Fedora: Security Advisory (FEDORA-2025-12b00d8e2c)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 43 : tkimg (2025-13b23a6952)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-13b23a6952 advisory. Update to 2.1.0. Update bundled libpng, libtiff, to latest versions. Built against TCL/TK 9. Fix FTBFS. Tenable has extracted the preceding...

EUVD-2025-205459

FastMCP updated to MCP 1.23+ due to CVE-2025-66416...

UBUNTU-CVE-2023-54139

In the Linux kernel, the following vulnerability has been resolved: tracing/userevents: Ensure write index cannot be negative The write index indicates which event the data is for and accesses a per-file array. The index is passed by user processes during write calls as the first 4 bytes. Ensure...

Malicious code in utif-updated (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24ed42240868e0b6b0eff870ffa0f42d95bca3659f922078257f1a71694da3f1 The package utif-updated was found to contain malicious code. Source: ghsa-malware 3d854467203e61d8d828eafa2a699ba639c90e4045f0e92f033fdade35096cac A...

EUVD-2025-204715

Malicious code in utif-updated npm...

MAL-2025-192688 Malicious code in utif-updated (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24ed42240868e0b6b0eff870ffa0f42d95bca3659f922078257f1a71694da3f1 The package utif-updated was found to contain malicious code. Source: ghsa-malware 3d854467203e61d8d828eafa2a699ba639c90e4045f0e92f033fdade35096cac A...

Huawei EulerOS: Security Advisory for openjpeg2 (EulerOS-SA-2025-2590)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2025-52309

3/ CVE-2023-1423 highlights vulnerabilities exploited by AI-driven phishing, emphasizing the need for updated defenses. CyberSecurity Hacking...

Mattermost Desktop App exposes sensitive information in its application logs

Mattermost Desktop App versions 6.0.0 fail to sanitize sensitive information from Mattermost logs and clear data on server deletion which allows an attacker with access to the users system to gain access to potentially sensitive information via reading the application logs. A fix is available for...

Important: Red Hat Security Advisory: RHOAI 2.25.1 - Red Hat OpenShift AI

Updated images are now available for Red Hat OpenShift AI. Release of RHOAI 2.25.1 provides these changes:...

Important: Red Hat Security Advisory: Red Hat multicluster global hub 1.5.2 security update

Red Hat multicluster global hub v1.5.2 general availability release images, which provide security fixes, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an improperly updated fence that could lead to the use of resources after they have been released...

CVE-2025-40190 affecting package kernel for versions less than 6.6.117.1-1

CVE-2025-40190 affecting package kernel for versions less than 6.6.117.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-40195 affecting package kernel for versions less than 6.6.117.1-1

CVE-2025-40195 affecting package kernel for versions less than 6.6.117.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-65430

An issue was discovered in allauth-django before 65.13.0. IdP: marking a user as isactive=False after having handed tokens for that user while the account was still active had no effect. Fixed the access/refresh tokens are now rejected...

openSUSE Security Advisory (SUSE-SU-2025:4381-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-67899

uriparser through 0.9.9 allows unbounded recursion and stack consumption, as demonstrated by ParseMustBeSegmentNzNc with large input containing many commas...

CVE-2025-67749

PCSX2 is a free and open-source PlayStation 2 PS2 emulator. In versions 2.5.377 and below, an unchecked offset and size used in a memcpy operation inside PCSX2's CDVD SCMD 0x91 and SCMD 0x8F handlers allow a specially crafted disc image or ELF to cause an out-of-bounds read from emulator memory...

CVE-2025-67713

Miniflux 2 is an open source feed reader. Versions 2.2.14 and below treat redirecturl as safe when url.Parse....IsAbs is false, enabling phishing flows after login. Protocol-relative URLs like //ikotaslabs.com have an empty scheme and pass that check, allowing post-login redirects to...