MAL-2025-191779 Malicious code in lazmat (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 292e8512aa9e77a20a04a58cee3529ea31b9451e5c9067bbad7be57b5eb8c7fb Importing the module starts a telegram bot that connects to a chat and executes provided commands --- Category: MALICIOUS - The campaign has clearly malicious...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from unfiltered non-canonical addresses and could lead to a virtual machine failure...

CVE-2025-49746

Improper authorization in Azure Machine Learning allows an authorized attacker to elevate privileges over a network...

CVE-2025-49747

Missing authorization in Azure Machine Learning allows an authorized attacker to elevate privileges over a network...

CVE-2025-47995

Weak authentication in Azure Machine Learning allows an authorized attacker to elevate privileges over a network...

CVE-2025-47995

Azure Machine Learning is identified in CVE-2025-47995 as having weak authentication that enables a network-based privilege escalation by an authorized attacker. The entry derives from Microsoft/Red Hat and multiple security sources, describing the vulnerability as affecting Microsoft Azure Machi...

CVE-2025-47995 Azure Machine Learning Elevation of Privilege Vulnerability

...

CVE-2025-47995 Azure Machine Learning Elevation of Privilege Vulnerability

...

CVE-2025-49747 Azure Machine Learning Elevation of Privilege Vulnerability

...

CVE-2025-49746 Azure Machine Learning Elevation of Privilege Vulnerability

...

CVE-2025-49747 Azure Machine Learning Elevation of Privilege Vulnerability

...

CVE-2025-49747

CVE-2025-49747 is a privilege-escalation vulnerability affecting Microsoft Azure Machine Learning reported as missing authorization. Affected component: Azure Machine Learning (machine learning services platform). Root cause per description: insufficient access control that allows an authorized a...

CVE-2025-49746

CVE-2025-49746 affects Microsoft Azure Machine Learning. The vulnerability is caused by improper authorization, enabling an attacker with network access to escalate privileges within the affected service. Documented impact is privilege escalation with high confidentiality, integrity, and availabi...

CVE-2025-49746 Azure Machine Learning Elevation of Privilege Vulnerability

...

Azure Machine Learning Elevation of Privilege Vulnerability

Missing authorization in Azure Machine Learning allows an authorized attacker to elevate privileges over a network...

Azure Machine Learning Elevation of Privilege Vulnerability

Improper authorization in Azure Machine Learning allows an authorized attacker to elevate privileges over a network...

[SECURITY] Fedora 41 Update: luajit-2.1.1748459687-2.fc41

LuaJIT implements the full set of language features defined by Lua 5.1. The virtual machine VM is API- and ABI-compatible to the standard Lua interpreter and can be deployed as a drop-in replacement...

Microsoft Azure Machine Learning security vulnerabilities

Microsoft Azure Machine Learning is a machine learning services platform from Microsoft USA. Microsoft Azure Machine Learning has a security vulnerability that can be exploited by an attacker to potentially cause elevation of privilege...

PT-2025-30066 · Microsoft · Azure Machine Learning

Name of the Vulnerable Software and Affected Versions: Azure Machine Learning affected versions not specified Description: Weak authentication in Azure Machine Learning allows an authorized attacker to elevate privileges over a network. Recommendations: At the moment, there is no information abou...

PT-2025-30067 · Microsoft · Azure Machine Learning

Name of the Vulnerable Software and Affected Versions: Azure Machine Learning affected versions not specified Description: Improper authorization in Azure Machine Learning allows an authorized attacker to elevate privileges over a network. Recommendations: At the moment, there is no information...