[SECURITY] Fedora 41 Update: python3.6-3.6.15-43.fc41

Python 3.6 package for developers. This package exists to allow developers to test their code against an older version of Python. This is not a full Python stack and if you wish to run your applications with Python 3.6, see other distributions that support it, such as CentOS or RHEL with Software...

PT-2025-9118 · Dario Health · Dario Application Database/Internet-Based Server Infrastructure

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue allows observation of the cookie policy via built-in browser tools. In the presence of cross-site scripting XSS, this could potentially lead to full session compromise...

CVE-2024-54957

Nagios XI 2024R1.2.2 is vulnerable to an open redirect flaw on the Tools page, exploitable by users with read-only permissions. This vulnerability allows an attacker to craft a malicious link that redirects users to an arbitrary external URL without their consent...

Nagios XI 安全漏洞

Nagios XI is a suite of IT infrastructure monitoring solutions from the US-based Nagios. The solution supports monitoring and alerting of applications, services, operating systems, and more. A security vulnerability exists in Nagios XI version 2024R1.2.2, which stems from an open redirect on the...

CVE-2022-49423 rtla: Avoid record NULL pointer dereference

In the Linux kernel, the following vulnerability has been resolved: rtla: Avoid record NULL pointer dereference Fix the following null/derefnull.cocci errors: ./tools/tracing/rtla/src/osnoisehist.c:870:31-36: ERROR: record is NULL but dereferenced. ./tools/tracing/rtla/src/osnoisetop.c:650:31-36:...

CVE-2022-49423

In the Linux kernel, the following vulnerability has been resolved: rtla: Avoid record NULL pointer dereference Fix the following null/derefnull.cocci errors: ./tools/tracing/rtla/src/osnoisehist.c:870:31-36: ERROR: record is NULL but dereferenced. ./tools/tracing/rtla/src/osnoisetop.c:650:31-36:...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: smarter-device-manager, cluster-proportional-autoscaler, tailscale, memcached-exporter, delve, sbomqs, mongo-tools, temporal-ui-server, crossplane-provider-azure, flux-image-reflector-controller, gosu, nri-mysql, slsa-verifier, k8ssandra-operator, yam, oras, dockeriz...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: smarter-device-manager, cluster-proportional-autoscaler, tailscale, memcached-exporter, delve, sbomqs, mongo-tools, temporal-ui-server, crossplane-provider-azure, flux-image-reflector-controller, gosu, nri-mysql, slsa-verifier, k8ssandra-operator, yam, oras, dockeriz...

PYSEC-2025-120

jupyterhub-ltiauthenticator is a JupyterHub authenticator for learning tools interoperability LTI. LTI13Authenticator that was introduced in jupyterhub-ltiauthenticator 1.3.0 wasn't validating JWT signatures. This is believed to allow the LTI13Authenticator to authorize a forged request. Only use...

PYSEC-2025-120

jupyterhub-ltiauthenticator is a JupyterHub authenticator for learning tools interoperability LTI. LTI13Authenticator that was introduced in jupyterhub-ltiauthenticator 1.3.0 wasn't validating JWT signatures. This is believed to allow the LTI13Authenticator to authorize a forged request. Only use...

CVE-2023-25574 JupyterHub's LTI13Authenticator: JWT signature not validated

jupyterhub-ltiauthenticator is a JupyterHub authenticator for learning tools interoperability LTI. LTI13Authenticator that was introduced in jupyterhub-ltiauthenticator 1.3.0 wasn't validating JWT signatures. This is believed to allow the LTI13Authenticator to authorize a forged request. Only use...

GHSA-236W-P7WF-5PH8 vulnerabilities

Vulnerabilities for packages: regclient, metrics-server, harbor-cli, chartmuseum, harbor-registry-fips, aws-efs-csi-driver-fips, dataplaneapi-fips, timestamp-authority-fips, step, git-lfs, timoni, velero-plugin-for-aws, pluto, libnvidia-container, nodetaint, aws-flb-cloudwatch,...

Magento Installed Packages

Binary data adobemagentopackageenum.nbin...

CVE-2024-32230

creationtimestamp| type| source ---|---|--- 2025-02-23 15:08:07+00:00| seen| https://bsky.app/profile/cyberpunk.tools/post/3liu4fnuys22r 2025-02-23 15:08:08+00:00| seen| https://bsky.app/profile/cyberpunk.tools/post/3liu4fogkcs2r 2025-02-23 15:08:08+00:00| seen|...

CVE-2024-54958

Nagios XI 2024R1.2.2 is susceptible to a stored Cross-Site Scripting XSS vulnerability in the Tools page. This flaw allows an attacker to inject malicious scripts into the Tools interface, which are then stored and executed in the context of other users accessing the page...

OESA-2025-1154 postgresql security update

PostgreSQL is an advanced Object-Relational database management system DBMS. The base postgresql package contains the client programs that you'll need to access a PostgreSQL DBMS server, as well as HTML documentation for the whole system. These client programs can be located on the same machine a...

CVE-2024-54958

Nagios XI 2024R1.2.2 is susceptible to a stored Cross-Site Scripting XSS vulnerability in the Tools page. This flaw allows an attacker to inject malicious scripts into the Tools interface, which are then stored and executed in the context of other users accessing the page...

CVE-2024-54958

Nagios XI 2024R1.2.2 is susceptible to a stored Cross-Site Scripting XSS vulnerability in the Tools page. This flaw allows an attacker to inject malicious scripts into the Tools interface, which are then stored and executed in the context of other users accessing the page...

postgresql: PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation

A flaw was found in PostgreSQL. Due to improper neutralization of quoting syntax, affected versions potentially allow a database input provider to achieve SQL injection in certain usage patterns. Specifically, SQL injection requires the application to use the affected function's result to constru...

postgresql: PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation

A flaw was found in PostgreSQL. Due to improper neutralization of quoting syntax, affected versions potentially allow a database input provider to achieve SQL injection in certain usage patterns. Specifically, SQL injection requires the application to use the affected function's result to constru...