PT-2025-53214

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an information leak in the vfio/type1 subsystem. A hole in the vfio iommu type1 info cap migration structure is not initialized, potentially exposing data to...

How to migrate ns.conf from one appliance to another using Batch Configuration

Demystifying how to migrate the configuration of an existing NetScaler appliance to another NetScaler appliance...

Improper Validation

code.gitea.io/gitea is vulnerable to Improper Validation. The vulnerability exists because Migration Downloaders can change the CloneURL which is improperly validated, allowing an attacker to redirect users to a malicious clone URL...

GHSA-8J3V-68W3-3848 Gitea erroneous repo clones

In Gitea through 1.17.1, repo cloning can occur in the migration function...

Gitea erroneous repo clones

In Gitea through 1.17.1, repo cloning can occur in the migration function...

CVE-2022-38795

In Gitea through 1.17.1, repo cloning can occur in the migration function...

CVE-2022-38795

In Gitea through 1.17.1, repo cloning can occur in the migration function...

Design/Logic Flaw

In Gitea through 1.17.1, repo cloning can occur in the migration function...

CVE-2022-38795

In Gitea through 1.17.1, repo cloning can occur in the migration function...

Gitea Security Vulnerabilities

Gitea is a lightweight Go-based git service developed by the Gitea community. A security vulnerability exists in Gitea version 1.17.1 and prior versions, which stems from repository cloning occurring in the migration function...

Gitea erroneous repo clones

In Gitea through 1.17.1, repo cloning can occur in the migration function...

CVE-2022-38795

In Gitea through 1.17.1, repo cloning can occur in the migration function...

CVE-2022-38795: Undefined Security Weakness

In Gitea through 1.17.1, repo cloning can occur in the migration function...

CVE-2022-38795

In Gitea through 1.17.1, repo cloning can occur in the migration function...

CVE-2022-38795

In Gitea through 1.17.1, repo cloning can occur in the migration function...

CVE-2022-38795

Gitea prior to 1.17.2 is affected: repo cloning could occur in the migration function, enabling unintended repository clones during migrations. This aligns with multiple advisories describing the issue in 1.17.1 and earlier. A remediation indicated by the project release notes is to upgrade to Gi...

CVE-2023-37470

Metabase versions prior to 0.43.7.3, 0.44.7.3, 0.45.4.3, 0.46.6.4, 1.43.7.3, 1.44.7.3, 1.45.4.3, and 1.46.6.4 are affected by a remote code execution vulnerability stemming from the embedded H2 database. The issue allows a user-supplied connection string to contain code that is subsequently execu...

CVE-2023-37470 Metabase vulnerable to remote code execution via POST /api/setup/validate API endpoint

Metabase is an open-source business intelligence and analytics platform. Prior to versions 0.43.7.3, 0.44.7.3, 0.45.4.3, 0.46.6.4, 1.43.7.3, 1.44.7.3, 1.45.4.3, and 1.46.6.4, a vulnerability could potentially allow remote code execution on one's Metabase server. The core issue is that one of the...

IMDShift - Automates Migration Process Of Workloads To IMDSv2 To Avoid SSRF Attacks

AWS workloads that rely on the metadata endpoint are vulnerable to Server-Side Request Forgery SSRF attacks. IMDShift automates the migration process of all workloads to IMDSv2 with extensive capabilities, which implements enhanced security measures to protect against these attacks. Features...

Access Denied Error After Migrating Configuration from MFA-Enabled Server

Article Applicability The issue documented in this article is relevant only to Veeam Backup & Replication 12.x. A similar issue occurs with Veeam Backup & Replication 13.x, and is documented in KB4898: Sign-In Error After Migrating Configuration From MFA-Enabled Server. Challenge After performing...