6719 matches found
compat-openssl10 security update
An update is available for compat-openssl10. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The OpenSSL toolkit provides support for secure communications betwe...
Moderate: Red Hat Security Advisory: qt5-qtbase security update
An update for qt5-qtbase is now available for Red Hat Enterprise Linux 9.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available f...
Exploit for OS Command Injection in Docker
CDK - Zero Dependency Container Penetration Toolkit English | ็ฎไฝไธญๆ Legal Disclaimer Usage of CDK for attacking targets without prior mutual consent is illegal. CDK is for security testing purposes only. Overview CDK is an open-sourced container penetration toolkit, designed for offering stable...
NVIDIA Container Toolkit Backlink Vulnerability
NVIDIA Container Toolkit is a container toolkit introduced by NVIDIA for directly invoking GPU resources in containers, solving the problems of complex device access and insufficient resource isolation faced by traditional containerized GPU computing. NVIDIA Container Toolkit suffers from a...
็ผๅทๆคๅ
Bun is a Bun open source all-in-one toolkit for JavaScript and TypeScript applications. This CVE number has been withdrawn...
Enabling Cyber Security Education through Digital Twins and Generative AI
Digital Twins DTs are gaining prominence in cybersecurity for their ability to replicate complex IT Information Technology, OT Operational Technology, and IoT Internet of Things infrastructures, allowing for real time monitoring, threat analysis, and system simulation. This study investigates how...
SUSE CVE-2025-23266
NVIDIA Container Toolkit for all platforms contains a vulnerability in some hooks used to initialize the container, where an attacker could execute arbitrary code with elevated permissions. A successful exploit of this vulnerability might lead to escalation of privileges, data tampering,...
CVE-2025-23266 vulnerabilities
Vulnerabilities for packages: nvidia-container-toolkit...
GHSA-VMG3-7V43-9G23 vulnerabilities
Vulnerabilities for packages: nvidia-container-toolkit...
CVE-2025-23266 vulnerabilities
Vulnerabilities for packages: nvidia-container-toolkit...
GHSA-VMG3-7V43-9G23 vulnerabilities
Vulnerabilities for packages: nvidia-container-toolkit...
CVE-2025-54121 Starlette has possible denial-of-service vector when parsing large files in multipart forms
Starlette is a lightweight ASGI Asynchronous Server Gateway Interface framework/toolkit, designed for building async web services in Python. In versions 0.47.1 and below, when parsing a multi-part form with large files greater than the default max spool size starlette will block the main thread t...
โก Weekly Recap: SharePoint 0-Day, Chrome Exploit, macOS Spyware, NVIDIA Toolkit RCE and More
Even in well-secured environments, attackers are getting inโnot with flashy exploits, but by quietly taking advantage of weak settings, outdated encryption, and trusted tools left unprotected. These attacks donโt depend on zero-days. They work by staying unnoticedโslipping through the cracks in...
The SOC files: Rumble in the jungle or APT41โs new target in Africa
Introduction Some time ago, Kaspersky MDR analysts detected a targeted attack against government IT services in the African region. The attackers used hardcoded names of internal services, IP addresses, and proxy servers embedded within their malware. One of the C2s was a captive SharePoint serve...
Exploit for Deserialization of Untrusted Data in Microsoft
๐ Bluefire Redteam โ SharePoint CVE-2025-53770 Detection & Rem...
(Pwn2Own) NVIDIA Container Toolkit Environment Variable Handling Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of NVIDIA Container Toolkit. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handlin...
The vulnerability of the enable-cuda-compat function in software for creating and running NVIDIA Container Toolkit containers and NVIDIA GPU Operator resource management software allows a malicious actor to execute arbitrary code, gain elevated privileges, unauthorizedly access and modify protected information, or cause service failures.
The vulnerability of the enable-cuda-compat function in software for creating and running NVIDIA Container Toolkit containers, as well as in software for managing NVIDIA GPU resources, is related to the use of an unreliable search path. Exploiting this vulnerability allows a remote attacker to...
CVE-2025-6813
The aapanel WP Toolkit plugin for WordPress is vulnerable to Privilege Escalation due to missing authorization checks within the autologin function in versions 1.0 to 1.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to bypass all role checks and gai...
CVE-2025-23266
A flaw was found in the NVIDIA Container Toolkit. This vulnerability allows execution of arbitrary code with elevated permissions via improperly secured container initialization hooks. This can potentially lead to privilege escalation, data tampering, information disclosure, and denial of service...
Critical NVIDIA Container Toolkit Flaw Allows Privilege Escalation on AI Cloud Services
Cybersecurity researchers have disclosed a critical container escape vulnerability in the NVIDIA Container Toolkit that could pose a severe threat to managed AI cloud services. The vulnerability, tracked as CVE-2025-23266, carries a CVSS score of 9.0 out of 10.0. It has been codenamed NVIDIAScape...