CVE-2025-2312 cifs.upcall makes an upcall to the wrong namespace in containerized environments

A flaw was found in cifs-utils. When trying to obtain Kerberos credentials, the cifs.upcall program from the cifs-utils package makes an upcall to the wrong namespace in containerized environments. This issue may lead to disclosing sensitive data from the host's Kerberos credentials cache...

CVE-2025-2312 cifs.upcall makes an upcall to the wrong namespace in containerized environments

A flaw was found in cifs-utils. When trying to obtain Kerberos credentials, the cifs.upcall program from the cifs-utils package makes an upcall to the wrong namespace in containerized environments. This issue may lead to disclosing sensitive data from the host's Kerberos credentials cache...

CVE-2025-2312 cifs.upcall makes an upcall to the wrong namespace in containerized environments

A flaw was found in cifs-utils. When trying to obtain Kerberos credentials, the cifs.upcall program from the cifs-utils package makes an upcall to the wrong namespace in containerized environments. This issue may lead to disclosing sensitive data from the host's Kerberos credentials cache...

CVE-2025-2312

A flaw was found in cifs-utils. When trying to obtain Kerberos credentials, the cifs.upcall program from the cifs-utils package makes an upcall to the wrong namespace in containerized environments. This issue may lead to disclosing sensitive data from the host's Kerberos credentials cache...

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF in the concatenateForRewrite method in JettyUtils when the management proxy is enabled - which it is in the default configuration. An attacker can manipulate the URL to redirect requests to an arbitrary...

askap-flint (>=0.6.1 <=0.8.0), infrahub-server (>=1.1.0 <=1.1.10) +2 more potentially affected by CVE-2024-8183 via prefect (>=3.0.0rc20 <=3.0.11)

prefect PYPI version =3.0.0rc20, =0.6.1, =1.1.0, =1.1.0, =0.0.2, =0.0.10 Source cves: CVE-2024-8183 Source advisory: OSV:GHSA-4V9F-R55G-G6HC...

aporacle (>=0.0.126 <=0.0.143), assemblit (>=0.1.11 <=0.1.13) +17 more potentially affected by CVE-2024-8183 via prefect (>=2.0.0b16 <=2.19.4)

prefect PYPI version =2.0.0b16, =0.0.126, =0.1.11, =5.2.3, =2.37.0, =0.2.0, =0.4.0, =0.1.0, =0.0.1, =0.3.2, =0.0.217, =0.1.1, =0.15.3, =0.6.5, =0.6.8 - orchestration-utils =0.0.1 - prefect-duckdb =0.1.0a1 and more Source cves: CVE-2024-8183 Source advisory: SNYK:PYTHON-PREFECT-9487016...

askap-flint (>=0.6.1 <=0.8.0), infrahub-server (>=1.1.0 <=1.1.10) +2 more potentially affected by CVE-2024-8183 via prefect (>=3.0.0rc20 <=3.0.11)

prefect PYPI version =3.0.0rc20, =0.6.1, =1.1.0, =1.1.0, =0.0.2, =0.0.10 Source cves: CVE-2024-8183 Source advisory: SNYK:PYTHON-PREFECT-9487016...

Malicious code in cmft-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7480b4348d595d2f3e0c25957e99041d6301f7e51593c0334345c1cdfe2a080c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in migu-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ccbd8955e0708787cb831d8758b4c240d432a13fe1c1c182ded5e19b8cd49d3a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2575 Malicious code in migu-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ccbd8955e0708787cb831d8758b4c240d432a13fe1c1c182ded5e19b8cd49d3a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2570 Malicious code in cmft-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7480b4348d595d2f3e0c25957e99041d6301f7e51593c0334345c1cdfe2a080c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GPT Academic 安全漏洞

GPT Academic is an interface that provides pragmatic interactions for LLM grand language models such as GPT/GLM. A server-side request forgery vulnerability exists in the GPT Academic crazyutils.getfilesfromeverything function, which can be exploited by an attacker to cause unauthorized access to...

Malicious code in sol-web3-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d1af6c83b64b9da58a5d027de1d8039b58b1be78be7f8a3f9df554d15d8c15cd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cortex-app-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9950da8284056147d327094840e63fdfc2c18e870e14dc7dc8b260e9dc80ab1b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2500 Malicious code in cortex-app-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9950da8284056147d327094840e63fdfc2c18e870e14dc7dc8b260e9dc80ab1b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

powerpc-utils bug fix and enhancement update

An update is available for powerpc-utils. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linu...

gfs2-utils bug fix and enhancement update

An update is available for gfs2-utils. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 9...

alsa-utils bug fix and enhancement update

An update is available for alsa-utils. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 9...

perl-Scalar-List-Utils bug fix and enhancement update

An update is available for perl-Scalar-List-Utils. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the...