##
Updated at UTC 2025-04-04T02:41:26.693080
CVE | CVSS | EPSS | Posts | Repos | Nuclei | Updated | Description |
---|---|---|---|---|---|---|---|
CVE-2025-30370 | 7.4 | 0.00% | 2 | 0 | 2025-04-03T22:15:21.190000 | jupyterlab-git is a JupyterLab extension for version control using Git. On many | |
CVE-2021-4034 | 7.8 | 87.29% | 1 | 100 | 2025-04-03T21:33:50 | A local privilege escalation vulnerability was found on polkit's pkexec utility. | |
CVE-2024-56528 | None | 0.00% | 2 | 0 | 2025-04-03T21:33:11 | This vulnerability affects Snowplow Collector 3.x before 3.3.0 (unless it’s set | |
CVE-2024-47215 | None | 0.00% | 2 | 0 | 2025-04-03T21:33:11 | An issue was discovered in Snowbridge setups sending data to Google Tag Manager | |
CVE-2024-47213 | None | 0.00% | 2 | 0 | 2025-04-03T21:33:10 | An issue was discovered affecting Enrich 5.1.0 and below. It involves sending a | |
CVE-2024-47217 | 0 | 0.00% | 2 | 0 | 2025-04-03T21:15:38.983000 | An issue was discovered in Iglu Server 0.13.0 and below. It is similar to CVE-20 | |
CVE-2024-47214 | 0 | 0.00% | 2 | 0 | 2025-04-03T21:15:38.760000 | An issue was discovered in Iglu Server 0.13.0 and below. It is similar to CVE-20 | |
CVE-2024-47212 | 0 | 0.00% | 2 | 0 | 2025-04-03T21:15:38.523000 | An issue was discovered in Iglu Server 0.13.0 and below. It involves sending ver | |
CVE-2025-24813 | 9.8 | 92.54% | 9 | 20 | template | 2025-04-03T20:59:51.680000 | Path Equivalence: 'file.Name' (Internal Dot) leading to Remote Code Execution an |
CVE-2025-31489 | 0 | 0.00% | 2 | 0 | 2025-04-03T20:15:25.897000 | MinIO is a High Performance Object Storage released under GNU Affero General Pub | |
CVE-2025-2945 | 10.0 | 0.00% | 2 | 0 | 2025-04-03T18:32:01 | Remote Code Execution security vulnerability in pgAdmin 4 (Query Tool and Cloud | |
CVE-2025-2946 | 9.1 | 0.00% | 2 | 0 | 2025-04-03T18:32:01 | pgAdmin <= 9.1 is affected by a security vulnerability with Cross-Site Scripting | |
CVE-2025-30456 | 7.8 | 0.02% | 2 | 0 | 2025-04-03T18:32:01 | A parsing issue in the handling of directory paths was addressed with improved p | |
CVE-2024-4877 | None | 0.00% | 2 | 0 | 2025-04-03T18:31:05 | OpenVPN version 2.4.0 through 2.6.10 on Windows allows an external, lesser privi | |
CVE-2025-22457 | 9.0 | 0.00% | 12 | 0 | 2025-04-03T16:15:35.370000 | A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6, | |
CVE-2025-3161 | 8.8 | 0.00% | 2 | 0 | 2025-04-03T15:31:31 | A vulnerability was found in Tenda AC10 16.03.10.13 and classified as critical. | |
CVE-2025-32052 | 6.5 | 0.00% | 2 | 0 | 2025-04-03T15:31:26 | A flaw was found in libsoup. A vulnerability in the sniff_unknown() function may | |
CVE-2025-2894 | 6.6 | 0.04% | 1 | 0 | 2025-04-03T15:31:09 | The Go1 also known as "The World's First Intelligence Bionic Quadruped Robot Com | |
CVE-2025-31477 | None | 0.00% | 1 | 0 | 2025-04-03T13:26:09 | ### Impact The Tauri [`shell`](https://tauri.app/plugin/shell/) plugin exposes | |
CVE-2025-31479 | 8.2 | 0.00% | 1 | 0 | 2025-04-03T13:26:03 | ### Impact Users using the [`github-token` input](https://github.com/canonical/g | |
CVE-2025-30218 | None | 0.00% | 1 | 0 | 2025-04-03T13:24:27 | ## Summary In the process of remediating [CVE-2025-29927](https://github.com/adv | |
CVE-2024-53868 | None | 0.00% | 2 | 0 | 2025-04-03T09:32:21 | Apache Traffic Server allows request smuggling if chunked messages are malformed | |
CVE-2025-31334 | 6.8 | 0.00% | 2 | 0 | 2025-04-03T06:30:29 | Issue that bypasses the "Mark of the Web" security warning function for files wh | |
CVE-2025-2704 | None | 0.00% | 2 | 0 | 2025-04-03T04:42:25 | OpenVPN version 2.6.1 through 2.6.13 in server mode using TLS-crypt-v2 allows re | |
CVE-2025-2784 | 7.0 | 0.00% | 2 | 2 | 2025-04-03T04:41:25 | A flaw was found in libsoup. The package is vulnerable to a heap buffer over-rea | |
CVE-2025-1860 | None | 0.02% | 1 | 0 | 2025-04-03T00:32:35 | Data::Entropy for Perl 0.007 and earlier use the rand() function as the default | |
CVE-2025-30065 | 0 | 0.09% | 2 | 0 | 2025-04-02T22:15:19.823000 | Schema parsing in the parquet-avro module of Apache Parquet 1.15.0 and previous | |
CVE-2024-57882 | 5.5 | 0.02% | 1 | 0 | 2025-04-02T22:15:18.093000 | In the Linux kernel, the following vulnerability has been resolved: mptcp: fix | |
CVE-2025-2825 | 9.8 | 15.48% | 12 | 1 | template | 2025-04-02T21:15:33.187000 | CrushFTP versions 10.0.0 through 10.8.3 and 11.0.0 through 11.3.0 are affected b |
CVE-2025-31286 | None | 0.00% | 1 | 0 | 2025-04-02T18:31:05 | An HTML injection vulnerability previously discovered in Trend Vision One could | |
CVE-2025-20212 | 7.7 | 0.00% | 2 | 0 | 2025-04-02T18:31:04 | A vulnerability in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco | |
CVE-2025-31282 | None | 0.00% | 1 | 0 | 2025-04-02T18:31:04 | A broken access control vulnerability previously discovered in the Trend Vision | |
CVE-2025-31285 | None | 0.00% | 1 | 0 | 2025-04-02T18:31:04 | A broken access control vulnerability previously discovered in the Trend Vision | |
CVE-2025-31283 | None | 0.00% | 1 | 0 | 2025-04-02T18:31:04 | A broken access control vulnerability previously discovered in the Trend Vision | |
CVE-2025-31284 | None | 0.00% | 1 | 0 | 2025-04-02T18:31:04 | A broken access control vulnerability previously discovered in the Trend Vision | |
CVE-2025-0014 | 7.3 | 0.00% | 1 | 0 | 2025-04-02T18:31:04 | Incorrect default permissions on the AMD Ryzen(TM) AI installation folder could | |
CVE-2024-36337 | 7.9 | 0.00% | 1 | 0 | 2025-04-02T18:31:04 | Integer overflow within AMD NPU Driver could allow a local attacker to write out | |
CVE-2024-36336 | 7.9 | 0.00% | 1 | 0 | 2025-04-02T18:30:59 | Integer overflow within the AMD NPU Driver could allow a local attacker to write | |
CVE-2024-36328 | 7.3 | 0.00% | 1 | 0 | 2025-04-02T18:30:59 | Integer overflow within AMD NPU Driver could allow a local attacker to write out | |
CVE-2025-31693 | None | 0.33% | 1 | 0 | 2025-04-02T17:14:59 | Improper Neutralization of Special Elements used in an OS Command ('OS Command I | |
CVE-2025-3034 | 8.1 | 0.02% | 1 | 1 | 2025-04-02T15:32:25 | Memory safety bugs present in Firefox 136 and Thunderbird 136. Some of these bug | |
CVE-2025-30090 | 7.2 | 0.00% | 1 | 0 | 2025-04-02T15:31:44 | mime.php in SquirrelMail through 1.4.23-svn-20250401 and 1.5.x through 1.5.2-svn | |
CVE-2023-40714 | 9.9 | 0.05% | 1 | 0 | 2025-04-02T14:58:07.527000 | A relative path traversal in Fortinet FortiSIEM versions 7.0.0, 6.7.0 through 6. | |
CVE-2023-46988 | 0 | 0.18% | 1 | 1 | 2025-04-02T14:58:07.527000 | Directory Traversal vulnerability in ONLYOFFICE Document Server v.7.5.0 and befo | |
CVE-2024-45699 | None | 0.05% | 1 | 0 | 2025-04-02T09:30:43 | The endpoint /zabbix.php?action=export.valuemaps suffers from a Cross-Site Scrip | |
CVE-2025-0676 | None | 0.34% | 1 | 0 | 2025-04-02T09:30:43 | This vulnerability involves command injection in tcpdump within Moxa products, e | |
CVE-2025-0415 | None | 0.19% | 1 | 0 | 2025-04-02T09:30:43 | A remote attacker with web administrator privileges can exploit the device’s web | |
CVE-2024-36465 | None | 0.03% | 1 | 0 | 2025-04-02T06:30:55 | A low privilege (regular) Zabbix user with API access can use SQL injection vuln | |
CVE-2025-3029 | 7.3 | 0.04% | 1 | 0 | 2025-04-01T21:32:20 | A crafted URL containing specific Unicode characters could have hidden the true | |
