3167 matches found
CYRISMA Sensor 安全漏洞
CYRISMA Sensor is a scanning and detection component from CYRISMA USA. A security vulnerability exists in versions prior to CYRISMA Sensor 444, which stems from insecure folder and file permissions that could allow a low-privileged user to elevate privileges by replacing binaries and executing...
CVE-2025-57625
CYRISMA Sensor before 444 for Windows has an Insecure Folder and File Permissions vulnerability. A low-privileged user can abuse these issues to escalate privileges and execute arbitrary code in the context of NT AUTHORITY\SYSTEM by replacing DataSpotliteAgent.exe or any other binaries called by...
CVE-2022-50299
CVE-2022-50299 is a Linux kernel issue in the md (multiple device) module where snprintf() could wrap around when the total length of the block device names with slashes exceeds 200, leading to incorrect buffer sizing. The vulnerability arises from using snprintf; the fix is to replace snprintf w...
DEBIAN-CVE-2023-53183
In the Linux kernel, the following vulnerability has been resolved: btrfs: exit gracefully if reloc roots don't match BUG Syzbot reported a crash that an ASSERT got triggered inside preparetomerge. CAUSE The root cause of the triggered ASSERT is we can have a race between quota tree creation and...
[SECURITY] Fedora 41 Update: linenoise-1.0-9.20200312git97d2850.fc41
Linenoise is a replacement for the readline line-editing library with the goal of being smaller...
[SECURITY] Fedora 42 Update: linenoise-1.0-12.20200312git97d2850.fc42
Linenoise is a replacement for the readline line-editing library with the goal of being smaller...
PT-2025-37581
Name of the Vulnerable Software and Affected Versions: Linux kernel versions 6.1.0-rc8+ through 6.1.0-rc8+ 144 Description: This issue involves a global out-of-bounds bug in the rtl8812ae phy set txpower limit function within the rtlwifi module. The root cause is an incorrect comparison order of...
PT-2025-37601
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.4.0-1085-azure 9018.04.1-Ubuntu Description: The Linux kernel contained an issue where the snprintf function was used instead of scnprintf in the md multiple device module. This could lead to a warning when th...
[SECURITY] Fedora 41 Update: uv-0.8.11-2.fc41
An extremely fast Python package installer and resolver, written in Rust. Designed as a drop-in replacement for common pip and pip-tools workflows. Highlights: =E2=80=A2 =E2=9A=96=EF=B8=8F Drop-in replacement for common pip, pip-tools, and virtualenv commands. =E2=80=A2 =E2=9A=A1=EF=B8=8F 10-100x...
[SECURITY] Fedora 43 Update: ruff-0.11.5-7.fc43
An extremely fast Python linter and code formatter, written in Rust. Ruff aims to be orders of magnitude faster than alternative tools while integrating more functionality behind a single, common interface. Ruff can be used to replace Flake8 plus dozens of plugins, Black, isort, pydocstyle,...
[SECURITY] Fedora 43 Update: uv-0.8.11-2.fc43
An extremely fast Python package installer and resolver, written in Rust. Designed as a drop-in replacement for common pip and pip-tools workflows. Highlights: =E2=80=A2 =E2=9A=96=EF=B8=8F Drop-in replacement for common pip, pip-tools, and virtualenv commands. =E2=80=A2 =E2=9A=A1=EF=B8=8F 10-100x...
[SECURITY] Fedora 42 Update: uv-0.8.11-2.fc42
An extremely fast Python package installer and resolver, written in Rust. Designed as a drop-in replacement for common pip and pip-tools workflows. Highlights: =E2=80=A2 =E2=9A=96=EF=B8=8F Drop-in replacement for common pip, pip-tools, and virtualenv commands. =E2=80=A2 =E2=9A=A1=EF=B8=8F 10-100x...
DEBIAN-CVE-2025-39751
In the Linux kernel, the following vulnerability has been resolved: ALSA: hda/ca0132: Fix buffer overflow in addtuningcontrol The 'sprintf' call in 'addtuningcontrol' may exceed the 44-byte buffer if either string argument is too long. This triggers a compiler warning. Replaced 'sprintf' with...
SUSE-SU-2025:03169-1 Security update for regionServiceClientConfigAzure
This update for regionServiceClientConfigAzure contains the following fixes: - Update to version 3.0.0. bsc1246995 + SLE 16 python-requests requires SSL v3 certificates. Update 2 region server certs to support SLE 16 when it gets released. - Update dependency name for metadata package, name chang...
CVE-2025-57392
BenimPOS Masaustu 3.0.x is affected by insecure file permissions. The installation directory grants Everyone and BUILTIN\Users FILE_ALL_ACCESS, enabling local users to replace or modify .exe/.dll files. This can lead to privilege escalation or arbitrary code execution on launch by another user or...
CVE-2025-57392
BenimPOS Masaustu 3.0.x is affected by insecure file permissions. The application installation directory grants Everyone and BUILTIN\Users groups FILEALLACCESS, allowing local users to replace or modify .exe and .dll files. This may lead to privilege escalation or arbitrary code execution upon...
Security update for regionServiceClientConfigAzure
This update for regionServiceClientConfigAzure contains the following fixes: Update to version 3.0.0.bsc1246995 SLE 16 python-requests requires SSL v3 certificates. Update 2 region server certs to support SLE 16 when it gets released. Update dependency name for metadata package, name change in SL...
New Docker Malware Strain Spotted Blocking Rivals on Exposed APIs
Akamai finds new Docker malware blocking rivals on exposed APIs, replacing cryptominers with tools that hint at early botnet development...
