54258 matches found
GO-2025-3961 Podman Creates Temporary File with Insecure Permissions in github.com/containers/podman
Podman Creates Temporary File with Insecure Permissions in github.com/containers/podman...
Malicious code in webpikes (npm)
The package webpikes was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...
ALSA-2025:15900 Important: podman security update
The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fixes: podman: Podman kube play command may overwrite host files CVE-2025-9566 For more details...
GHSA-JJ4J-X5WW-CWH9 Before action, Ash's hooks may execute in certain scenarios despite a request being forbidden
Summary Certain bulk action calls with a beforetransaction hook and no aftertransaction hook, will call the beforetransaction hook before authorization is checked and a Forbidden error is returned, when called as a bulk action. The impact is that a malicious user could cause a beforetransaction t...
PT-2025-38117
CVE-2025-55777 - Apache Non-Security Issue CVE ID : CVE-2025-55777 Published : Sept. 15, 2025, 6:15 p.m. | 2 hours, 43 minutes ago Description : Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that ...
Malicious code in tronkeypy (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 15beba1021e7f60daed074087734c4a931b0b0d93695e6d1bf28aea909f41a80 Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...
CVE-2025-10269
creationtimestamp| type| source ---|---|--- 2025-09-12 05:12:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lymiu5td4k2x 2025-09-12 06:09:49+00:00| seen| https://gist.github.com/Darkcrai86/f5e93dd4274033704dbb452da7ce70b6...
CVE-2025-57579
An issue in TOTOLINK Wi-Fi 6 Router Series Device X2000R-Gh-V2.0.0 allows a remote attacker to execute arbitrary code via the default password...
CVE-2025-39783
In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: Fix configfs group list head handling Doing a listdel on the epfgroup field of struct pciepfdriver in pciepfremovecfs is not correct as this field is a list head, not a list entry. This listdel call triggers a KASA...
CVE-2025-9160
A code execution security issue exists in the affected product. An attacker with physical access could abuse the maintenance menu of the controller with a crafted payload. The security issue can result in arbitrary code execution...
CVE-2025-54376
creationtimestamp| type| source ---|---|--- 2025-09-10 23:06:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyjdwzapgl2m 2025-09-11 04:31:48+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lyjw3ydz522q...
CVE-2025-20248
creationtimestamp| type| source ---|---|--- 2025-09-10 16:34:32+00:00| seen| https://gist.github.com/Darkcrai86/93d1a3260721908b19cc37efd0c96de7 2025-09-11 14:44:47+00:00| seen| https://bsky.app/profile/blackhatnews.tokyo/post/3lykye3vdpw2t 2025-09-11 15:21:11+00:00| seen|...
CVE-2025-58063
CoreDNS is a DNS server that chains plugins. Starting in version 1.2.0 and prior to version 1.12.4, the CoreDNS etcd plugin contains a TTL confusion vulnerability where lease IDs are incorrectly used as TTL values, enabling DNS cache pinning attacks. This effectively creates a DoS condition for D...
2025-09 Cumulative Update for Windows 10 Version 1607 for x64-based Systems (KB5065427)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
2025-09 Cumulative Update for Windows 10 Version 1809 for x64-based Systems (KB5065428)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
2025-09 Dynamic Cumulative Update for Windows 10 Version 22H2 for x64-based Systems (KB5065429)
ComponentUpdate: A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft...
2025-09 Dynamic Cumulative Update for Windows 10 Version 22H2 for ARM64-based Systems (KB5065429)
ComponentUpdate: A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft...
2025-09 Cumulative Update for Windows Server 2016 for x64-based Systems (KB5065427)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
2025-09 Cumulative Update for Windows 10 Version 1507 for x64-based Systems (KB5065430)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...