SUSE-SU-2025:0564-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Confidential Computing kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-40980: dropmonitor: replace spinlock by rawspinlock bsc1227937. - CVE-2024-46858: mptcp: pm: Fix uaf in timerdeletesync bsc1231088. -...

CVE-2025-24894

creationtimestamp| type| source ---|---|--- 2025-02-17 13:25:14+00:00| published-proof-of-concept| https://github.com/italia/spid-aspnetcore/security/advisories/GHSA-36h8-r92j-w9vw 2025-02-18 19:16:16+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lihxwsfpyg2y 2025-02-1...

CVE-2024-54756

creationtimestamp| type| source ---|---|--- 2025-02-17 08:34:31+00:00| seen| https://bsky.app/profile/hacker.at.thenote.app/post/3liedme2kf22n 2025-02-17 20:02:02+00:00| seen| https://bsky.app/profile/pmloik.bsky.social/post/3lifjzq2s6f2a 2025-02-20 23:16:56+00:00| published-proof-of-concept|...

CVE-2025-1366

creationtimestamp| type| source ---|---|--- 2025-02-17 00:28:04+00:00| seen| https://infosec.exchange/users/cve/statuses/114016392545078897 2025-02-17 01:15:30+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lidl3d7hiw2t 2025-02-17 03:38:40+00:00| seen|...

SUSE: Security Advisory (SUSE-SU-2023:1800-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Security Update Validation Report February 2025

Microsoft’s February 2025 security updates have passed Citrix testing the updates are listed below. The testing is not all-inclusive; all tests are executed against English only environments and issues may still be found upon implementation. Follow best practices for testing and installing softwa...

Fedora: Security Advisory (FEDORA-2025-666aaa6a0d)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2023:1848-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2025-61b9344baf)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 41 : microcode_ctl (2025-c99f9d789a)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-c99f9d789a advisory. - Update to upstream 2.1-48. 20250211 - Addition of 06-bf-06/0x07 microcode in intel-ucode/06-97-02 at revision 0x38; - Addition of 06-bf-07/0x07...

CGA-Q2CP-8FW5-4MG2

Bulletin has no description...

CVE-2025-1302

creationtimestamp| type| source ---|---|--- 2025-02-15 05:06:08+00:00| seen| https://infosec.exchange/users/cve/statuses/114006161366925881 2025-02-15 05:15:34+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li6xkquhej27 2025-02-15 06:48:21+00:00| seen|...

Photon OS 5.0: Linux PHSA-2025-5.0-0472

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0472. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Updated ffmpeg packages fix security vulnerabilities

A buffer overflow vulnerability in Ffmpeg v.n6.1-3-g466799d4f5 allows a local attacker to execute arbitrary code via the ffbwdiffilterintrac function in the libavfilter/bwdifdsp.c:125:5 component. CVE-2023-49502 FFmpeg version n6.1.1 was discovered to contain a heap use-after-free via the...

WordPress DirectoryPress Frontend plugin <= 2.7.9 - Cross-Site Request Forgery to Listing Status Update vulnerability

Cross-Site Request Forgery to Listing Status Update vulnerability discovered by incognito in WordPress Plugin DirectoryPress Frontend versions = 2.7.9...

Metasploit Weekly Wrap-Up 02/14/2025

New module content 2 Unauthenticated RCE in NetAlertX Authors: Chebuya Rhino Security Labs and Takahiro Yokoyama Type: Exploit Pull request: 19868 contributed by Takahiro-Yoko Path: linux/http/netalertxrcecve202446506 AttackerKB reference: CVE-2024-46506 Description: A new module for an...

CVE-2025-25297

creationtimestamp| type| source ---|---|--- 2025-02-14 19:28:53+00:00| seen| https://infosec.exchange/users/cve/statuses/114003891483235545 2025-02-14 20:16:03+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li5zfzryra2a 2025-02-14 20:49:10+00:00| seen|...

CGA-MXW5-M488-459H

Bulletin has no description...

CVE-2025-25290

creationtimestamp| type| source ---|---|--- 2025-02-14 17:28:40+00:00| published-proof-of-concept| https://github.com/octokit/request.js/security/advisories/GHSA-rmvr-2pp2-xj38 2025-02-14 19:40:19+00:00| seen| https://infosec.exchange/users/cve/statuses/114003936429038682 2025-02-14 20:15:57+00:0...

CVE-2025-26156

creationtimestamp| type| source ---|---|--- 2025-02-14 17:16:15+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li5peim7o42a 2025-02-14 18:45:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3li5ud7pi242p 2025-02-14 19:17:54+00:00|...