CVE-2025-3032 | 7.4 | 0.03% | 1 | 0 | 2025-04-01T21:32:20 | Leaking of file descriptors from the fork server to web content processes could | |
CVE-2025-3033 | 7.7 | 0.01% | 1 | 0 | 2025-04-01T21:32:20 | After selecting a malicious Windows `.url` shortcut from the local filesystem, a | |
CVE-2025-3028 | 6.5 | 0.05% | 1 | 0 | 2025-04-01T21:32:20 | JavaScript code running while transforming a document with the XSLTProcessor cou | |
CVE-2025-1268 | 9.4 | 0.04% | 4 | 0 | 2025-04-01T20:26:30.593000 | Out-of-bounds vulnerability in EMF Recode processing of Generic Plus PCL6 Printe | |
CVE-2025-3047 | 6.5 | 0.04% | 2 | 0 | 2025-04-01T20:26:22.890000 | When running the AWS Serverless Application Model Command Line Interface (SAM CL | |
CVE-2025-3048 | 6.5 | 0.04% | 2 | 0 | 2025-04-01T20:26:22.890000 | After completing a build with AWS Serverless Application Model Command Line Inte | |
CVE-2025-22231 | 7.8 | 0.01% | 1 | 0 | 2025-04-01T20:26:11.547000 | VMware Aria Operations contains a local privilege escalation vulnerability. A ma | |
CVE-2024-56325 | 0 | 0.03% | 1 | 0 | template | 2025-04-01T20:26:11.547000 | Authentication Bypass Issue If the path does not contain / and contain., authen |
CVE-2025-1660 | 7.8 | 0.01% | 1 | 0 | 2025-04-01T20:26:11.547000 | A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can fo | |
CVE-2025-1659 | 7.8 | 0.01% | 1 | 0 | 2025-04-01T20:26:11.547000 | A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can fo | |
CVE-2025-1658 | 7.8 | 0.01% | 1 | 0 | 2025-04-01T20:26:11.547000 | A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can fo | |
CVE-2025-3031 | 6.5 | 0.03% | 1 | 0 | 2025-04-01T20:26:11.547000 | An attacker could read 32 bits of values spilled onto the stack in a JIT compile | |
CVE-2025-31137 | 7.5 | 0.04% | 1 | 0 | 2025-04-01T20:26:01.990000 | React Router is a multi-strategy router for React bridging the gap from React 18 | |
CVE-2025-3030 | 8.1 | 0.05% | 1 | 0 | 2025-04-01T18:30:49 | Memory safety bugs present in Firefox 136, Thunderbird 136, Firefox ESR 128.8, a | |
CVE-2025-3035 | None | 0.02% | 1 | 0 | 2025-04-01T15:31:39 | By first using the AI chatbot in one tab and later activating it in another tab, | |
CVE-2025-24259 | 9.8 | 0.04% | 1 | 0 | 2025-04-01T06:31:46 | This issue was addressed with additional entitlement checks. This issue is fixed | |
CVE-2025-0418 | None | 0.01% | 1 | 0 | 2025-04-01T06:30:51 | Valmet DNA user passwords in plain text. This practice poses a security risk as | |
CVE-2025-0416 | None | 0.02% | 1 | 0 | 2025-04-01T06:30:51 | Local privilege escalation through insecure DCOM configuration in Valmet DNA ver | |
CVE-2025-0417 | None | 0.01% | 1 | 0 | 2025-04-01T06:30:50 | Lack of protection against brute force attacks in Valmet DNA visualization in DN | |
CVE-2025-21384 | 8.3 | 0.11% | 2 | 0 | 2025-04-01T03:31:38 | An authenticated attacker can exploit an Server-Side Request Forgery (SSRF) vuln | |
CVE-2025-26683 | 8.1 | 0.08% | 2 | 0 | 2025-04-01T00:30:36 | Improper authorization in Azure Playwright allows an unauthorized attacker to el | |
CVE-2025-1449 | None | 0.04% | 2 | 0 | 2025-03-31T18:31:14 | A vulnerability exists in the Rockwell Automation Verve Asset Manager due to ins | |
CVE-2023-33302 | 4.7 | 0.06% | 1 | 0 | 2025-03-31T15:30:55 | A buffer copy without checking size of input ('classic buffer overflow') in Fort | |
CVE-2025-29266 | 9.7 | 0.09% | 1 | 0 | 2025-03-31T15:30:54 | Unraid 7.0.0 before 7.0.1 allows remote users to access the Unraid WebGUI and we | |
CVE-2025-31160 | 2.9 | 0.02% | 5 | 0 | 2025-03-31T15:30:39 | atop through 2.11.0 allows local users to cause a denial of service (e.g., asser | |
CVE-2025-2071 | None | 0.74% | 1 | 0 | 2025-03-31T09:30:39 | A critical OS Command Injection vulnerability has been identified in the FAST LT | |
CVE-2025-2781 | None | 0.01% | 1 | 0 | 2025-03-29T00:31:40 | The WatchGuard Mobile VPN with SSL Client on Windows does not properly configure | |
CVE-2025-29484 | 7.5 | 0.05% | 1 | 0 | 2025-03-28T18:34:13 | An out-of-memory error in the parseABC_NS_SET_INFO function of libming v0.4.8 al | |
CVE-2025-29491 | 6.5 | 0.04% | 1 | 0 | 2025-03-28T18:33:11 | An allocation-size-too-big error in the parseSWF_DEFINEBINARYDATA function of li | |
CVE-2025-29493 | 6.5 | 0.04% | 1 | 0 | 2025-03-28T18:33:11 | libming v0.4.8 was discovered to contain a segmentation fault via the decompileG | |
CVE-2025-29496 | 6.5 | 0.04% | 1 | 0 | 2025-03-28T18:33:11 | libming v0.4.8 was discovered to contain a segmentation fault via the decompileD | |
CVE-2025-29494 | 6.5 | 0.04% | 1 | 0 | 2025-03-28T18:33:11 | libming v0.4.8 was discovered to contain a segmentation fault via the decompileG | |
CVE-2025-2857 | 10.0 | 0.06% | 5 | 1 | 2025-03-28T18:33:10 | Following the sandbox escape in CVE-2025-2783, various Firefox developers identi | |
CVE-2025-29497 | 6.5 | 0.03% | 1 | 0 | 2025-03-28T15:33:03 | libming v0.4.8 was discovered to contain a memory leak via the parseSWF_MORPHFIL | |
CVE-2025-29927 | 9.1 | 84.70% | 5 | 63 | template | 2025-03-28T15:32:59 | # Impact It is possible to bypass authorization checks within a Next.js applicat |
CVE-2025-29488 | 6.5 | 0.03% | 1 | 0 | 2025-03-28T15:32:59 | libming v0.4.8 was discovered to contain a memory leak via the parseSWF_INITACTI | |
CVE-2025-29487 | 7.5 | 0.05% | 1 | 0 | 2025-03-28T15:32:59 | An out-of-memory error in the parseABC_STRING_INFO function of libming v0.4.8 al | |
CVE-2025-29492 | 6.5 | 0.03% | 1 | 0 | 2025-03-28T15:32:59 | libming v0.4.8 was discovered to contain a segmentation fault via the decompileS | |
CVE-2025-29489 | 6.5 | 0.03% | 1 | 0 | 2025-03-28T15:32:59 | libming v0.4.8 was discovered to contain a memory leak via the parseSWF_MORPHLIN | |
CVE-2025-29490 | 6.5 | 0.04% | 1 | 0 | 2025-03-28T15:31:54 | libming v0.4.8 was discovered to contain a segmentation fault via the decompileC | |
CVE-2025-29486 | 6.5 | 0.03% | 1 | 0 | 2025-03-28T15:31:54 | libming v0.4.8 was discovered to contain a memory leak via the parseSWF_PLACEOBJ | |
CVE-2025-29485 | 6.5 | 0.05% | 1 | 0 | 2025-03-28T15:31:53 | libming v0.4.8 was discovered to contain a segmentation fault via the decompileR | |
CVE-2019-16149 | 5.5 | 0.46% | 1 | 0 | 2025-03-28T12:31:35 | An Improper Neutralization of Input During Web Page Generation in FortiClientEMS | |
CVE-2025-24383 | 9.1 | 14.94% | 1 | 0 | 2025-03-28T03:30:30 | Dell Unity, version(s) 5.4 and prior, contain(s) an Improper Neutralization of S | |
CVE-2025-30232 | 8.2 | 0.03% | 1 | 0 | 2025-03-28T03:30:24 | A use-after-free in Exim 4.96 through 4.98.1 could allow users (with command-lin | |
CVE-2024-0149 | 3.3 | 0.02% | 1 | 0 | 2025-03-27T21:32:22 | NVIDIA GPU Display Driver for Linux contains a vulnerability which could allow a | |
CVE-2025-29483 | 6.5 | 0.03% | 1 | 0 | 2025-03-27T21:32:22 | libming v0.4.8 was discovered to contain a memory leak via the parseSWF_ENABLEDE | |
CVE-2025-30067 | None | 0.08% | 1 | 0 | 2025-03-27T18:18:41 | Improper Control of Generation of Code ('Code Injection') vulnerability in Apach | |
CVE-2025-2748 | 6.5 | 0.75% | 3 | 0 | template | 2025-03-27T16:45:46.410000 | The Kentico Xperience application does not fully validate or filter files upload |
