Chinese State Hackers Use New BRICKSTORM Malware Against VMware Systems

CISA, NSA, and Canadian Cyber Centre warn that PRC state-sponsored hackers are using BRICKSTORM, a stealthy Go-based backdoor, for long-term espionage in Government and IT networks...

GHSA-9H52-P55H-VW2F vulnerabilities

Vulnerabilities for packages: open-webui, semgrep...

GHSA-4FH9-H7WG-Q85M vulnerabilities

Vulnerabilities for packages: keycloak, langfuse...

CVE-2025-66414 vulnerabilities

Vulnerabilities for packages: langfuse...

CVE-2025-44005 vulnerabilities

Vulnerabilities for packages: caddy...

GHSA-H8CP-697H-8C8P vulnerabilities

Vulnerabilities for packages: caddy-fips, caddy...

CVE-2019-15575 vulnerabilities

Vulnerabilities for packages: gitlab-operator-fips...

GHSA-4FV6-2265-MQXM vulnerabilities

Vulnerabilities for packages: gitlab-operator-fips...

GHSA-54H4-GJC6-H34H vulnerabilities

Vulnerabilities for packages: gitlab-operator-fips...

GHSA-94FV-WXC5-F8VM vulnerabilities

Vulnerabilities for packages: gitlab-operator-fips...

GHSA-WQ7H-QGQ6-WJQM vulnerabilities

Vulnerabilities for packages: gitlab-operator-fips...

GHSA-WXM8-9V8Q-CPXR vulnerabilities

Vulnerabilities for packages: gitlab-operator-fips...

GHSA-97GM-QXRM-C6W2 vulnerabilities

Vulnerabilities for packages: gitlab-operator-fips...

CVE-2018-15472 vulnerabilities

Vulnerabilities for packages: gitlab-operator-fips...

CVE-2019-9485 vulnerabilities

Vulnerabilities for packages: gitlab-operator-fips...

CVE-2019-10110 vulnerabilities

Vulnerabilities for packages: gitlab-operator-fips...

CVE-2025-66577

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.27.0, a vulnerability allows attacker-controlled HTTP headers to influence server-visible metadata, logging, and authorization decisions. An attacker can supply X-Forwarded-For or X-Real-IP headers which...

CVE-2025-66566

yawkat LZ4 Java provides LZ4 compression for Java. Insufficient clearing of the output buffer in Java-based decompressor implementations in lz4-java 1.10.0 and earlier allows remote attackers to read previous buffer contents via crafted compressed input. In applications where the output buffer is...

CVE-2025-14104

A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the setpwnam function, affecting SUID Set User ID login-utils utilities writing to the password database...

CVE-2025-6966

NULL pointer dereference in TagSection.keys in python-apt on APT-based Linux systems allows a local attacker to cause a denial of service process crash via a crafted deb822 file with a malformed non-UTF-8 key...