SUSE-SU-2026:22018-1 Security update for python-pip

This update for python-pip fixes the following issues: - CVE-2026-3219: concatenated tar and ZIP files are handled as ZIP files, resulting in possibly obfuscated malicious code bsc1262429. - CVE-2026-6357: pip self-update functionality can import newly installed modules after wheel installation,...

Important Photon OS Security Update - PHSA-2026-5.0-90-0850

Updates of 'chromium' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2026-5.0-90-0778

Updates of 'dotnet-runtime' packages of Photon OS have been released...

.NET 8.0 Update - October 14, 2025 (KB5068331)

.NET 8.0 Update - October 14, 2025 KB5068331 .NET 8.0 has been refreshed with the latest update as of October 14, 2025. This update contains security and non-security fixes. See the release notes for details about updated packages. .NET 8.0 servicing updates are upgrades. The latest servicing...

Important Photon OS Security Update - PHSA-2025-5.0-91-0578

Updates of 'icu' packages of Photon OS have been released...

CVE-2025-8640

The CVE-2025-8640 entry describes a command-injection vulnerability in Kenwood DMX958XR firmware update handling. The flaw arises from insufficient validation of a user-supplied string used to construct a system call, enabling a physically present attacker to run code as root without authenticati...

[SECURITY] [DSA 5934-1] roundcube security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5934-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff June 02, 2025 https://www.debian.org/security/faq -...

Mozilla Firefox Security Update (mfsa_2025-42) - Windows

Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...

Debian dla-4163 : bundler - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4163 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4163-1 [email protected]...

CVE-2024-44241

CVE-2024-44241 affects Apple iOS and iPadOS components in DCP firmware. Connected sources confirm that the vulnerability was addressed by improved bounds checks and is fixed in iOS 18.1 and iPadOS 18.1. The CVE is described as enabling a potential attacker to cause unexpected system termination o...

Critical Photon OS Security Update - PHSA-2023-5.0-92-0010

Updates of 'libtar' packages of Photon OS have been released...

Music Gallery Site v1.0 - SQL Injection on page view_music_details.php

Exploit Title: Music Gallery Site v1.0 - SQL Injection on page viewmusicdetails.php Exploit Author: Muhammad Navaid Zafar Ansari Date: 21 February 2023 CVE Assigned: CVE-2023-0961 mitre.org nvd.nist.org Author Name: Muhammad Navaid Zafar Ansari Vendor Homepage: https://www.sourcecodester.com...

SUSE-SU-2022:2997-1 Security update for python-pyxdg

This update for python-pyxdg fixes the following issues: - CVE-2019-12761: Fixed a code injection issue in Category elements of a Menu XML bsc1137627...

CVE-2022-24676

updatecode in Admin.php in HYBBS2 through 2.3.2 allows arbitrary file upload via a crafted ZIP archive...

PT-2022-16793

Name of the Vulnerable Software and Affected Versions HYBBS2 versions 2.3.2 and earlier Description The issue allows for arbitrary file upload via a crafted ZIP archive. This is possible due to a problem in the update code function in Admin.php. Recommendations For HYBBS2 versions 2.3.2 and...

log4j security update

0:1.2.14-6.4.1 - Fix remote code execution vulnerability - Resolves: CVE-2021-4104 Orabug: 33689748...

CVE-2019-14054: Undefined Security Weakness

Improper permissions in XBLSEC region enable user to update XBLSEC code and data and divert the RAM dump path to normal cold boot path in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in Kamorta, MSM8998,...

OPENSUSE-SU-2020:0685-1 Security update for python-rpyc

This update for python-rpyc to 4.1.5 fixes the following issues: Security issue fixed: - CVE-2019-16328: Fixed a missing protocol security check that could have led to code execution boo1152987...

Debian DSA-4678-1 : firefox-esr - security update

Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code or information disclosure. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security...

SUSE-SU-2019:2119-1 Security update for containerd, docker, docker-runc, golang-github-docker-libnetwork

This update for containerd, docker, docker-runc, golang-github-docker-libnetwork fixes the following issues: Docker: - CVE-2019-14271: Fixed a code injection if the nsswitch facility dynamically loaded a library inside a chroot bsc1143409. - CVE-2019-13509: Fixed an information leak in the debug...