CVE-2025-31181 | 6.2 | 0.02% | 1 | 0 | 2025-03-27T15:31:23 | A flaw was found in gnuplot. The X11_graphics() function may lead to a segmentat | |
CVE-2025-31180 | 6.2 | 0.02% | 1 | 0 | 2025-03-27T15:31:23 | A flaw was found in gnuplot. The CANVAS_text() function may lead to a segmentati | |
CVE-2025-31179 | 6.2 | 0.02% | 1 | 0 | 2025-03-27T15:31:23 | A flaw was found in gnuplot. The xstrftime() function may lead to a segmentation | |
CVE-2025-31178 | 6.2 | 0.02% | 1 | 0 | 2025-03-27T15:31:22 | A flaw was found in gnuplot. The GetAnnotateString() function may lead to a segm | |
CVE-2025-31176 | 6.2 | 0.02% | 1 | 0 | 2025-03-27T15:31:22 | A flaw was found in gnuplot. The plot3d_points() function may lead to a segmenta | |
CVE-2017-12637 | 7.5 | 92.43% | 1 | 0 | template | 2025-03-27T03:34:37 | Directory traversal vulnerability in scheduler/ui/js/ffffffffbca41eb4/UIUtilJava |
CVE-2025-2783 | 8.4 | 13.08% | 10 | 1 | 2025-03-26T18:30:57 | Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome | |
CVE-2025-2820 | 6.5 | 0.04% | 1 | 0 | 2025-03-26T15:32:52 | An authenticated attacker can compromise the availability of the device via the | |
CVE-2025-1542 | None | 0.04% | 1 | 0 | 2025-03-26T12:30:40 | Improper permission control vulnerability in the OXARI ServiceDesk application c | |
CVE-2025-27636 | None | 16.44% | 1 | 1 | 2025-03-25T18:38:11 | Bypass/Injection vulnerability in Apache Camel components under particular condi | |
CVE-2025-22230 | 7.8 | 0.03% | 2 | 0 | 2025-03-25T15:31:35 | VMware Tools for Windows contains an authentication bypass vulnerability due to | |
CVE-2025-1974 | 9.8 | 83.73% | 9 | 16 | template | 2025-03-25T15:10:16 | A security issue was discovered in Kubernetes where under certain conditions, an |
CVE-2025-24513 | 4.8 | 0.06% | 2 | 0 | 2025-03-25T15:10:09 | A security issue was discovered in [ingress-nginx](https://github.com/kubernetes | |
CVE-2025-24514 | 8.8 | 0.22% | 3 | 3 | 2025-03-25T15:10:03 | A security issue was discovered in [ingress-nginx](https://github.com/kubernetes | |
CVE-2025-1097 | 8.8 | 0.16% | 3 | 3 | 2025-03-25T15:07:13 | A security issue was discovered in [ingress-nginx](https://github.com/kubernetes | |
CVE-2025-1098 | 8.8 | 0.22% | 3 | 3 | 2025-03-25T15:06:45 | A security issue was discovered in [ingress-nginx](https://github.com/kubernetes | |
CVE-2025-26512 | 10.0 | 0.04% | 1 | 0 | 2025-03-25T00:30:26 | SnapCenter versions prior to 6.0.1P1 and 6.1P1 are susceptible to a vulnerabili | |
CVE-2025-27407 | 9.1 | 4.32% | 1 | 0 | 2025-03-24T14:49:02 | # Summary Loading a malicious schema definition in `GraphQL::Schema.from_intros | |
CVE-2024-6827 | 7.5 | 0.04% | 1 | 0 | 2025-03-21T23:56:31 | Gunicorn version 21.2.0 does not properly validate the value of the 'Transfer-En | |
CVE-2024-9956 | 7.8 | 0.03% | 1 | 0 | 2025-03-21T00:32:31 | Inappropriate implementation in WebAuthentication in Google Chrome on Android pr | |
CVE-2025-23120 | 9.9 | 0.28% | 1 | 0 | 2025-03-20T18:30:30 | A vulnerability allowing remote code execution (RCE) for domain users. | |
CVE-2025-24201 | 7.1 | 0.18% | 1 | 0 | 2025-03-20T15:30:32 | An out-of-bounds write issue was addressed with improved checks to prevent unaut | |
CVE-2025-29891 | 4.2 | 0.02% | 1 | 0 | 2025-03-19T15:44:53 | Bypass/Injection vulnerability in Apache Camel. This issue affects Apache Camel | |
CVE-2025-26633 | 7.0 | 1.29% | 8 | 0 | 2025-03-11T18:32:20 | Improper neutralization in Microsoft Management Console allows an unauthorized a | |
CVE-2025-27218 | 5.3 | 58.46% | 1 | 0 | template | 2025-02-20T21:30:52 | Sitecore Experience Manager (XM) and Experience Platform (XP) 10.4 before KB1002 |
CVE-2025-1302 | 9.8 | 14.28% | 1 | 1 | 2025-02-15T05:15:11.683000 | Versions of the package jsonpath-plus before 10.3.0 are vulnerable to Remote Cod | |
CVE-2025-24200 | 7.5 | 18.54% | 1 | 1 | 2025-02-11T15:33:28 | An authorization issue was addressed with improved state management. This issue | |
CVE-2025-24791 | 4.4 | 0.01% | 1 | 0 | 2025-01-29T17:15:30.020000 | snowflake-connector-nodejs is a NodeJS driver for Snowflake. Snowflake discovere | |
CVE-2025-24085 | 7.8 | 2.43% | 1 | 1 | 2025-01-29T15:32:36 | A use after free issue was addressed with improved memory management. This issue | |
CVE-2025-0282 | 9.1 | 90.87% | 1 | 10 | 2025-01-28T18:32:27 | A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, | |
CVE-2025-0401 | 5.3 | 0.08% | 1 | 1 | 2025-01-13T00:30:55 | A vulnerability classified as critical has been found in 1902756969 reggie 1.0. | |
CVE-2024-40711 | 9.8 | 56.19% | 1 | 3 | template | 2024-12-20T18:31:30 | A deserialization of untrusted data vulnerability with a malicious payload can a |
CVE-2024-10668 | None | 0.01% | 2 | 0 | 2024-11-07T18:31:29 | There exists an auth bypass in Google Quickshare where an attacker can upload an | |
CVE-2024-25108 | 9.9 | 0.29% | 1 | 0 | 2024-10-11T21:35:12 | ### Summary When processing requests authorization was improperly and insuffici | |
CVE-2024-8690 | 4.4 | 0.03% | 1 | 0 | 2024-10-03T03:31:11 | A problem with a detection mechanism in the Palo Alto Networks Cortex XDR agent | |
CVE-2024-20439 | 9.8 | 88.54% | 4 | 0 | template | 2024-09-13T21:31:22 | A vulnerability in Cisco Smart Licensing Utility could allow an unauthenticated, |
CVE-2019-9874 | 9.8 | 33.80% | 2 | 0 | 2024-04-04T00:50:10 | Deserialization of Untrusted Data in the Sitecore.Security.AntiCSRF (aka anti CS | |
CVE-2019-9875 | 8.8 | 22.41% | 1 | 0 | 2024-04-04T00:50:10 | Deserialization of Untrusted Data in the anti CSRF module in Sitecore through 9. | |
CVE-2024-0402 | 10.0 | 24.75% | 2 | 1 | 2024-01-26T03:30:25 | An issue has been discovered in GitLab CE/EE affecting all versions from 16.0 pr | |
CVE-2014-0401 | None | 0.41% | 1 | 0 | 2023-02-01T05:07:50 | Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.72 a | |
CVE-2021-32471 | None | 5.43% | 1 | 1 | 2023-01-29T05:06:13 | Insufficient input validation in the Marvin Minsky 1967 implementation of the Un | |
CVE-2025-3198 | 0 | 0.00% | 1 | 0 | N/A | ||
CVE-2025-31484 | 0 | 0.00% | 1 | 0 | N/A | ||
CVE-2025-31122 | 0 | 0.04% | 1 | 0 | N/A | ||
CVE-2025-29495 | 0 | 0.00% | 1 | 0 | N/A |
updated 2025-04-03T22:15:21.190000
2 posts
This is kind of a fun command injection vuln in jupyterlab-git.
https://github.com/jupyterlab/jupyterlab-git/security/advisories/GHSA-cj5w-8mjf-r5f8
sev:HIGH 7.4 - CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:H/A:H
##jupyterlab-git is a JupyterLab extension for version control using Git. On many platforms, a third party can create a Git repository under a name that includes a shell command substitution string in the syntax $(). These directory names are allowed in macOS and a majority of Linux distributions. If a user starts jupyter-lab in a parent directory of this inappropriately-named Git repository, opens it, and clicks "Git > Open Git Repository in Terminal" from the menu bar, then the injected command is run in the user's shell without the user's permission. This issue is occurring because when that menu entry is clicked, jupyterlab-git opens the terminal and runs cd through the shell to set the current directory. Doing so runs any command substitution strings present in the directory name, which leads to the command injection issue described here. A previous patch provided an incomplete fix. This vulnerability is fixed in 0.51.1.
