CVE-2023-52971

A flaw was found in MariaDB Server. This vulnerability may allow an attacker to cause a crash via improper handling of join operations in JOIN::fixallsplittingsinplan. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product...

Unbreakable Enterprise kernel security update

5.4.17-2136.341.3.1 - Revert 'NFSD: Limit the number of concurrent async COPY operations' Sherry Yang Orabug: 37667080 5.4.17-2136.341.3 - iouring: fix possible deadlock in ioregisteriowqmaxworkers Hagar Hemdan Orabug: 37565787 - iouring/rw: fix missing NOWAIT check for ODIRECT start write Jens...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-56779)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-56779 advisory. - In the Linux kernel, the following vulnerability has been resolved: nfsd: fix nfs4openowner leak when...

CVE-2025-25907

tianti v2.3 was discovered to contain a Cross-Site Request Forgery CSRF via the component /user/ajax/save. This vulnerability allows attackers to execute arbitrary operations via a crafted GET or POST request...

CVE-2025-27910

tianti v2.3 was discovered to contain a Cross-Site Request Forgery CSRF via the component /user/ajax/upd/status. This vulnerability allows attackers to execute arbitrary operations via a crafted GET or POST request...

CVE-2025-27910

CVE-2025-27910 concerns tianti v2.3, which contains a CSRF in the /user/ajax/upd/status handler. The advisory states that an attacker can trigger arbitrary operations by crafting a GET or POST request, with a CVSSv3.1 base score of 8.0 (HIGH) and an attack that is network-based, requires low priv...

CVE-2025-25907

tianti v2.3 was discovered to contain a Cross-Site Request Forgery CSRF via the component /user/ajax/save. This vulnerability allows attackers to execute arbitrary operations via a crafted GET or POST request...

CVE-2025-25907

tianti v2.3 was discovered to contain a Cross-Site Request Forgery CSRF via the component /user/ajax/save. This vulnerability allows attackers to execute arbitrary operations via a crafted GET or POST request...

CVE-2023-52971

Disclaimer: This data contains information about vulnerable...

Security update for pcp

This update for pcp fixes the following issues: CVE-2024-45769: Fixed pmcd heap corruption through metric pmstore operations bsc1230551. CVE-2024-45770: Fixed pmpost symlink attack allowing escalating pcp to root user bsc1230552. Patch Instructions: To install this SUSE update use the SUSE...

FIN7, FIN8, and Others Use Ragnar Loader for Persistent Access and Ransomware Operations

Threat hunters have shed light on a "sophisticated and evolving malware toolkit" called Ragnar Loader that's used by various cybercrime and ransomware groups like Ragnar Locker aka Monstrous Mantis, FIN7, FIN8, and Ruthless Mantis ex-REvil. "Ragnar Loader plays a key role in keeping access to...

CVE-2025-21832

CVE-2025-21832 - Linux kernel : In blkdev_read_iter(), revert handling for -EIOCBQUEUED caused by not validating blkdev_direct_IO() return before iov_iter_revert(), risking a WARN_ON due to a negative/unsigned mismatch. The patch removes reversion for -EIOCBQUEUED, aligning with other spots and p...

U.S. Charges 12 Chinese Nationals in State-Backed Hacking Operations

The U.S. Department of Justice DoJ has announced charges against 12 Chinese nationals for their alleged participation in a wide-ranging scheme designed to steal data and suppress free speech and dissent globally. The individuals include two officers of the People's Republic of China's PRC Ministr...

Linux Distros Unpatched Vulnerability : CVE-2024-50280

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dm cache: fix flushing uninitialized delayedwork on cachectr error An unexpected WARNON from flushwork may occur when cache creation fails, caused by destroying...

Linux Distros Unpatched Vulnerability : CVE-2024-50230

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nilfs2: fix kernel bug due to missing clearing of checked flag Syzbot reported that in directory operations after nilfs2 detects filesystem corruption and...

Linux Distros Unpatched Vulnerability : CVE-2025-21721

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nilfs2: handle errors that nilfspreparechunk may return Patch series nilfs2: fix issues with rename operations. This series fixes BUGON check failures reported ...

Linux Distros Unpatched Vulnerability : CVE-2024-53690

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nilfs2: prevent use of deleted inode syzbot reported a WARNING in nilfsrmdir. 1 Because the inode bitmap is corrupted, an inode with an inode number that should...

Linux Distros Unpatched Vulnerability : CVE-2025-21701

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net: avoid race between device unregistration and ethnl ops The following trace can be seen ...

Linux Distros Unpatched Vulnerability : CVE-2024-50042

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ice: Fix increasing MSI-X on VF Increasing MSI-X value on a VF leads to invalid memory...

Linux Distros Unpatched Vulnerability : CVE-2024-49974

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: NFSD: Limit the number of concurrent async COPY operations Nothing appears to limit the numb...