GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: terraform-provider-kubernetes, capslock, guac, ferretdb, azure-ipam, go-licenses, secrets-store-csi-driver-provider-gcp, kubescape-operator, maru, certificate-transparency, helm-mapkubeapis, cluster-api-gcp-controller, neuvector-dbgen, shfmt, conjur-cli, spqr,...

GHSA-HJX7-FPXX-MJ48 vulnerabilities

Vulnerabilities for packages: terraform-provider-kubernetes, capslock, guac, ferretdb, azure-ipam, go-licenses, secrets-store-csi-driver-provider-gcp, kubescape-operator, maru, certificate-transparency, helm-mapkubeapis, cluster-api-gcp-controller, neuvector-dbgen, shfmt, conjur-cli, spqr,...

CVE-2025-47912 vulnerabilities

Vulnerabilities for packages: terraform-provider-kubernetes, capslock, guac, ferretdb, azure-ipam, go-licenses, secrets-store-csi-driver-provider-gcp, kubescape-operator, maru, certificate-transparency, helm-mapkubeapis, cluster-api-gcp-controller, neuvector-dbgen, shfmt, conjur-cli, spqr,...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: terraform-provider-kubernetes, capslock, guac, ferretdb, azure-ipam, go-licenses, secrets-store-csi-driver-provider-gcp, kubescape-operator, maru, certificate-transparency, helm-mapkubeapis, cluster-api-gcp-controller, neuvector-dbgen, shfmt, conjur-cli, spqr,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: terraform-provider-kubernetes, capslock, guac, ferretdb, azure-ipam, go-licenses, kubescape-operator, maru, certificate-transparency, helm-mapkubeapis, cluster-api-gcp-controller, neuvector-dbgen, shfmt, conjur-cli, spqr, yunikorn-web, vault-env, etcd, boring-registr...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: terraform-provider-kubernetes, capslock, guac, ferretdb, azure-ipam, go-licenses, secrets-store-csi-driver-provider-gcp, kubescape-operator, maru, certificate-transparency, helm-mapkubeapis, cluster-api-gcp-controller, neuvector-dbgen, shfmt, conjur-cli, spqr,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: terraform-provider-kubernetes, capslock, guac, ferretdb, azure-ipam, go-licenses, secrets-store-csi-driver-provider-gcp, kubescape-operator, maru, certificate-transparency, helm-mapkubeapis, cluster-api-gcp-controller, neuvector-dbgen, shfmt, conjur-cli, spqr,...

GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: terraform-provider-kubernetes, capslock, guac, ferretdb, azure-ipam, go-licenses, secrets-store-csi-driver-provider-gcp, kubescape-operator, maru, certificate-transparency, helm-mapkubeapis, cluster-api-gcp-controller, neuvector-dbgen, shfmt, conjur-cli, spqr,...

GHSA-JWMF-CHVC-RF92 vulnerabilities

Vulnerabilities for packages: terraform-provider-kubernetes, capslock, guac, ferretdb, azure-ipam, go-licenses, secrets-store-csi-driver-provider-gcp, kubescape-operator, maru, certificate-transparency, helm-mapkubeapis, cluster-api-gcp-controller, neuvector-dbgen, shfmt, conjur-cli, spqr,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: terraform-provider-kubernetes, capslock, guac, ferretdb, azure-ipam, go-licenses, secrets-store-csi-driver-provider-gcp, kubescape-operator, maru, certificate-transparency, helm-mapkubeapis, cluster-api-gcp-controller, neuvector-dbgen, shfmt, conjur-cli, spqr,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: prometheus-mongodb-exporter-fips, packer, ipfs-cluster-fips, cloud-provider-gcp-cloud-controller-manager-fips, promxy-fips, crossplane-function-go-templating, terraform-docs, kubernetes-dashboard-auth-fips, kubevela-fips, kubernetes-csi-node-driver-registrar-fips,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: prometheus-mongodb-exporter-fips, packer, ipfs-cluster-fips, cloud-provider-gcp-cloud-controller-manager-fips, promxy-fips, crossplane-function-go-templating, terraform-docs, kubernetes-dashboard-auth-fips, kubevela-fips, kubernetes-csi-node-driver-registrar-fips,...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: prometheus-mongodb-exporter-fips, packer, ipfs-cluster-fips, cloud-provider-gcp-cloud-controller-manager-fips, promxy-fips, crossplane-function-go-templating, terraform-docs, kubernetes-dashboard-auth-fips, kubevela-fips, kubernetes-csi-node-driver-registrar-fips,...

Android Malware Detection: A Machine Learning Approach

This study examines machine learning techniques like Decision Trees, Support Vector Machines, Logistic Regression, Neural Networks, and ensemble methods to detect Android malware. The study evaluates these models on a dataset of Android applications and analyzes their accuracy, efficiency, and...

Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: VMCI: fixed a race condition between vmcihostsetupnotify and vmcictxunsetnotify. During our testing, it was found that a warning can occur in trygrabfolio. The detailed error message is as follows: ----------- Cut here ----------...

Astra Linux – Vulnerability in libpod

A flaw was discovered in Podman. The podman machine init command fails to verify the TLS certificate when downloading VM images from an OCI registry. This issue allows for a Man In The Middle attack to occur...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: vsock/vmci: The vmci transport packet should be cleared properly when initializing it. In vmcitransportpacketinit, memset is used to clear the vmcitransportpacket before populating the fields, to avoid any uninitialized data...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: using arrayindexnospec with indices that come from the guest min and destid are guest-controlled indices. Using arrayindexnospec after the bounds checks helps to mitigate speculative execution side-channels by clamping...

Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: hrtimers: Timers queued after CPUHPAPHRTIMERSDYING are forced to be migrated away from the dying CPU to any online target. This is done to avoid delaying bandwidth timer handling tasks related to CPU hotplug progress. However,...

EUVD-2025-37346

When passing through PCI devices, the detach logic in libxl won't remove access permissions to any 64bit memory BARs the device might have. As a result a domain can still have access any 64bit memory BAR when such device is no longer assigned to the domain. For PV domains the permission leak allo...