This is kind of a fun command injection vuln in jupyterlab-git.
https://github.com/jupyterlab/jupyterlab-git/security/advisories/GHSA-cj5w-8mjf-r5f8
sev:HIGH 7.4 - CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:H/A:H
##jupyterlab-git is a JupyterLab extension for version control using Git. On many platforms, a third party can create a Git repository under a name that includes a shell command substitution string in the syntax $(). These directory names are allowed in macOS and a majority of Linux distributions. If a user starts jupyter-lab in a parent directory of this inappropriately-named Git repository, opens it, and clicks "Git > Open Git Repository in Terminal" from the menu bar, then the injected command is run in the user's shell without the user's permission. This issue is occurring because when that menu entry is clicked, jupyterlab-git opens the terminal and runs cd through the shell to set the current directory. Doing so runs any command substitution strings present in the directory name, which leads to the command injection issue described here. A previous patch provided an incomplete fix. This vulnerability is fixed in 0.51.1.
updated 2025-04-03T21:33:50
1 posts
100 repos
https://github.com/NiS3x/CVE-2021-4034
https://github.com/Al1ex/CVE-2021-4034
https://github.com/teelrabbit/Polkit-pkexec-exploit-for-Linux
https://github.com/Ayrx/CVE-2021-4034
https://github.com/TanmoyG1800/CVE-2021-4034
https://github.com/x04000/CVE-2021-4034
https://github.com/Y3A/CVE-2021-4034
https://github.com/nobelh/CVE-2021-4034
https://github.com/luijait/PwnKit-Exploit
https://github.com/artemis-mike/cve-2021-4034
https://github.com/TomSgn/CVE-2021-4034
https://github.com/codiobert/pwnkit-scanner
https://github.com/PeterGottesman/pwnkit-exploit
https://github.com/Immersive-Labs-Sec/CVE-2021-4034
https://github.com/jm33-m0/go-lpe
https://github.com/Anonymous-Family/CVE-2021-4034
https://github.com/0x4ndy/CVE-2021-4034-PoC
https://github.com/FDlucifer/Pwnkit-go
https://github.com/0xalwayslucky/log4j-polkit-poc
https://github.com/callrbx/pkexec-lpe-poc
https://github.com/PwnFunction/CVE-2021-4034
https://github.com/NeonWhiteRabbit/CVE-2021-4034
https://github.com/TotallyNotAHaxxer/CVE-2021-4034
https://github.com/oreosec/pwnkit
https://github.com/evdenis/lsm_bpf_check_argc0
https://github.com/kimusan/pkwner
https://github.com/cspshivam/cve-2021-4034
https://github.com/dzonerzy/poc-cve-2021-4034
https://github.com/fei9747/CVE-2021-4034
https://github.com/HellGateCorp/pwnkit
https://github.com/wudicainiao/cve-2021-4034
https://github.com/deoxykev/CVE-2021-4034-Rust
https://github.com/JohnHammond/CVE-2021-4034
https://github.com/jm33-m0/emp3r0r
https://github.com/JoyGhoshs/CVE-2021-4034
https://github.com/alikarimi999/CVE-2021-40346
https://github.com/DanaEpp/pwncat_pwnkit
https://github.com/joeammond/CVE-2021-4034
https://github.com/Vulnmachines/HAProxy_CVE-2021-40346
https://github.com/luckythandel/CVE-2021-4034
https://github.com/Ankit-Ojha16/CVE-2021-4034
https://github.com/jpmcb/pwnkit-go
https://github.com/dadvlingd/CVE-2021-4034
https://github.com/berdav/CVE-2021-4034
https://github.com/c3c/CVE-2021-4034
https://github.com/Plethore/CVE-2021-4034
https://github.com/Audiobahn/CVE-2021-4034
https://github.com/v-rzh/CVE-2021-4034
https://github.com/donky16/CVE-2021-40346-POC
https://github.com/rvizx/CVE-2021-4034
https://github.com/Al1ex/LinuxEelvation
https://github.com/locksec/CVE-2021-4034
https://github.com/LJP-TW/CVE-2021-4034
https://github.com/Rvn0xsy/CVE-2021-4034
https://github.com/drapl0n/pwnKit
https://github.com/hohn/codeql-sample-polkit
https://github.com/TheJoyOfHacking/berdav-CVE-2021-4034
https://github.com/defhacks/cve-2021-4034
https://github.com/n3rdh4x0r/CVE-2021-4034
https://github.com/Fato07/Pwnkit-exploit
https://github.com/An00bRektn/CVE-2021-4034
https://github.com/NeonWhiteRabbit/CVE-2021-4034-BASH-One-File-Exploit
https://github.com/Almorabea/pkexec-exploit
https://github.com/chenaotian/CVE-2021-4034
https://github.com/ly4k/PwnKit
https://github.com/navisec/CVE-2021-4034-PwnKit
https://github.com/ck00004/CVE-2021-4034
https://github.com/Pol-Ruiz/CVE-2021-4034
https://github.com/tahaafarooq/poppy
https://github.com/ayypril/CVE-2021-4034
https://github.com/rhin0cer0s/CVE-2021-4034
https://github.com/battleoverflow/CVE-2021-4034
https://github.com/moldabekov/CVE-2021-4034
https://github.com/mebeim/CVE-2021-4034
https://github.com/EstamelGG/CVE-2021-4034-NoGCC
https://github.com/lsclsclsc/CVE-2021-4034
https://github.com/x04000/AutoPwnkit
https://github.com/clubby789/CVE-2021-4034
https://github.com/Silencecyber/cve-2021-4034
https://github.com/Kirill89/CVE-2021-4034
https://github.com/knqyf263/CVE-2021-40346
https://github.com/nel0x/pwnkit-vulnerability
https://github.com/c3l3si4n/pwnkit
https://github.com/gbrsh/CVE-2021-4034
https://github.com/wechicken456/CVE-2021-4034-CTF-writeup
https://github.com/arthepsy/CVE-2021-4034
https://github.com/Yakumwamba/POC-CVE-2021-4034
https://github.com/Pixailz/CVE-2021-4034
https://github.com/asepsaepdin/CVE-2021-4034
https://github.com/pyhrr0/pwnkit
https://github.com/sofire/polkit-0.96-CVE-2021-4034
https://github.com/OXDBXKXO/ez-pwnkit
https://github.com/thatstraw/CVE-2021-4034
https://github.com/pengalaman-1t/CVE-2021-4034
https://github.com/whokilleddb/CVE-2021-4034
https://github.com/nikaiw/CVE-2021-4034
https://github.com/Jesrat/make_me_root
https://github.com/scent2d/PoC-CVE-2021-4034
An attacker gained remote code execution on an outdated, internet-facing web application. The .bash_history of the compromised user (tomcat) revealed that the attacker had downloaded "PwnKit" from GitHub - an exploit targeting CVE-2021-4034, a well-known privilege escalation vulnerability.
Out of curiosity, I read about the vulnerability, its mechanics, and, most importantly, the forensic traces it might leave behind. I found this well-written article that provides an excellent breakdown:
The Tale of CVE-2021-4034 (PwnKit) – The 13-Year-Old Bug [1]
It even includes a "Detecting Compromise" section—thank you! ❤️
I always emphasize to our analysts the importance of studying attack techniques and reviewing exploit source code. Even if everything isn’t immediately clear, you might identify hardcoded values within the code that serve as valuable IOCs for targeted threat-hunting.
[1] https://www.hackthebox.com/blog/The-tale-of-CVE-2021-4034-AKA-PwnKit-The-13-Year-Old-Bug
##updated 2025-04-03T21:33:11
2 posts
I don't know Snowplow but based on its homepage, I feel good about sharing some DoS vulns:
AI-Ready Behavioral Data to Power Analytics & Real-Time Operations
and
Collect high-quality first-party customer behavior data
This is an update to our previous notification informing users of Snowplow Open Source Software releases (pre-2024)* of the release of security patches for 5 CVEs, of which 4 are critical DOS type issues.
CVE-2024-47212: Iglu Server Denial of Service #1
CVE-2024-47214: Iglu Server Denial of Service #2
CVE-2024-47217: Iglu Server Denial of Service #3
CVE-2024-56528: Collector Denial of Service
CVE-2024-47213: Enrich Denial of Service
CVE-2024-47215: Snowbridge Denial of Service
Yes, there are six CVEs there, not five. You can have an extra one. As a treat.
##I don't know Snowplow but based on its homepage, I feel good about sharing some DoS vulns:
AI-Ready Behavioral Data to Power Analytics & Real-Time Operations
and
Collect high-quality first-party customer behavior data
This is an update to our previous notification informing users of Snowplow Open Source Software releases (pre-2024)* of the release of security patches for 5 CVEs, of which 4 are critical DOS type issues.
CVE-2024-47212: Iglu Server Denial of Service #1
CVE-2024-47214: Iglu Server Denial of Service #2
CVE-2024-47217: Iglu Server Denial of Service #3
CVE-2024-56528: Collector Denial of Service
CVE-2024-47213: Enrich Denial of Service
CVE-2024-47215: Snowbridge Denial of Service
Yes, there are six CVEs there, not five. You can have an extra one. As a treat.
##updated 2025-04-03T21:33:11
2 posts
I don't know Snowplow but based on its homepage, I feel good about sharing some DoS vulns:
AI-Ready Behavioral Data to Power Analytics & Real-Time Operations
and
Collect high-quality first-party customer behavior data
This is an update to our previous notification informing users of Snowplow Open Source Software releases (pre-2024)* of the release of security patches for 5 CVEs, of which 4 are critical DOS type issues.
CVE-2024-47212: Iglu Server Denial of Service #1
CVE-2024-47214: Iglu Server Denial of Service #2
CVE-2024-47217: Iglu Server Denial of Service #3
CVE-2024-56528: Collector Denial of Service
CVE-2024-47213: Enrich Denial of Service
CVE-2024-47215: Snowbridge Denial of Service
Yes, there are six CVEs there, not five. You can have an extra one. As a treat.
##I don't know Snowplow but based on its homepage, I feel good about sharing some DoS vulns:
AI-Ready Behavioral Data to Power Analytics & Real-Time Operations
and
Collect high-quality first-party customer behavior data
This is an update to our previous notification informing users of Snowplow Open Source Software releases (pre-2024)* of the release of security patches for 5 CVEs, of which 4 are critical DOS type issues.
CVE-2024-47212: Iglu Server Denial of Service #1
CVE-2024-47214: Iglu Server Denial of Service #2
CVE-2024-47217: Iglu Server Denial of Service #3
CVE-2024-56528: Collector Denial of Service
CVE-2024-47213: Enrich Denial of Service
CVE-2024-47215: Snowbridge Denial of Service
Yes, there are six CVEs there, not five. You can have an extra one. As a treat.
