PT-2025-62908

Уязвимость плагина mod offlinequiz виртуальной обучающей среды Moodle связана с непринятием мер по нейтрализации специальных элементов. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, выполнять произвольные команды...

OpenWRT Privilege Escalation Vulnerability (Mar 2025)

OpenWRT is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:openwrt:openwrt";...

PT-2025-48519

Use of a Broken or Risky Cryptographic Algorithm in the function mbedtls mpi exp mod in lignum.c in Mbed TLS Mbed TLS all versions before 3.0.0, 2.27.0 or 2.16.11 allows attackers with access to precise enough timing and memory access information typically an untrusted operating system attacking ...

Huawei EulerOS: Security Advisory for mod_http2 (EulerOS-SA-2025-2440)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2025-48508

An issue was discovered in Mbed TLS before 2.25.0 and before 2.16.9 LTS and before 2.7.18 LTS. The calculations performed by mbedtls mpi exp mod are not limited; thus, supplying overly large parameters could lead to denial of service when generating Diffie-Hellman key pairs...

TencentOS Server 3: mod_auth_openidc:2.3 (TSSA-2024:0762)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0762 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

Updated apache packages fix security vulnerabilities

HTTP response splitting. CVE-2024-42516 SSRF with modheaders setting Content-Type header. CVE-2024-43204 modssl error log variable escaping. CVE-2024-47252 modproxyhttp2 denial of service. CVE-2025-49630 modssl access control bypass with session resumption. CVE-2025-23048 modssl TLS upgrade attac...

Malicious code in polaris-sync-procyon-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1434d4b6bbcde4dcf7e4fa46ea40212da7acbc15f97dd7d0c59b9c7366c8048a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Huawei EulerOS: Security Advisory for mod_http2 (EulerOS-SA-2025-2395)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-990815)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990815 advisory. In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix null pointer dereference in ftraceaddmod The @ftracemod is allocated by kzalloc, so...

Malicious code in oktafian-tempe48-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aef54d8d9ba4d31fa9b67d9e592e95528b4a051deae2e5f51c74c17c49017e56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CLSA-2025-1762421346 mod_security: Fix of CVE-2025-47947

CVE-2025-47947: fix potential DoS by adding ARGS to the sanitize list only if it's not added yet...

Malicious code in mod-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ec890b586ea0ff47a8ba914ff95c535bdeebbdfaf6788b6357a5afae32c9463 The package mod-manager was found to contain malicious code...

EUVD-2025-37060

Malicious code in mod-manager npm...

MAL-2025-49233 Malicious code in mod-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ec890b586ea0ff47a8ba914ff95c535bdeebbdfaf6788b6357a5afae32c9463 The package mod-manager was found to contain malicious code...

CLSA-2025-1761747106 Fix CVE(s): CVE-2024-38477

SECURITY UPDATE: null pointer dereference in modproxy - debian/patches/CVE-2024-38477.patch: validate hostname in modules/proxy/proxyutil.c. Restart from the original URL on reconnect in modules/http2/modproxyhttp2.c. - CVE-2024-38477...

CVE-2021-42717 affecting package mod_security for versions less than 2.9.7-8

CVE-2021-42717 affecting package modsecurity for versions less than 2.9.7-8. An upgraded version of the package is available that resolves this issue...

CVE-2023-24021 affecting package mod_security for versions less than 2.9.7-8

CVE-2023-24021 affecting package modsecurity for versions less than 2.9.7-8. An upgraded version of the package is available that resolves this issue...

Linux Distros Unpatched Vulnerability : CVE-2025-54764

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mbed TLS before 3.6.5 allows a local timing attack against certain RSA operations, and direct calls to mbedtlsmpimodinv or mbedtlsmpigcd. CVE-2025-54764 Note th...

EulerOS 2.0 SP13 : httpd (EulerOS-SA-2025-2262)

According to the versions of the httpd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : HTTP response splitting in the core of Apache HTTP Server allows an attacker who can manipulate the Content-Type response headers of applications...