Linux Distros Unpatched Vulnerability : CVE-2025-13019

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Same-origin policy bypass in the DOM: Workers component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Thunderbird 145, and Thunderbird 140.5...

Linux Distros Unpatched Vulnerability : CVE-2025-60876

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - BusyBox wget thru 1.3.7 accepted raw CR 0x0D/LF 0x0A and other C0 control bytes in the HTTP request- target path/query, allowing the request line to be split an...

ALSA-2025:21020 Important: sssd security update

The System Security Services Daemon SSSD service provides a set of daemons to manage access to remote directories and authentication mechanisms. It also provides the Name Service Switch NSS and the Pluggable Authentication Modules PAM interfaces toward the system, and a pluggable back-end system ...

MAL-2025-66547 Malicious code in read-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d50e44ff451ef9fc81f95c35723295ddf21c4809772def9f17d454f36060ffa5 The package read-async was found to contain malicious code. Source: ghsa-malware 2425ce18f083d47fb3a3ea1f6f69939c013edff9d27960bac75e225e09d390cf Any...

CVE-2025-64182

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In versions 3.2.0 through 3.2.4, 3.3.0 through 3.3.5, and 3.4.0 through 3.4.2, a memory safety bug in the legacy OpenEXR Python adapter the deprecated...

CVE-2025-64507

Incus is a system container and virtual machine manager. An issue in versions prior to 6.0.6 and 6.19.0 affects any Incus user in an environment where an unprivileged user may have root access to a container with an attached custom storage volume that has the security.shifted property set to true...

CVE-2025-62813 affecting package lz4 for versions less than 1.9.4-2

CVE-2025-62813 affecting package lz4 for versions less than 1.9.4-2. A patched version of the package is available...

Malicious code in reactjs-fabric (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b531a9e3325f1fd726f8701788421a371bdc906c43ce0936034102f34f7d18e8 The package reactjs-fabric was found to contain malicious code. Source: ghsa-malware caed8c64b1139916ddbdb9d303208e80711537ff2e907c8533c12e07ae75cfaf...

Apple iOS and iPadOS Cache Mishandling Vulnerability

Apple iOS is an operating system developed for mobile devices.Apple iPadOS is an operating system for the iPad tablet computer. A cache mishandling vulnerability exists in Apple iOS and iPadOS, which can be exploited by attackers to cause malicious applications to track users...

Apple iOS and iPadOS Insufficient Boundary Check Vulnerability

Apple iOS is an operating system developed for mobile devices.Apple iPadOS is an operating system for the iPad tablet computer. Apple iOS and iPadOS suffer from a boundary check insufficiency vulnerability that can be exploited by an attacker to cause a process crash triggered by a malicious HID...

Dell Command Monitor Elevation of Privilege Vulnerability

Dell Command Monitor is a software from Dell USA that manages Dell's enterprise client systems. An elevation of privilege vulnerability exists in Dell Command Monitor, which can be exploited by an attacker to cause an elevation of privilege...

PT-2025-46215

Name of the Vulnerable Software and Affected Versions Soft Serve versions prior to 0.11.1 Description Soft Serve, a self-hostable Git server, contains a Server-Side Request Forgery SSRF issue. The application does not validate webhook URLs, which allows repository administrators to create webhook...

Synergistic Development of Cybersecurity and Functional Safety for Smart Electric Vehicles

The introduction of Smart Electric Vehicles SEVs represents an increasingly disruption on automotive area, once integrates advanced computer and communication technologies to highly electrical cars, which come with high performances, environment friendly and user friendly characteristics . But th...

StreamGuard

🛡️ StreamGuard Premium Professional Surveillance & IoT Secu...

[SECURITY] Fedora 42 Update: kea-3.0.2-1.fc42

DHCP implementation from Internet Systems Consortium, Inc. that features fully functional DHCPv4, DHCPv6 and Dynamic DNS servers. Both DHCP servers fully support server discovery, address assignment, renewal, rebinding and release. The DHCPv6 server supports prefix delegation. Both servers suppor...

The Government Shutdown Is a Ticking Cybersecurity Time Bomb

Many critical systems are still being maintained, and the cloud provides some security cover. But experts say that any lapses in protections like patching and monitoring could expose government systems...

CVE-2025-12863

Rejected reason: This CVE was assigned for a libxml2 issue1012 but later deemed not valid. Ref.: https://gitlab.gnome.org/GNOME/libxml2/-/issues/1012note2608283...

CVE-2025-12875

A weakness has been identified in mruby 3.4.0. This vulnerability affects the function aryfillexec of the file mrbgems/mruby-array-ext/src/array.c. Executing a manipulation of the argument start/length can lead to out-of-bounds write. The attack needs to be launched locally. The exploit has been...

“I Paid Twice” Scam Infects Booking.com Users with PureRAT via ClickFix

Cybersecurity firm Sekoia reports a widespread fraud where criminals compromise hotel systems Booking.com, Expedia and others with PureRAT malware, then use stolen reservation data to phish and defraud guests...

Malicious Package

Overview SqlLiteRepository is a malicious package. This package contains malicious code that injects time-delayed destructive payloads into database operations and target industrial control systems. Published under the NuGet alias shanhai666 together with 8 other malicious packages between 2023 a...