##updated 2025-04-03T21:33:10
2 posts
I don't know Snowplow but based on its homepage, I feel good about sharing some DoS vulns:
AI-Ready Behavioral Data to Power Analytics & Real-Time Operations
and
Collect high-quality first-party customer behavior data
This is an update to our previous notification informing users of Snowplow Open Source Software releases (pre-2024)* of the release of security patches for 5 CVEs, of which 4 are critical DOS type issues.
CVE-2024-47212: Iglu Server Denial of Service #1
CVE-2024-47214: Iglu Server Denial of Service #2
CVE-2024-47217: Iglu Server Denial of Service #3
CVE-2024-56528: Collector Denial of Service
CVE-2024-47213: Enrich Denial of Service
CVE-2024-47215: Snowbridge Denial of Service
Yes, there are six CVEs there, not five. You can have an extra one. As a treat.
##I don't know Snowplow but based on its homepage, I feel good about sharing some DoS vulns:
AI-Ready Behavioral Data to Power Analytics & Real-Time Operations
and
Collect high-quality first-party customer behavior data
This is an update to our previous notification informing users of Snowplow Open Source Software releases (pre-2024)* of the release of security patches for 5 CVEs, of which 4 are critical DOS type issues.
CVE-2024-47212: Iglu Server Denial of Service #1
CVE-2024-47214: Iglu Server Denial of Service #2
CVE-2024-47217: Iglu Server Denial of Service #3
CVE-2024-56528: Collector Denial of Service
CVE-2024-47213: Enrich Denial of Service
CVE-2024-47215: Snowbridge Denial of Service
Yes, there are six CVEs there, not five. You can have an extra one. As a treat.
##updated 2025-04-03T21:15:38.983000
2 posts
I don't know Snowplow but based on its homepage, I feel good about sharing some DoS vulns:
AI-Ready Behavioral Data to Power Analytics & Real-Time Operations
and
Collect high-quality first-party customer behavior data
This is an update to our previous notification informing users of Snowplow Open Source Software releases (pre-2024)* of the release of security patches for 5 CVEs, of which 4 are critical DOS type issues.
CVE-2024-47212: Iglu Server Denial of Service #1
CVE-2024-47214: Iglu Server Denial of Service #2
CVE-2024-47217: Iglu Server Denial of Service #3
CVE-2024-56528: Collector Denial of Service
CVE-2024-47213: Enrich Denial of Service
CVE-2024-47215: Snowbridge Denial of Service
Yes, there are six CVEs there, not five. You can have an extra one. As a treat.
##I don't know Snowplow but based on its homepage, I feel good about sharing some DoS vulns:
AI-Ready Behavioral Data to Power Analytics & Real-Time Operations
and
Collect high-quality first-party customer behavior data
This is an update to our previous notification informing users of Snowplow Open Source Software releases (pre-2024)* of the release of security patches for 5 CVEs, of which 4 are critical DOS type issues.
CVE-2024-47212: Iglu Server Denial of Service #1
CVE-2024-47214: Iglu Server Denial of Service #2
CVE-2024-47217: Iglu Server Denial of Service #3
CVE-2024-56528: Collector Denial of Service
CVE-2024-47213: Enrich Denial of Service
CVE-2024-47215: Snowbridge Denial of Service
Yes, there are six CVEs there, not five. You can have an extra one. As a treat.
##updated 2025-04-03T21:15:38.760000
2 posts
I don't know Snowplow but based on its homepage, I feel good about sharing some DoS vulns:
AI-Ready Behavioral Data to Power Analytics & Real-Time Operations
and
Collect high-quality first-party customer behavior data
This is an update to our previous notification informing users of Snowplow Open Source Software releases (pre-2024)* of the release of security patches for 5 CVEs, of which 4 are critical DOS type issues.
CVE-2024-47212: Iglu Server Denial of Service #1
CVE-2024-47214: Iglu Server Denial of Service #2
CVE-2024-47217: Iglu Server Denial of Service #3
CVE-2024-56528: Collector Denial of Service
CVE-2024-47213: Enrich Denial of Service
CVE-2024-47215: Snowbridge Denial of Service
Yes, there are six CVEs there, not five. You can have an extra one. As a treat.
##I don't know Snowplow but based on its homepage, I feel good about sharing some DoS vulns:
AI-Ready Behavioral Data to Power Analytics & Real-Time Operations
and
Collect high-quality first-party customer behavior data
This is an update to our previous notification informing users of Snowplow Open Source Software releases (pre-2024)* of the release of security patches for 5 CVEs, of which 4 are critical DOS type issues.
CVE-2024-47212: Iglu Server Denial of Service #1
CVE-2024-47214: Iglu Server Denial of Service #2
CVE-2024-47217: Iglu Server Denial of Service #3
CVE-2024-56528: Collector Denial of Service
CVE-2024-47213: Enrich Denial of Service
CVE-2024-47215: Snowbridge Denial of Service
Yes, there are six CVEs there, not five. You can have an extra one. As a treat.
##updated 2025-04-03T21:15:38.523000
2 posts
I don't know Snowplow but based on its homepage, I feel good about sharing some DoS vulns:
AI-Ready Behavioral Data to Power Analytics & Real-Time Operations
and
Collect high-quality first-party customer behavior data
This is an update to our previous notification informing users of Snowplow Open Source Software releases (pre-2024)* of the release of security patches for 5 CVEs, of which 4 are critical DOS type issues.
CVE-2024-47212: Iglu Server Denial of Service #1
CVE-2024-47214: Iglu Server Denial of Service #2
CVE-2024-47217: Iglu Server Denial of Service #3
CVE-2024-56528: Collector Denial of Service
CVE-2024-47213: Enrich Denial of Service
CVE-2024-47215: Snowbridge Denial of Service
Yes, there are six CVEs there, not five. You can have an extra one. As a treat.
##I don't know Snowplow but based on its homepage, I feel good about sharing some DoS vulns:
AI-Ready Behavioral Data to Power Analytics & Real-Time Operations
and
Collect high-quality first-party customer behavior data
This is an update to our previous notification informing users of Snowplow Open Source Software releases (pre-2024)* of the release of security patches for 5 CVEs, of which 4 are critical DOS type issues.
CVE-2024-47212: Iglu Server Denial of Service #1
CVE-2024-47214: Iglu Server Denial of Service #2
CVE-2024-47217: Iglu Server Denial of Service #3
CVE-2024-56528: Collector Denial of Service
CVE-2024-47213: Enrich Denial of Service
CVE-2024-47215: Snowbridge Denial of Service
Yes, there are six CVEs there, not five. You can have an extra one. As a treat.
##updated 2025-04-03T20:59:51.680000
9 posts
20 repos
https://github.com/msadeghkarimi/CVE-2025-24813-Exploit
https://github.com/ps-interactive/lab-cve-2025-24813
https://github.com/Alaatk/CVE-2025-24813-POC
https://github.com/issamjr/CVE-2025-24813-Scanner
https://github.com/imbas007/CVE-2025-24813-apache-tomcat
https://github.com/iSee857/CVE-2025-24813-PoC
https://github.com/N0c1or/CVE-2025-24813_POC
https://github.com/u238/Tomcat-CVE_2025_24813
https://github.com/MuhammadWaseem29/CVE-2025-24813
https://github.com/michael-david-fry/Apache-Tomcat-Vulnerability-POC-CVE-2025-24813
https://github.com/B1gN0Se/Tomcat-CVE-2025-24813
https://github.com/FY036/cve-2025-24813_poc
https://github.com/tonyarris/CVE-2025-24813-PoC
https://github.com/n0n-zer0/Spring-Boot-Tomcat-CVE-2025-24813
https://github.com/beyond-devsecops/CVE-2025-24813
https://github.com/manjula-aw/CVE-2025-24813
https://github.com/AlperenY-cs/CVE-2025-24813
https://github.com/absholi7ly/POC-CVE-2025-24813
Tracked as CVE-2025-24813.
U.S. CISA adds Apache Tomcat flaw to its Known Exploited Vulnerabilities catalog https://securityaffairs.com/176129/security/u-s-cisa-adds-apache-tomcat-flaw-known-exploited-vulnerabilities-catalog.html
##Tracked as CVE-2025-24813.
U.S. CISA adds Apache Tomcat flaw to its Known Exploited Vulnerabilities catalog https://securityaffairs.com/176129/security/u-s-cisa-adds-apache-tomcat-flaw-known-exploited-vulnerabilities-catalog.html
##Aqua published a blog post on the TTPs ( including IOCs and samples ) used by an apparently CN-adjacent TA attacking Tomcat servers. The post doesn't specifically say that the vulnerability exploited is CVE-2025-24813 but in their mitigations section they say:
"Ensure that all vulnerabilities are patched. Particularly internet facing applications such as Tomcat servers. Vulnerabilities such as CVE-2025-24813 that are new, critical and actively exploited should be prioritized."
https://www.aquasec.com/blog/new-campaign-against-apache-tomcat/
##CVE ID: CVE-2025-24813
Vendor: Apache
Product: Tomcat
Date Added: 2025-04-01
Vulnerability: Apache Tomcat Path Equivalence Vulnerability
Notes: https://lists.apache.org/thread/j5fkjv2k477os90nczf2v9l61fb0kkgq ; https://nvd.nist.gov/vuln/detail/CVE-2025-24813
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2025-24813
CISA has updated the KEV catalogue:
CVE-2025-24813: Apache Tomcat Path Equivalence Vulnerability https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=&field_date_added_wrapper=all&sort_by=field_date_added&items_per_page=20 #CISA #cybersecurity #infosec #Apache
Also:
Two Industrial Control Systems Advisories https://www.cisa.gov/news-events/alerts/2025/04/01/cisa-releases-two-industrial-control-systems-advisories
##Looks like CISA is now satisfied and has added CVE-2025-24813 (Apache Tomcat Path Equivalence Vulnerability ) to the KEV Catalog.
