K000159684: OpenSSH vulnerabilities CVE-2025-61984 and CVE-2025-61985

Security Advisory Description CVE-2025-61984 ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain possibly untrusted sources, potentially leading to code execution when a ProxyCommand is used. The untrusted sources are the command line and %-sequence...

Amazon Linux 2023 : composer (ALAS2023-2026-1365)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-1365 advisory. Composer is a dependency manager for PHP. In versions on the 2.x branch prior to 2.2.26 and 2.9.3, attackers controlling remote sources that Composer downloads from might in some way inject ANSI contro...

Low: composer

Issue Overview: Composer is a dependency manager for PHP. In versions on the 2.x branch prior to 2.2.26 and 2.9.3, attackers controlling remote sources that Composer downloads from might in some way inject ANSI control characters in the terminal output of various Composer commands, causing mangle...

CVE-2026-23954

creationtimestamp| type| source ---|---|--- 2026-01-22 19:07:39+00:00| published-proof-of-concept| https://github.com/lxc/incus/security/advisories/GHSA-7f67-crqm-jgh7 2026-01-22 23:01:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3md2c43xfaz2m 2026-01-22 23:24:08+00:00|...

CVE-2025-66960

A flaw was found in ollama. A remote attacker can exploit this vulnerability by providing untrusted GGUF GGML Unified Format metadata with a specially crafted string length. This can cause the readGGUFV1String function to improperly process the input, leading to a denial of service, which makes t...

CVE-2025-54816

creationtimestamp| type| source ---|---|--- 2026-01-22 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-022-08 2026-01-23 00:02:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3md2fkhnomo2x 2026-01-23 00:09:48+00:00| seen|...

CVE-2025-4764

creationtimestamp| type| source ---|---|--- 2026-01-22 10:59:56+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcyzshykif24 2026-01-22 11:53:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcz4rsp5dy2n...

RHSA-2026:0934

creationtimestamp| type| source ---|---|--- 2026-01-22 07:17:18+00:00| seen| Telegram/lGv1yy1cS3Qd5QcSfBz2heRy30BQbqauAGACazKYMQPWz0 2026-01-22 07:17:33+00:00| seen| Telegram/tBmM1hwypCv-VLMpuj8Kze67Wi8ihsn5KG2dbjWdD4A-1M 2026-01-22 07:17:54+00:00| seen|...

CVE-2026-23952

ImageMagick is free and open-source software used for editing and manipulating digital images. Versions 14.10.1 and below have a NULL pointer dereference vulnerability in the MSL Magick Scripting Language parser when processing tags before images are loaded. This can lead to DoS attack due to...

Oracle Linux 8 / 9 : java-17-openjdk (ELSA-2026-0927)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-0927 advisory. 1:17.0.18.0.8-1.0.1 - Add Oracle vendor bug URL Orabug: 34340155 1:17.0.18.0.8-1 - Update to jdk-17.0.18+8 GA - Add to .gitignore...

GHSA-R92C-9C7F-3PJ8 OpenTofu has High CPU usage in "tofu init" with maliciously-crafted module packages in .zip format

Impact Unauthenticated denial of service. Summary When installing module packages from attacker-controlled sources, tofu init may cause high CPU usage when encountering maliciously-crafted .zip archives for either provider or module distribution packages. Those who depend on modules or providers...

CVE-2025-68137

creationtimestamp| type| source ---|---|--- 2026-01-21 20:34:22+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcxjgpttjr27 2026-01-21 21:38:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcxmzmj52i2t...

CVE-2025-63388

creationtimestamp| type| source ---|---|--- 2026-01-21 17:31:07+00:00| seen| https://gist.github.com/Cristliu/c2bc7d05abd89db8eb542a453a528d77 2026-01-21 17:31:26+00:00| seen| https://gist.github.com/Cristliu/7b2494effb6bf1b8335574d2101a9c06...

CVE-2026-20045

creationtimestamp| type| source ---|---|--- 2026-01-21 17:08:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcx5ws5jc72g 2026-01-21 17:38:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcx7lg3wqt2h 2026-01-21 18:17:43+00:00| seen|...

CVE-2026-24016

creationtimestamp| type| source ---|---|--- 2026-01-21 08:25:10+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcwaortztj2m 2026-01-21 09:43:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcwf2qm4zk2h...

CVE-2026-24061

creationtimestamp| type| source ---|---|--- 2026-01-21 08:01:25+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcw7ecrteg25 2026-01-21 09:38:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcwers7abk2t 2026-01-21 12:18:21+00:00| seen|...

CVE-2026-21973

creationtimestamp| type| source ---|---|--- 2026-01-20 22:38:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcv7vwrc4d22 2026-01-20 23:05:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcvbfumzgj26 2026-01-21 08:17:44+00:00| seen|...

CVE-2026-21982

creationtimestamp| type| source ---|---|--- 2026-01-20 22:38:00+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcv7utxhj42a 2026-01-20 23:53:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcve3qjlb72n 2026-01-21 07:51:09+00:00| seen|...

CVE-2026-21990

creationtimestamp| type| source ---|---|--- 2026-01-20 22:37:53+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcv7unba2t22 2026-01-20 23:08:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcvblox7dk2t 2026-01-21 07:48:22+00:00| seen|...

CVE-2025-68585

creationtimestamp| type| source ---|---|--- 2026-01-20 20:30:51+00:00| seen| Telegram/LU77hUDps2Y51fMWlO6eVAIa7JCeDUxhhoCsl2XMBJe05Y4 2026-01-20 20:31:02+00:00| seen| Telegram/q6TKAcaUnyuj3Ucsl9EsONDLyiAkaOrk2Vkrpx4t73pEU...