AZL-56831 CVE-2025-21694 affecting package kernel for versions less than 6.6.76.1-1

In the Linux kernel, the following vulnerability has been resolved: fs/proc: fix softlockup in readvmcore part 2 Since commit 5cbcb62dddf5 "fs/proc: fix softlockup in readvmcore" the number of softlockups in readvmcore at kdump time have gone down, but they still happen sometimes. In a memory...

Astra Linux – Vulnerability in Waitress

Waitress is a Web Server Gateway Interface server for Python 2 and 3. A remote client can send a request that is exactly recvbytes long default: 8192, followed by a secondary request using HTTP pipeling. When request lookahead is disabled default, we do not read any further requests. If the first...

waitress: python-waitress: request processing race condition in HTTP pipelining with invalid first request

A flaw was found in the Waitress WSGI server for Python. A remote client can send a request that is exactly recvbytes, which defaults to 8192 long, followed by a secondary request using HTTP pipelining. When request lookahead is disabled default, Waitress won't read any more requests, and when th...

[SECURITY] [DLA 4040-1] pam-u2f security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4040-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort February 03, 2025 https://wiki.debian.org/LTS -...

CVE-2025-24365

vaultwarden is an unofficial Bitwarden compatible server written in Rust, formerly known as bitwardenrs. Attacker can obtain owner rights of other organization. Hacker should know the ID of victim organization in real case the user can be a part of the organization as an unprivileged user and be...

A week in security (January 20 – January 26)

Last week on Malwarebytes Labs: Your location or browsing habits could lead to price increases when buying online AI tool GeoSpy analyzes images and identifies locations in seconds 7-Zip bug could allow a bypass of a Windows security feature. Update now Warning: Don’t sell or buy a second hand...

Warning: Don’t sell or buy a second hand iPhone with TikTok already installed

After TikTok was briefly banned in the US last weekend, an unusual phenomenon unearthed. Reportedly, people are selling iPhones that have TikTok installed for up to $25,000. This may require some explanation, so bear with me. TikTok has had a rough time in the US the last weeks. The ban we...

Malicious code in fast-utilz (npm)

This package downloads a second stage payload via Discord. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e23b4a6118c13cf6e7d7bc0318d4ff3f1d25bbc1cb4db2a8a4676cdb4777e232 Any computer that has this package installed or running should be considered fully compromised...

MAL-2025-614 Malicious code in fast-utilz (npm)

This package downloads a second stage payload via Discord. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e23b4a6118c13cf6e7d7bc0318d4ff3f1d25bbc1cb4db2a8a4676cdb4777e232 Any computer that has this package installed or running should be considered fully compromised...

CVE-2025-0473

Vulnerability in the PMB platform that allows an attacker to persist temporary files on the server, affecting versions 4.0.10 and above. This vulnerability exists in the file upload functionality on the ‘/pmb/authorities/import/iimportauthorities’ endpoint. When a file is uploaded via this...

Yubico pam-u2f security vulnerability

Yubico pam-u2f is a pluggable authentication module for U2F and FIDO2 from Yubico. A security vulnerability exists in Yubico pam-u2f versions prior to 1.3.1 that stems from allowing authentication to be bypassed in certain configurations, where local elevation of privilege may occur...

PT-2025-3079

Name of the Vulnerable Software and Affected Versions CP Plus CP-VNR-3104 B3223P22C02424 affected versions not specified Description An issue allows attackers to obtain the second RSA private key, potentially accessing sensitive data or executing a man-in-the-middle attack. Recommendations At the...

CVE-2024-49385

creationtimestamp| type| source ---|---|--- 2025-01-02 15:16:12+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lerem5lvq425 2025-01-02 15:56:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lergv5djiw2r 2025-01-02 16:46:01+00:00| seen|...

CVE-2024-56246

creationtimestamp| type| source ---|---|--- 2025-01-02 12:20:57+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ler2sw24jr2o 2025-01-02 14:15:18+00:00| seen| https://t.me/cvedetector/14134 2025-01-02 20:08:33+00:00| seen|...

CVE-2024-56242

creationtimestamp| type| source ---|---|--- 2025-01-02 12:20:47+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ler2slryjr2o 2025-01-02 19:53:33+00:00| seen| https://infosec.exchange/users/cve/statuses/113760509126694174...

CVE-2024-37490

creationtimestamp| type| source ---|---|--- 2025-01-02 12:19:22+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ler2q365ad2e 2025-01-02 17:38:24+00:00| seen| https://infosec.exchange/users/cve/statuses/113759977723218951...

CVE-2023-47693

creationtimestamp| type| source ---|---|--- 2025-01-02 12:18:06+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ler2nsj3ir2o 2025-01-02 15:53:16+00:00| seen| https://infosec.exchange/users/cve/statuses/113759564333327586...

CVE-2023-47689

creationtimestamp| type| source ---|---|--- 2025-01-02 12:18:01+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ler2nnnq5522 2025-01-02 15:38:15+00:00| seen| https://infosec.exchange/users/cve/statuses/113759505297140595...

CVE-2023-47225

creationtimestamp| type| source ---|---|--- 2025-01-02 12:17:42+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ler2n3pp6i25 2025-01-02 15:08:13+00:00| seen| https://infosec.exchange/users/cve/statuses/113759387210898557...

CVE-2024-56035

creationtimestamp| type| source ---|---|--- 2025-01-02 09:19:48+00:00| seen| https://infosec.exchange/users/cve/statuses/113758017179229788 2025-01-02 09:23:36+00:00| seen| https://infosec.exchange/users/cve/statuses/113758032067931651 2025-01-02 10:16:04+00:00| seen|...