##Apache Tomcat Vulnerability (CVE-2025-24813) Exploited to Execute Code on Servers https://cybersecuritynews.com/apache-tomcat-vulnerability-exploited/ #CyberSecurityNews #VulnerabilityNews #cybersecuritynews #CyberSecurity #cybersecurity #vulnerability
##Fortinet added CVE-2025-24813, Apache Tomcat RCE (high) to its outbreak alerts yesterday: https://www.fortinet.com/fortiguard/labs @fortinet #cybersecurity #infosec #Apache
Details: https://fortiguard.fortinet.com/outbreak-alert/apache-tomcat-rce
##(recordedfuture.com) Apache Tomcat: Critical Path Equivalence Vulnerability (CVE-2025-24813) NOT (yet) under active exploitation
https://www.recordedfuture.com/blog/apache-tomcat-cve-2025-24813-vulnerability-analysis
Insikt Group notes specifically that this vulnerability has not yet been observed as being actively exploited in the wild.
Summary:
This article details CVE-2025-24813, a critical path equivalence vulnerability in Apache Tomcat that allows unauthenticated remote code execution under specific conditions. The vulnerability affects multiple Tomcat versions (11.0.0-M1 to 11.0.2, 10.1.0-M1 to 10.1.34, 9.0.0-M1 to 9.0.98, and most 8.5.x versions). Greynoise has identified six malicious IP addresses attempting to exploit this vulnerability, targeting systems in the US, Japan, Mexico, South Korea, and Australia. Multiple proof-of-concept exploits have been published, increasing the risk of exploitation. Organizations are advised to upgrade to patched versions (11.0.3, 10.1.35, or 9.0.99) or implement network-level controls if immediate patching isn't possible.
#Cybersecurity #ThreatIntel #Tomcat #ActiveExploitation #ITW #Exploitation #Vulnerability #CVE202524813
##updated 2025-04-03T20:15:25.897000
2 posts
Anyone use MinIO S3-compatible storage? They released a vuln you might be interested in.
https://github.com/minio/minio/security/advisories/GHSA-wg47-6jq2-q2hh
sev:HIGH 8.7 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
##MinIO is a High Performance Object Storage released under GNU Affero General Public License v3.0. The signature component of the authorization may be invalid, which would mean that as a client you can use any arbitrary secret to upload objects given the user already has prior WRITE permissions on the bucket. Prior knowledge of access-key, and bucket name this user might have access
to - and an access-key with a WRITE permissions is necessary. However with relevant information in place, uploading random objects to buckets is trivial and easy via curl. This issue is fixed in RELEASE.2025-04-03T14-56-28Z.
Anyone use MinIO S3-compatible storage? They released a vuln you might be interested in.
https://github.com/minio/minio/security/advisories/GHSA-wg47-6jq2-q2hh
sev:HIGH 8.7 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
##MinIO is a High Performance Object Storage released under GNU Affero General Public License v3.0. The signature component of the authorization may be invalid, which would mean that as a client you can use any arbitrary secret to upload objects given the user already has prior WRITE permissions on the bucket. Prior knowledge of access-key, and bucket name this user might have access
to - and an access-key with a WRITE permissions is necessary. However with relevant information in place, uploading random objects to buckets is trivial and easy via curl. This issue is fixed in RELEASE.2025-04-03T14-56-28Z.
updated 2025-04-03T18:32:01
2 posts
If you or your targets are running pgAdmin for PostgreSQL, you might be interested in these.
https://github.com/pgadmin-org/pgadmin4/issues/8603
sev:CRIT 9.9 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Remote Code Execution security vulnerability in pgAdmin 4 (Query Tool and Cloud Deployment modules).
The vulnerability is associated with the 2 POST endpoints; /sqleditor/query_tool/download, where the query_commited parameter and /cloud/deploy endpoint, where the high_availability parameter is unsafely passed to the Python eval() function, allowing arbitrary code execution.
This issue affects pgAdmin 4: before 9.2.
https://nvd.nist.gov/vuln/detail/CVE-2025-2945
https://github.com/pgadmin-org/pgadmin4/issues/8602
sev:CRIT 9.1 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H
##pgAdmin <= 9.1 is affected by a security vulnerability with Cross-Site Scripting(XSS). If attackers execute any arbitrary HTML/JavaScript in a user's browser through query result rendering, then HTML/JavaScript runs on the browser.
If you or your targets are running pgAdmin for PostgreSQL, you might be interested in these.
https://github.com/pgadmin-org/pgadmin4/issues/8603
sev:CRIT 9.9 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Remote Code Execution security vulnerability in pgAdmin 4 (Query Tool and Cloud Deployment modules).
The vulnerability is associated with the 2 POST endpoints; /sqleditor/query_tool/download, where the query_commited parameter and /cloud/deploy endpoint, where the high_availability parameter is unsafely passed to the Python eval() function, allowing arbitrary code execution.
This issue affects pgAdmin 4: before 9.2.
https://nvd.nist.gov/vuln/detail/CVE-2025-2945
https://github.com/pgadmin-org/pgadmin4/issues/8602
sev:CRIT 9.1 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H
##pgAdmin <= 9.1 is affected by a security vulnerability with Cross-Site Scripting(XSS). If attackers execute any arbitrary HTML/JavaScript in a user's browser through query result rendering, then HTML/JavaScript runs on the browser.
updated 2025-04-03T18:32:01
2 posts
If you or your targets are running pgAdmin for PostgreSQL, you might be interested in these.
https://github.com/pgadmin-org/pgadmin4/issues/8603
sev:CRIT 9.9 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Remote Code Execution security vulnerability in pgAdmin 4 (Query Tool and Cloud Deployment modules).
The vulnerability is associated with the 2 POST endpoints; /sqleditor/query_tool/download, where the query_commited parameter and /cloud/deploy endpoint, where the high_availability parameter is unsafely passed to the Python eval() function, allowing arbitrary code execution.
This issue affects pgAdmin 4: before 9.2.
https://nvd.nist.gov/vuln/detail/CVE-2025-2945
https://github.com/pgadmin-org/pgadmin4/issues/8602
sev:CRIT 9.1 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H
##pgAdmin <= 9.1 is affected by a security vulnerability with Cross-Site Scripting(XSS). If attackers execute any arbitrary HTML/JavaScript in a user's browser through query result rendering, then HTML/JavaScript runs on the browser.
If you or your targets are running pgAdmin for PostgreSQL, you might be interested in these.
https://github.com/pgadmin-org/pgadmin4/issues/8603
sev:CRIT 9.9 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Remote Code Execution security vulnerability in pgAdmin 4 (Query Tool and Cloud Deployment modules).
The vulnerability is associated with the 2 POST endpoints; /sqleditor/query_tool/download, where the query_commited parameter and /cloud/deploy endpoint, where the high_availability parameter is unsafely passed to the Python eval() function, allowing arbitrary code execution.
This issue affects pgAdmin 4: before 9.2.
https://nvd.nist.gov/vuln/detail/CVE-2025-2945
https://github.com/pgadmin-org/pgadmin4/issues/8602
sev:CRIT 9.1 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H
##pgAdmin <= 9.1 is affected by a security vulnerability with Cross-Site Scripting(XSS). If attackers execute any arbitrary HTML/JavaScript in a user's browser through query result rendering, then HTML/JavaScript runs on the browser.
updated 2025-04-03T18:32:01
2 posts
The CVE is published for this one. No CVSS yet though: https://nvd.nist.gov/vuln/detail/CVE-2025-30456
##https://support.apple.com/en-us/122371
##DiskArbitration
Available for: iPhone XS and later, iPad Pro 13-inch, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 7th generation and later, and iPad mini 5th generation and later
Impact: An app may be able to gain root privileges
Description: A parsing issue in the handling of directory paths was addressed with improved path validation.
CVE-2025-30456: Gergely Kalman (@gergely_kalman)
updated 2025-04-03T18:31:05
2 posts
LPE in OpenVPN-GUI on Windows.
https://community.openvpn.net/openvpn/wiki/CVE-2024-4877
##OpenVPN version 2.4.0 through 2.6.10 on Windows allows an external, lesser privileged process to create a named pipe which the OpenVPN GUI component would connect to allowing it to escalate its privileges
LPE in OpenVPN-GUI on Windows.
https://community.openvpn.net/openvpn/wiki/CVE-2024-4877
##OpenVPN version 2.4.0 through 2.6.10 on Windows allows an external, lesser privileged process to create a named pipe which the OpenVPN GUI component would connect to allowing it to escalate its privileges
updated 2025-04-03T16:15:35.370000
12 posts
Suspected China-Nexus Threat Actor Actively Exploiting Critical Ivanti Connect Secure Vulnerability (CVE-2025-22457)
#CVE_2025_22457 #UNC5221 #TRAILBLAZE #BRUSHFIRE #SPAWNSNARE #SPAWNWAVE
https://cloud.google.com/blog/topics/threat-intelligence/china-nexus-exploiting-critical-ivanti-vulnerability
🚨CVE-2025-22457: April Security Advisory Ivanti Connect Secure, Policy Secure & ZTA Gateways (CVE-2025-22457)
CVSS: 9.0
##Suspected China-Nexus Threat Actor Actively Exploiting Critical Ivanti Connect Secure Vulnerability (CVE-2025-22457) https://cloud.google.com/blog/topics/threat-intelligence/china-nexus-exploiting-critical-ivanti-vulnerability/
##Tracked as CVE-2025-22457.
