotely...

CVE-2025-10235: Improper Neutralization of Input During Web Page Generation

A flaw has been found in Scada-LTS up to 2.7.8.1. This issue affects some unknown processing of the file /reports.shtm of the component Reports Module. This manipulation of the argument Colour causes cross site scripting. The attack may be initiated remotely. The exploit has been published and ma...

Scada-LTS 代码注入漏洞

Scada-LTS is an open source, web-based, multi-platform solution from Scada-LTS Open Source. A code injection vulnerability exists in Scada-LTS version 2.7.8.1 and earlier, which stems from misuse of the parameter Text Renderer properties in the file /datapointedit.shtm, and could lead to a...

PT-2025-37107

Name of the Vulnerable Software and Affected Versions: Scada-LTS versions prior to 2.7.8.2 Description: A flaw exists in Scada-LTS’s Reports Module due to cross-site scripting. The issue stems from unknown processing of the file /reports.shtm and manipulation of the Colour argument. This...

Scada-LTS 代码注入漏洞

Scada-LTS is an open source, web-based, multi-platform solution from Scada-LTS Open Source. A code injection vulnerability exists in Scada-LTS version 2.7.8.1 and earlier, which stems from an incorrect manipulation of the parameter Colour in the file /reports.shtm, and could lead to a cross-site...

CVE-2025-10234: Improper Neutralization of Input During Web Page Generation

A vulnerability was detected in Scada-LTS up to 2.7.8.1. This vulnerability affects unknown code of the file /datapointedit.shtm of the component Data Point Edit Module. The manipulation of the argument Text Renderer properties results in cross site scripting. The attack can be launched remotely...