USN-7387-2: Linux kernel (FIPS) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - MIPS architecture; - PowerPC architecture; - RISC-V architecture; - S390 architecture; - Supe...

New Morphing Meerkat Phishing Kit Mimics 114 Brands Using Victims' DNS Email Records

Cybersecurity researchers have shed light on a new phishing-as-a-service PhaaS platform that leverages the Domain Name System DNS mail exchange MX records to serve fake login pages that impersonate about 114 brands. DNS intelligence firm Infoblox is tracking the actor behind the PhaaS, the phishi...

150,000 Sites Compromised by JavaScript Injection Promoting Chinese Gambling Platforms

An ongoing campaign that infiltrates legitimate websites with malicious JavaScript injects to promote Chinese-language gambling platforms has ballooned to compromise approximately 150,000 sites to date. "The threat actor has slightly revamped their interface but is still relying on an iframe...

Medium: libxslt

Issue Overview: The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.6, tvOS 17, iOS 16.7 and iPadOS 16.7, macOS Monterey 12.7, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. Processing web content may disclose sensitive information. CVE-2023-40403...

CVE-2025-2770

creationtimestamp| type| source ---|---|--- 2025-03-25 04:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-186/ 2025-04-23 18:00:01+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114388579201738740 2025-04-23 21:10:23+00:00| seen| https://t.me/cvedetector/23604...

CVE-2025-2747

creationtimestamp| type| source ---|---|--- 2025-03-24 19:40:27+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3ll5j5ea2q522 2025-03-24 20:39:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ll5mhfxkvq2w 2025-03-24 20:48:56+00:00| seen|...

SUSE-SU-2025:20158-1 Security update for ucode-intel

This update for ucode-intel fixes the following issues: - Intel CPU Microcode was updated to the 20250211 release bsc1237096 - Security updates for INTEL-SA-01166 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01166.html CVE-2024-31068: Improper Finite State Machines FS...

GHSA-CW7X-3MV7-W6XM vulnerabilities

Vulnerabilities for packages: libarchive...

CVE-2025-29814

creationtimestamp| type| source ---|---|--- 2025-03-21 02:48:18+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114198137884586801 2025-03-21 02:58:11+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114198176776904764 2025-03-21 03:14:24+00:00| seen|...

CVE-2025-2585

creationtimestamp| type| source ---|---|--- 2025-03-21 02:18:45+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8312 2025-03-21 03:14:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkuandhnnp2n 2025-03-21 04:16:26+00:00| seen| https://t.me/cvedetector/20778 2025-03-21...

CVE-2025-29980

creationtimestamp| type| source ---|---|--- 2025-03-20 19:18:41+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8275 2025-03-20 20:30:11+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114196651102766521 2025-03-20 20:40:19+00:00| seen|...

CVE-2025-26909

creationtimestamp| type| source ---|---|--- 2025-03-20 15:09:11+00:00| seen| https://bsky.app/profile/defendopsdiaries.bsky.social/post/3lksy4lhxbi2y 2025-03-20 18:08:42+00:00| seen| https://bsky.app/profile/hackingne.ws/post/3lktc5muitq2q 2025-03-21 16:12:19+00:00| seen|...

CVE-2025-0452

creationtimestamp| type| source ---|---|--- 2025-03-20 12:48:45+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114194836488314320 2025-03-20 13:03:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lksr43hsje2l 2025-03-20 13:05:08+00:00| seen|...

CVE-2025-2505

creationtimestamp| type| source ---|---|--- 2025-03-20 08:40:17+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lkscf7ljn32v 2025-03-20 09:03:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lksdomzswc26 2025-03-20 09:30:37+00:00| published-proof-of-concept|...

Azure Linux 3.0 Security Update: expat / python3 (CVE-2024-45492)

The version of expat / python3 installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-45492 advisory. - An issue was discovered in libexpat before 2.6.3. nextScaffoldPart in xmlparse.c can have an intege...

CVE-2025-27888

creationtimestamp| type| source ---|---|--- 2025-03-19 17:38:56+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lkqpzhrmus2b 2025-03-20 12:56:13+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114194866048910223 2025-03-20 15:43:38+00:00| seen|...

CVE-2024-54016

creationtimestamp| type| source ---|---|--- 2025-03-19 17:38:54+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lkqpzfrfac2u 2025-03-20 11:32:43+00:00| seen| https://t.me/cvedetector/20702 2025-03-20 12:52:43+00:00| seen|...

CVE-2019-16261

creationtimestamp| type| source ---|---|--- 2025-03-19 16:40:03+00:00| seen| https://gist.github.com/Shlucus/58e069fd2584615a6f2a41b68eb7e580 2025-03-19 16:44:35+00:00| seen| https://gist.github.com/Shlucus/ab762d6b148f2d2d046c956526a80ddc 2025-03-20 12:33:40+00:00| seen|...

CVE-2025-30154

creationtimestamp| type| source ---|---|--- 2025-03-19 15:45:35+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114189869676629359 2025-03-19 16:30:54+00:00| seen| Telegram/1nxUJd1r2Vli3BcLbYFmcRkQRAx1kOCE3f---QAF-WqkIU 2025-03-19 17:21:01+00:00| published-proof-of-concept|...

GHSA-QMG3-HPQR-GQVC

creationtimestamp| type| source ---|---|--- 2025-03-19 15:45:35+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114189869676629359 2025-03-19 16:30:54+00:00| seen| Telegram/1nxUJd1r2Vli3BcLbYFmcRkQRAx1kOCE3f---QAF-WqkIU 2025-03-19 17:21:01+00:00| published-proof-of-concept|...