Ivanti Security Update: Pulse Connect Secure, Ivanti Connect Secure, Policy Secure and Neurons for ZTA Gateways https://www.ivanti.com/blog/security-update-pulse-connect-secure-ivanti-connect-secure-policy-secure-and-neurons-for-zta-gateways #cybersecurity #infosec #Ivanti
##Go hack some more Ivanti shit. Someone else already has been.
sev:CRIT 9.0 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6, Ivanti Policy Secure before version 22.7R1.4, and Ivanti ZTA Gateways before version 22.8R2.2 allows a remote unauthenticated attacker to achieve remote code execution.
https://nvd.nist.gov/vuln/detail/CVE-2025-22457
Edit to add:
##We are aware of a limited number of customers whose Ivanti Connect Secure (22.7R2.5 or earlier) and End-of-Support Pulse Connect Secure 9.1x appliances have been exploited at the time of disclosure. Pulse Connect Secure 9.1x reached End-of-Support on December 31, 2024, and no longer receive code support or changes.
ah tiens, ce serait donc celle-là la mystérieuse vulnérabilité en exploitation observée par les honeypots ? 👀
⚠️ Vulnérabilité critique chez Ivanti Connect Secure (CVE-2025-22457)
Mandiant signale qu’une faille critique affectant certaines versions des VPN Ivanti est activement exploitée depuis mars 2025. Des acteurs liés à la Chine (UNC5221) ont déployé plusieurs malwares furtifs, comme TRAILBLAZE (dropper en mémoire) et BRUSHFIRE (porte dérobée passive), via cette faille.
➡️ Un patch est dispo depuis février, mais la menace a été sous-estimée au départ.
➡️ Si vous utilisez Ivanti ICS, mettez à jour rapidement vers la version 22.7R2.6 ou ultérieure.
(Utilisez les outils d'intégrité d'Ivanti pour détecter toute activité anormale.)
"Suspected China-Nexus Threat Actor Actively Exploiting Critical Ivanti Connect Secure Vulnerability (CVE-2025-22457)"👇
https://cloud.google.com/blog/topics/threat-intelligence/china-nexus-exploiting-critical-ivanti-vulnerability/?hl=en
🚨CVE-2025-22457: April Security Advisory Ivanti Connect Secure, Policy Secure & ZTA Gateways (CVE-2025-22457)
CVSS: 9.0
##Ivanti VPN customers targeted via unrecognized RCE vulnerability (CVE-2025-22457) https://www.helpnetsecurity.com/2025/04/03/ivanti-vpn-customers-targeted-via-unrecognized-rce-vulnerability-cve-2025-22457/ #cyberespionage #vulnerability #Don'tmiss #Hotstuff #Mandiant #Ivanti #News #VPN
##Suspected China-Nexus Threat Actor Actively Exploiting Critical Ivanti Connect Secure Vulnerability (CVE-2025-22457) https://cloud.google.com/blog/topics/threat-intelligence/china-nexus-exploiting-critical-ivanti-vulnerability/
##Tracked as CVE-2025-22457.
Ivanti Security Update: Pulse Connect Secure, Ivanti Connect Secure, Policy Secure and Neurons for ZTA Gateways https://www.ivanti.com/blog/security-update-pulse-connect-secure-ivanti-connect-secure-policy-secure-and-neurons-for-zta-gateways #cybersecurity #infosec #Ivanti
##Go hack some more Ivanti shit. Someone else already has been.
sev:CRIT 9.0 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6, Ivanti Policy Secure before version 22.7R1.4, and Ivanti ZTA Gateways before version 22.8R2.2 allows a remote unauthenticated attacker to achieve remote code execution.
https://nvd.nist.gov/vuln/detail/CVE-2025-22457
Edit to add:
##We are aware of a limited number of customers whose Ivanti Connect Secure (22.7R2.5 or earlier) and End-of-Support Pulse Connect Secure 9.1x appliances have been exploited at the time of disclosure. Pulse Connect Secure 9.1x reached End-of-Support on December 31, 2024, and no longer receive code support or changes.
ah tiens, ce serait donc celle-là la mystérieuse vulnérabilité en exploitation observée par les honeypots ? 👀
⚠️ Vulnérabilité critique chez Ivanti Connect Secure (CVE-2025-22457)
Mandiant signale qu’une faille critique affectant certaines versions des VPN Ivanti est activement exploitée depuis mars 2025. Des acteurs liés à la Chine (UNC5221) ont déployé plusieurs malwares furtifs, comme TRAILBLAZE (dropper en mémoire) et BRUSHFIRE (porte dérobée passive), via cette faille.
➡️ Un patch est dispo depuis février, mais la menace a été sous-estimée au départ.
➡️ Si vous utilisez Ivanti ICS, mettez à jour rapidement vers la version 22.7R2.6 ou ultérieure.
(Utilisez les outils d'intégrité d'Ivanti pour détecter toute activité anormale.)
"Suspected China-Nexus Threat Actor Actively Exploiting Critical Ivanti Connect Secure Vulnerability (CVE-2025-22457)"👇
https://cloud.google.com/blog/topics/threat-intelligence/china-nexus-exploiting-critical-ivanti-vulnerability/?hl=en
updated 2025-04-03T15:31:31
2 posts
. @Dio9sys I suppose there may be others who care about Tenda vulns so here you go.
sev:HIGH 8.7 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
##A vulnerability was found in Tenda AC10 16.03.10.13 and classified as critical. This issue affects the function ShutdownSetAdd of the file /goform/ShutdownSetAdd. The manipulation of the argument list leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
. @Dio9sys I suppose there may be others who care about Tenda vulns so here you go.
sev:HIGH 8.7 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
##A vulnerability was found in Tenda AC10 16.03.10.13 and classified as critical. This issue affects the function ShutdownSetAdd of the file /goform/ShutdownSetAdd. The manipulation of the argument list leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
updated 2025-04-03T15:31:26
2 posts
There are more CVEs for libsoup but because I'm 12, here's one specifically because I like the function name.
https://access.redhat.com/security/cve/CVE-2025-32052
##A flaw was found in libsoup. A vulnerability in the sniff_unknown() function may lead to heap buffer over-read.
There are more CVEs for libsoup but because I'm 12, here's one specifically because I like the function name.
https://access.redhat.com/security/cve/CVE-2025-32052
##A flaw was found in libsoup. A vulnerability in the sniff_unknown() function may lead to heap buffer over-read.
updated 2025-04-03T15:31:09
1 posts
Backdoor in a robot dog thing? Yes please.
https://takeonme.org/cves/cve-2025-2894/
sev:MED 6.6 - CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
##The Go1 also known as "The World's First Intelligence Bionic Quadruped Robot Companion of Consumer Level," contains an undocumented backdoor that can enable the manufacturer, and anyone in possession of the correct API key, complete remote control over the affected robotic device using the CloudSail remote access service.
updated 2025-04-03T13:26:09
1 posts
I don't know the Tauri shell but shell plugins seem like a nice attack surface if you know your target is running them.
https://github.com/tauri-apps/plugins-workspace/security/advisories/GHSA-c9pr-q8gx-3mgp
sev:CRIT 9.3 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
##The Tauri shell plugin allows access to the system shell. Prior to 2.2.1, the Tauri shell plugin exposes functionality to execute code and open programs on the system. The open endpoint of this plugin is designed to allow open functionality with the system opener (e.g. xdg-open on Linux). This was meant to be restricted to a reasonable number of protocols like https or mailto by default. This default restriction was not functional due to improper validation of the allowed protocols, allowing for potentially dangerous protocols like file://, smb://, or nfs:// and others to be opened by the system registered protocol handler. By passing untrusted user input to the open endpoint these potentially dangerous protocols can be abused to gain remote code execution on the system. This either requires direct exposure of the endpoint to application users or code execution in the frontend of a Tauri application. This vulnerability is fixed in 2.2.1.
updated 2025-04-03T13:26:03
1 posts
This seems like a pretty small scope but people seem to like leaked tokens so here you go.
https://github.com/canonical/get-workflow-version-action/security/advisories/GHSA-26wh-cc3r-w6pj
sev:HIGH 8.2 - CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:H
##canonical/get-workflow-version-action is a GitHub composite action to get commit SHA that GitHub Actions reusable workflow was called with. Prior to 1.0.1, if the get-workflow-version-action step fails, the exception output may include the GITHUB_TOKEN. If the full token is included in the exception output, GitHub will automatically redact the secret from the GitHub Actions logs. However, the token may be truncated—causing part of the GITHUB_TOKEN to be displayed in plaintext in the GitHub Actions logs. Anyone with read access to the GitHub repository can view GitHub Actions logs. For public repositories, anyone can view the GitHub Actions logs. The opportunity to exploit this vulnerability is limited—the GITHUB_TOKEN is automatically revoked when the job completes. However, there is an opportunity for an attack in the time between the GITHUB_TOKEN being displayed in the logs and the completion of the job. Users using the github-token input are impacted. This vulnerability is fixed in 1.0.1.
updated 2025-04-03T13:24:27
1 posts
Vercel found a sev:LOW
in doing next dot js code review after CVE-2025-29927 and already published a CVE so that's nice to see.
https://github.com/vercel/next.js/security/advisories/GHSA-223j-4rm8-mrmf
sev:LOW 1.7 - CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
##Next.js is a React framework for building full-stack web applications. To mitigate CVE-2025-29927, Next.js validated the x-middleware-subrequest-id which persisted across multiple incoming requests. However, this subrequest ID is sent to all requests, even if the destination is not the same host as the Next.js application. Initiating a fetch request to a third-party within Middleware will send the x-middleware-subrequest-id to that third party. This vulnerability is fixed in 12.3.6, 13.5.10, 14.2.26, and 15.2.4.
updated 2025-04-03T09:32:21
2 posts
Malform chunks leading to ( request ) smuggling? Watch out, Apache Traffic Server, I'm built for this.
https://lists.apache.org/thread/rwyx91rsrnmpjbm04footfjjf6m9d1c9
##Apache Traffic Server allows request smuggling if chunked messages are malformed.
