[SECURITY] Fedora 41 Update: xen-4.19.1-5.fc41

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

[SECURITY] Fedora 41 Update: rizin-0.7.4-5.fc41

Rizin is a free and open-source Reverse Engineering framework, providing a complete binary analysis experience with features like Disassembler, Hexadecimal editor, Emulation, Binary inspection, Debugger, and more. Rizin is a fork of radare2 with a focus on usability, working features and co de...

Millions of stalkerware users exposed again

There are many reasons not to use stalkerware, but the risk of getting exposed yourself seems to be a recurring deterrent, according to a new investigaton. As we have reported many times before, stalkerware-type apps are coded so badly that it’s possible to gain access to the back-end databases a...

OESA-2025-1212 uboot-tools security update

This package includes the mkimage program, which allows generation of U-Boot images in various formats, and the fwprintenv and fwsetenv programs to read and modify U-Boot's environment. Security Fixes: An integer overflow in sqfsinodesize in Das U-Boot before 2025.01-rc1 occurs in the symlink siz...

OESA-2025-1214 uboot-tools security update

This package includes the mkimage program, which allows generation of U-Boot images in various formats, and the fwprintenv and fwsetenv programs to read and modify U-Boot's environment. Security Fixes: An integer overflow in ext4fsreadsymlink in Das U-Boot before 2025.01-rc1 occurs for zalloc...

OESA-2025-1213 uboot-tools security update

This package includes the mkimage program, which allows generation of U-Boot images in various formats, and the fwprintenv and fwsetenv programs to read and modify U-Boot's environment. Security Fixes: An integer overflow in sqfsinodesize in Das U-Boot before 2025.01-rc1 occurs in the symlink siz...

[SECURITY] Fedora 41 Update: python3.6-3.6.15-43.fc41

Python 3.6 package for developers. This package exists to allow developers to test their code against an older version of Python. This is not a full Python stack and if you wish to run your applications with Python 3.6, see other distributions that support it, such as CentOS or RHEL with Software...

PT-2025-9118 · Dario Health · Dario Application Database/Internet-Based Server Infrastructure

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue allows observation of the cookie policy via built-in browser tools. In the presence of cross-site scripting XSS, this could potentially lead to full session compromise...

CVE-2024-54957

Nagios XI 2024R1.2.2 is vulnerable to an open redirect flaw on the Tools page, exploitable by users with read-only permissions. This vulnerability allows an attacker to craft a malicious link that redirects users to an arbitrary external URL without their consent...

Nagios XI 安全漏洞

Nagios XI is a suite of IT infrastructure monitoring solutions from the US-based Nagios. The solution supports monitoring and alerting of applications, services, operating systems, and more. A security vulnerability exists in Nagios XI version 2024R1.2.2, which stems from an open redirect on the...

CVE-2022-49423 rtla: Avoid record NULL pointer dereference

In the Linux kernel, the following vulnerability has been resolved: rtla: Avoid record NULL pointer dereference Fix the following null/derefnull.cocci errors: ./tools/tracing/rtla/src/osnoisehist.c:870:31-36: ERROR: record is NULL but dereferenced. ./tools/tracing/rtla/src/osnoisetop.c:650:31-36:...

CVE-2022-49423

In the Linux kernel, the following vulnerability has been resolved: rtla: Avoid record NULL pointer dereference Fix the following null/derefnull.cocci errors: ./tools/tracing/rtla/src/osnoisehist.c:870:31-36: ERROR: record is NULL but dereferenced. ./tools/tracing/rtla/src/osnoisetop.c:650:31-36:...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: influx, nats, cni-plugins, trillian, wait-for-port, speedtest-go, skaffold, rqlite, pombump, argo-workflows, s5cmd, prometheus-operator, vite, newrelic-infrastructure-agent, hubble-ui, mage, go-bindata, src-fingerprint, dockerize, kubernetes-dashboard-metrics-scraper...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: influx, nats, cni-plugins, trillian, wait-for-port, speedtest-go, skaffold, rqlite, pombump, argo-workflows, s5cmd, prometheus-operator, vite, newrelic-infrastructure-agent, hubble-ui, mage, go-bindata, src-fingerprint, dockerize, kubernetes-dashboard-metrics-scraper...

PYSEC-2025-120

jupyterhub-ltiauthenticator is a JupyterHub authenticator for learning tools interoperability LTI. LTI13Authenticator that was introduced in jupyterhub-ltiauthenticator 1.3.0 wasn't validating JWT signatures. This is believed to allow the LTI13Authenticator to authorize a forged request. Only use...

PYSEC-2025-120

jupyterhub-ltiauthenticator is a JupyterHub authenticator for learning tools interoperability LTI. LTI13Authenticator that was introduced in jupyterhub-ltiauthenticator 1.3.0 wasn't validating JWT signatures. This is believed to allow the LTI13Authenticator to authorize a forged request. Only use...

CVE-2023-25574 JupyterHub's LTI13Authenticator: JWT signature not validated

jupyterhub-ltiauthenticator is a JupyterHub authenticator for learning tools interoperability LTI. LTI13Authenticator that was introduced in jupyterhub-ltiauthenticator 1.3.0 wasn't validating JWT signatures. This is believed to allow the LTI13Authenticator to authorize a forged request. Only use...

GHSA-236W-P7WF-5PH8 vulnerabilities

Vulnerabilities for packages: neuvector-scanner-fips, helm-operator-fips, memcached-exporter, flux-notification-controller, neuvector-sigstore-interface-fips, step-issuer, tailscale, fulcio-fips, conftest-fips, oras, rootlesskit, prometheus-nats-exporter, buildah, request-1279, capslock,...

Magento Installed Packages

Binary data adobemagentopackageenum.nbin...

CVE-2024-32230

creationtimestamp| type| source ---|---|--- 2025-02-23 15:08:07+00:00| seen| https://bsky.app/profile/cyberpunk.tools/post/3liu4fnuys22r 2025-02-23 15:08:08+00:00| seen| https://bsky.app/profile/cyberpunk.tools/post/3liu4fogkcs2r 2025-02-23 15:08:08+00:00| seen|...