Cybersecurity News

Severe Framelink Figma MCP Vulnerability Lets Hackers Execute Code Remotely

Cybersecurity researchers have disclosed details of a now-patched vulnerability in the popular figma-developer-mcp Model Context Protocol (MCP) server that cou…

Fedora 43: Firebird Vulnerabilities in Denial of Service and Access Bypass

4.0.6.3221

Linux

Debian 11: PAM Important DoS and Access Risk CVE-2024-22365 DLA-4306-1

Multiple vulnerabilities were found in PAM namespace module used to configure private namespaces for user sessions. CVE-2024-22365

Linux

openSUSE Leap 15.6: yt-dlp Fixes for CVE-2024-38519 Remote Exec

An update that solves one vulnerability and has one errata is now available.

Linux

CountLoader Broadens Russian Ransomware Operations With Multi-Version Malware Loader

Cybersecurity researchers have discovered a new malware loader codenamed CountLoader that has been put to use by Russian ransomware gangs to deliver post-explo…

openSUSE Leap 15.6: redis Important Remote Code Execution DoS 2025:03073-1

Linux Databases

SUSE: Redis Important Remote Code Exec and DoS Vulnerabilities 2025:03073-1

* bsc#1246058 * bsc#1246059 Cross-References: * CVE-2025-32023

Linux Databases

SUSE: libsoup Low Data Access Security Fix CVE-2025-4945 2025:03026-1

* bsc#1243314 Cross-References: * CVE-2025-4945

Linux

Click Studios Patches Passwordstate Authentication Bypass Vulnerability in Emergency Access Page

Click Studios, the developer of enterprise-focused password management solution Passwordstate, said it has released security updates to address an authenticati…

openSUSE 15-SP6: minikube Important Access Vulnerability 2025:0318-1

An update that fixes one vulnerability is now available.

Linux

SUSE 15: Kubernetes1.18 Important Access Control Fix CVE-2021-3121

* bsc#1182185 * bsc#1246989 Cross-References: * CVE-2021-3121

Linux Kubernetes

SUSE: Tomcat10 Important DoS Access Control Issues 2025:02978-1

* bsc#1246318 * bsc#1246388 Cross-References: * CVE-2025-49125

Linux

Debian 11: apache2 Critical Access Control Denial of Service DLA-4270-1

Multiple vulnerabilities have been addressed in Apache, a widely used web server. Please note that the fix for CVE-2025-23048, included in this DLA,

Linux Apache

SUSE: ImageMagick Moderate Memory Leakage and Access Issues 2025:02751-1

* bsc#1246530 * bsc#1246534 Cross-References: * CVE-2025-53014

Linux

Microsoft Discloses Exchange Server Flaw Enabling Silent Cloud Access in Hybrid Setups

Microsoft has released an advisory for a high-severity security flaw affecting on-premise versions of Exchange Server that could allow an attacker to gain elev…

Exchange

Gentoo: PHP Library Remote Code Execution Vulnerabilities GLSA-202510-07

Multiple vulnerabilities have been discovered in Composer, the worst of which can lead to arbitrary code execution.

PHP

SUSE: redis Important Remote Code Exec & DoS Vulnerability 2025:02579-1

* bsc#1244795 * bsc#1246058 * bsc#1246059 Cross-References:

Linux Databases

Ubuntu 25.04: Perl Critical File Access Issue CVE-2025-40909

Perl could be made to target unintended paths when performing file operations.

Linux

openSUSE Leap 15.6: Critical Remote Code Execution in gstreamer-plugins-bad

An update that fixes one vulnerability is now available.

Linux

openSUSE: Konsole Important Remote Code Exec Vulnerability 2025:0206-1

An update that fixes one vulnerability is now available.

Linux

SUSE: polkit Important Out-of-Bounds Access Issue 2025:02528-1

* bsc#1246472 Cross-References: * CVE-2025-7519

Linux

SUSE: ImageMagick Important Memory Access Issues Vulnerability 2025:02510-1

* bsc#1246529 * bsc#1246530 * bsc#1246534 Cross-References:

Linux

Serious Remote Code Execution Flaws in Ruby Sinatra for Ubuntu 22.04

Several security issues were fixed in Sinatra.

Linux

CVE-2025-47812 critical: Wing FTP Server remote code execution attack

Picture this: It's July 2, 2025, and you're unwinding from a long day, only to hear about a zero-day vulnerability being actively exploited. If you're running …

Linux