Shadow-utils: possible password leak during passwd(1) change

...

[SECURITY] Fedora 42 Update: golang-github-nvidia-container-toolkit-1.17.4-1.fc42

The NVIDIA Container Toolkit allows users to build and run NVIDIA GPU accelerated containers. The toolkit includes a container runtime library and utilities to automatically configure containers to leverage NVIDIA GPUs...

[SECURITY] Fedora 40 Update: perl-5.38.4-508.fc40

Perl is a high-level programming language with roots in C, sed, awk and shell scripting. Perl is good at handling processes and files, and is especially good at handling text. Perl's hallmarks are practicality and efficiency. While it is used to do a lot of different things, Perl's most common...

ROS-20250430-01

A vulnerability in the BusyBox set of command line utilities is related to a post-release usage error in the awk applet. Exploitation of the vulnerability could allow an attacker acting remotely, compromise a vulnerable system The BusyBox command line utility set vulnerability is related to a NUL...

AI-Based Crypto Tokens: the Illusion of Decentralized AI?

The convergence of blockchain and artificial intelligence AI has led to the emergence of AI-based tokens, which are cryptographic assets designed to power decentralized AI platforms and services. This paper provides a comprehensive review of leading AI-token projects, examining their technical...

Security update for cifs-utils

This update for cifs-utils fixes the following issues: CVE-2025-2312: Fixed cifs.upcall making an upcall to the wrong namespace in containerized environments while trying to get Kerberos credentials bsc1239680 Patch Instructions: To install this SUSE update use the SUSE recommended installation...

Malicious code in audio_helper_utils (npm)

--- -= Per source details. Do not edit below this line.=-...

[SECURITY] Fedora 41 Update: perl-5.40.2-515.fc41

Perl is a high-level programming language with roots in C, sed, awk and shell scripting. Perl is good at handling processes and files, and is especially good at handling text. Perl's hallmarks are practicality and efficiency. While it is used to do a lot of different things, Perl's most common...

RHBA-2021:4446 Red Hat Bug Fix Advisory: iscsi-initiator-utils bug fix and enhancement update

Bulletin has no description...

Malicious code in helper-plugin-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 637e6aa11d35ac301a88fea209827ad1ebfe949fe5c2db4ffd66509975d13ef6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Vulnerabilities fixed in Oracle Fusion Middleware

Oracle has fixed multiple vulnerabilities in several products, including the Utilities Application Framework, WebLogic Server, and Fusion Middleware. The vulnerabilities allow unauthenticated malicious actors to gain access to critical data, cause denial-of-service DoS, and in some cases even gai...

Prototype Pollution

js-object-utilities is vulnerable to Prototype Pollution. The vulnerability is due to unsanitized property assignment due to the lib.set function allowing attackers to modify the global prototype chain using crafted payloads...

Malicious code in @cat-wc/utilities (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ac8c9db89562180d78f3b248882e95e33c0c24a2bc4ffdfd76b1029506f1393d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-32664

Cross-Site Request Forgery CSRF vulnerability in ashokbasnet Nepali Date Utilities nepali-date-utilities allows Stored XSS.This issue affects Nepali Date Utilities: from n/a through = 1.0.15...

[SECURITY] Fedora 42 Update: uboot-tools-2025.04-1.fc42

This package contains a few U-Boot utilities - mkimage for creating boot imag es and fwprintenv/fwsetenv for manipulating the boot environment variables...

CVE-2025-32664

Cross-Site Request Forgery CSRF vulnerability in ashokbasnet Nepali Date Utilities nepali-date-utilities allows Stored XSS.This issue affects Nepali Date Utilities: from n/a through = 1.0.15...

CVE-2025-32664

CVE-2025-32664: Nepali Date Utilities (WordPress plugin) contains a CSRF-triggered Stored XSS vulnerability affecting versions up to 1.0.13. The connected Wordfence vulnerability list indicates this entry is currently Unpatched. No exploit details or mitigation steps are provided in the supplied ...

CVE-2025-32664 WordPress Nepali Date Utilities plugin <= 1.0.15 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in ashokbasnet Nepali Date Utilities nepali-date-utilities allows Stored XSS.This issue affects Nepali Date Utilities: from n/a through = 1.0.15...

CVE-2025-32664 WordPress Nepali Date Utilities plugin <= 1.0.15 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in ashokbasnet Nepali Date Utilities nepali-date-utilities allows Stored XSS.This issue affects Nepali Date Utilities: from n/a through = 1.0.15...

WordPress Nepali Date Utilities plugin <= 1.0.15 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by Nguyen Thi Huyen Trang - Skalucy in WordPress Plugin Nepali Date Utilities versions = 1.0.15...