OPENSUSE-SU-2025:20031-1 Security update for warewulf4

This update for warewulf4 fixes the following issues: Changes in warewulf4: - Update to version 4.6.4: v4.6.4 release updates Convert disk booleans from wwbool to bool which allows bools in disk to be set to false via command line bsc1248768 Update NetworkManager Overlay Disable ipv4 in...

java-1.8.0-openjdk security update

1:1.8.0.472.b08-1.0.1 - Add Oracle vendor bug URL Orabug: 34340155 1:1.8.0.472.b08-1 - Update to 8u472-b08 GA. - Update release notes for 8u472-b08. - Drop local JDK-8339414 fix as this is now included upstream - Reset rpmrelease to 1 now there are no other RPM builds on RHEL 9 - Sync the copy of...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.13.61 bug fix and security update

Red Hat OpenShift Container Platform release 4.13.61 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.13. Red Hat Product Security has rated this update as having a...

primilinary-exploit-searching-dork

primilinary-exploit-searching-dork This file contains an exten...

Critical Lanscope Endpoint Manager Bug Exploited in Ongoing Cyberattacks, CISA Confirms

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Wednesday added a critical security flaw impacting Motex Lanscope Endpoint Manager to its Known Exploited Vulnerabilities KEV catalog, stating it has been actively exploited in the wild. The vulnerability, CVE-2025-61932 CVSS v4...

CVE-2025-60934

Multiple stored cross-site scripting XSS vulnerabilities in the index.php component of HR Performance Solutions Performance Pro v3.19.17 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Employee Notes, title, or description parameters. The patched...

CVE-2025-60934

Multiple stored cross-site scripting XSS vulnerabilities in the index.php component of HR Performance Solutions Performance Pro v3.19.17 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Employee Notes, title, or description parameters. The patched...

CVE-2025-60934

Multiple stored cross-site scripting XSS vulnerabilities in the index.php component of HR Performance Solutions Performance Pro v3.19.17 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Employee Notes, title, or description parameters. The patched...

SAMSUNG Notes Out-of-Bounds Write Vulnerability

SAMSUNG Notes is a software application from Samsung South Korea. It is used to provide a record function. SAMSUNG Notes suffers from an out-of-bounds write vulnerability that can be exploited by an attacker to write to out-of-bounds memory...

SAMSUNG Notes out-of-bounds read vulnerability (CNVD-2025-24703)

SAMSUNG Notes is a software application from Samsung South Korea. It is used to provide a record function. SAMSUNG Notes suffers from an out-of-bounds read vulnerability that can be exploited by an attacker to access out-of-bounds memory...

EUVD-2025-35170

Multiple stored cross-site scripting XSS vulnerabilities in the Current Goals function of HR Performance Solutions Performance Pro v3.19.17 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Goal Name, Goal Notes, Action Step Name, Action Step...

PT-2025-42889

Name of the Vulnerable Software and Affected Versions HR Performance Solutions Performance Pro versions prior to 6.3.2.0 Description The Current Goals function contains multiple stored cross-site scripting XSS issues. Attackers can inject crafted payloads into several parameters to execute...

CVE-2025-60934

Multiple stored cross-site scripting XSS vulnerabilities in the index.php component of HR Performance Solutions Performance Pro v3.19.17 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Employee Notes, title, or description parameters. The patched...

SAMSUNG Notes out-of-bounds read vulnerability (CNVD-2025-24706)

SAMSUNG Notes is a software application from Samsung South Korea. It is used to provide a record function. SAMSUNG Notes suffers from an out-of-bounds read vulnerability that can be exploited by an attacker to access out-of-bounds memory...

EUVD-2025-35168

Multiple stored cross-site scripting XSS vulnerabilities in the index.php component of HR Performance Solutions Performance Pro v3.19.17 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Employee Notes, title, or description parameters. The patched...

SAMSUNG Notes out-of-bounds read vulnerability (CNVD-2025-24705)

SAMSUNG Notes is a software application from Samsung South Korea. It is used to provide a record function. SAMSUNG Notes suffers from an out-of-bounds read vulnerability that can be exploited by an attacker to access out-of-bounds memory...

PT-2025-42890

Name of the Vulnerable Software and Affected Versions HR Performance Solutions Performance Pro versions prior to 6.3.2.0 Description The software contains multiple stored cross-site scripting XSS issues within the Future Goals function. These issues allow attackers to inject crafted payloads into...

CVE-2025-60934: Improper Neutralization of Input During Web Page Generation

Multiple stored cross-site scripting XSS vulnerabilities in the index.php component of HR Performance Solutions Performance Pro v3.19.17 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Employee Notes, title, or description parameters. The patched...

CVE-2025-60934

The HR Performance Solutions Performance Pro platform (specifically version v3.19.17 ) contains multiple stored cross-site scripting (XSS) vulnerabilities within the index.php component. The root cause is the improper validation of inputs for the Employee Notes , title , and description parameter...

PT-2025-42891

Name of the Vulnerable Software and Affected Versions HR Performance Solutions Performance Pro versions prior to 6.3.2.0 Description Multiple stored cross-site scripting XSS flaws exist in the index.php component. These flaws allow attackers to inject crafted payloads into the Employee Notes,...