This issue affects Apache Traffic Server: from 9.2.0 through 9.2.9, from 10.0.0 through 10.0.4.
Users are recommended to upgrade to version 9.2.10 or 10.0.5, which fixes the issue.
Malform chunks leading to ( request ) smuggling? Watch out, Apache Traffic Server, I'm built for this.
https://lists.apache.org/thread/rwyx91rsrnmpjbm04footfjjf6m9d1c9
##Apache Traffic Server allows request smuggling if chunked messages are malformed.
This issue affects Apache Traffic Server: from 9.2.0 through 9.2.9, from 10.0.0 through 10.0.4.
Users are recommended to upgrade to version 9.2.10 or 10.0.5, which fixes the issue.
updated 2025-04-03T06:30:29
2 posts
MotW bypass CVE in WinRAR. I thought MotW bypass wasn't a real vulnerability? 🤪
Anyway, patch your WinRAR that you totally paid for.
https://jvn.jp/en/jp/JVN59547048/
sev:MED 6.8 - CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
##Issue that bypasses the "Mark of the Web" security warning function for files when opening a symbolic link that points to an executable file exists in WinRAR versions prior to 7.11. If a symbolic link specially crafted by an attacker is opened on the affected product, arbitrary code may be executed.
MotW bypass CVE in WinRAR. I thought MotW bypass wasn't a real vulnerability? 🤪
Anyway, patch your WinRAR that you totally paid for.
https://jvn.jp/en/jp/JVN59547048/
sev:MED 6.8 - CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
##Issue that bypasses the "Mark of the Web" security warning function for files when opening a symbolic link that points to an executable file exists in WinRAR versions prior to 7.11. If a symbolic link specially crafted by an attacker is opened on the affected product, arbitrary code may be executed.
updated 2025-04-03T04:42:25
2 posts
All servers have been updated to OpenVPN 2.6.14 to address CVE-2025-2704
##OpenVPN Server DoS could be a bummer if your configuration leaves you impacted.
https://community.openvpn.net/openvpn/wiki/CVE-2025-2704
##OpenVPN version 2.6.1 through 2.6.13 in server mode using TLS-crypt-v2 allows remote attackers to trigger a denial of service by corrupting and replaying network packets in the early handshake phase
updated 2025-04-03T04:41:25
2 posts
2 repos
https://github.com/em0gi/CVE-2025-27840
https://github.com/demining/Bluetooth-Attacks-CVE-2025-27840
No soup for you? More like too much soup for you. HAHA. Get it? Because it's... Never mind. I'll get more coffee.
https://gitlab.gnome.org/GNOME/libsoup/-/issues/422
sev:HIGH 7.0 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H
##A flaw was found in libsoup. The package is vulnerable to a heap buffer over-read when sniffing content via the skip_insight_whitespace() function. Libsoup clients may read one byte out-of-bounds in response to a crafted HTTP response by an HTTP server.
No soup for you? More like too much soup for you. HAHA. Get it? Because it's... Never mind. I'll get more coffee.
https://gitlab.gnome.org/GNOME/libsoup/-/issues/422
sev:HIGH 7.0 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H
##A flaw was found in libsoup. The package is vulnerable to a heap buffer over-read when sniffing content via the skip_insight_whitespace() function. Libsoup clients may read one byte out-of-bounds in response to a crafted HTTP response by an HTTP server.
updated 2025-04-03T00:32:35
1 posts
Crypto vuln? In perl? That seems like something fedi is built to argue about.
https://metacpan.org/release/ZEFRAM/Data-Entropy-0.007/source/lib/Data/Entropy.pm#L80
##Data::Entropy for Perl 0.007 and earlier use the rand() function as the default source of entropy, which is not cryptographically secure, for cryptographic functions.
updated 2025-04-02T22:15:19.823000
2 posts
A critical flaw in Apache Parquet could let attackers run code remotely on your systems—rated a perfect 10.0 for severity. Is your big data framework safe? Read up on the fix and protect your data today.
#cve202530065
#apacheparquet
#rcevulnerability
#bigdatasecurity
#cybersecurity
And we have a perfect 10 in Apache Parquet, whatever that is. 🥳
sev:CRIT 10.0 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
##Schema parsing in the parquet-avro module of Apache Parquet 1.15.0 and previous versions allows bad actors to execute arbitrary code
Users are recommended to upgrade to version 1.15.1, which fixes the issue.
updated 2025-04-02T22:15:18.093000
1 posts
Linux kernel: CVE-2024-57882 fix did not prevent data stream corruption in the MPTCP protocol
##updated 2025-04-02T21:15:33.187000
12 posts
1 repos
⚠️ CrushFTP Vulnerability Highlights Why Disclosure Discipline Matters
CVE-2025-2825, a critical auth bypass (CVSS 9.8) in CrushFTP, is now being actively exploited—with over 1,500 vulnerable servers online. But worse than the bug is the chaotic public drama around disclosure:
・Initial private alerts went out March 21 with minimal detail
・VulnCheck published a PoC, assigned its own CVE
・CrushFTP’s CEO accused vendors of harming customers
・Disputes led to confusion, CVE duplication, and rapid exploit weaponization
This is a case study in how poor coordination and ego can turn a patchable flaw into a public incident.
Security leaders: keep disclosure timelines tight, consistent, and put protection ahead of pride.
#CyberSecurity #DisclosureBestPractices #VulnerabilityManagement #CrushFTP #CVEs #IncidentResponse #PatchManagement
##Enables unauthenticated access to unpatched devices!
CrushFTP CVE-2025-2825 flaw actively exploited in the wild https://securityaffairs.com/176097/hacking/crushftp-cve-2025-2825-flaw-actively-exploited.html
##Enables unauthenticated access to unpatched devices!
CrushFTP CVE-2025-2825 flaw actively exploited in the wild https://securityaffairs.com/176097/hacking/crushftp-cve-2025-2825-flaw-actively-exploited.html
##CrushFTP Authentication Bypass - CVE-2025-2825 — ProjectDiscovery Blog https://projectdiscovery.io/blog/crushftp-authentication-bypass
##CrushFTP CVE-2025-2825 flaw actively exploited in the wild – Source: securityaffairs.com https://ciso2ciso.com/crushftp-cve-2025-2825-flaw-actively-exploited-in-the-wild-source-securityaffairs-com/ #rssfeedpostgeneratorecho #informationsecuritynews #ITInformationSecurity #SecurityAffairscom #CyberSecurityNews #PierluigiPaganini #SecurityAffairs #SecurityAffairs #BreakingNews #SecurityNews #hackingnews #CrushFTP #Security #hacking
##Attackers are targeting CrushFTP vulnerability with public PoC (CVE-2025-2825) https://www.helpnetsecurity.com/2025/04/01/crushftp-vulnerability-exploitation-cve-2025-2825/ #Shadowserver #Don'tmiss #VulnCheck #Hotstuff #CrushFTP #Rapid7 #News #CVE #PoC
##CrushFTP Authentication Bypass - CVE-2025-2825 — ProjectDiscovery Blog https://projectdiscovery.io/blog/crushftp-authentication-bypass
##Full technical analysis of CrushFTP CVE-2025-2825 here c/o @fuzz, and props to the Project Discovery folks who look to have come up with the same findings https://attackerkb.com/topics/k0EgiL9Psz/cve-2025-2825/rapid7-analysis
##CrushFTP: Patch critical vulnerability ASAP! (CVE-2025-2825) https://www.helpnetsecurity.com/2025/03/27/crushftp-vulnerability-cve-2025-2825/ #securityupdate #vulnerability #file-sharing #enterprise #Don'tmiss #Hotstuff #CrushFTP #News #SMBs
##🚨CVE-2025-2825: Unauthenticated HTTP(S) port access on CrushFTPv10/v11
CVSS: 9.8
https://darkwebinformer.com/cve-2025-2825-unauthenticated-http-s-port-access-on-crushftpv10-v11/
##The CrushFTP CVE that @catc0n has been talking about is finally published.
https://www.crushftp.com/crush11wiki/Wiki.jsp?page=Update
sev:CRIT 9.8 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
##CrushFTP versions 10.0.0 through 10.8.3 and 11.0.0 through 11.3.0 are affected by a vulnerability that may result in unauthenticated access. Remote and unauthenticated HTTP requests to CrushFTP may allow attackers to gain unauthorized access.
Our pals over at VulnCheck very kindly assigned a CVE for the CrushFTP issue since CrushFTP appears reluctant to do the needful directly (thx @albinolobster!)
##updated 2025-04-02T18:31:05
1 posts
Trend Micro released an advisory for Trend Vision One. There are five CVEs for broken access control and one for HTML injection.
https://success.trendmicro.com/en-US/solution/KA-0019386
CVE-2025-31282, CVE-2025-31283, CVE-2025-31284, CVE-2025-31285: Broken Access Control Vulnerabilities
CVE-2025-31286: HTML Injection Vulnerability
updated 2025-04-02T18:31:04
2 posts
The Meraki bug, tracked as CVE-2025-20212, was discovered in the AnyConnect VPN server, and was the result of a variable not being initialized when establishing an SSL VPN session. https://www.securityweek.com/vulnerabilities-expose-cisco-meraki-and-ece-products-to-dos-attacks/
##The Meraki bug, tracked as CVE-2025-20212, was discovered in the AnyConnect VPN server, and was the result of a variable not being initialized when establishing an SSL VPN session. https://www.securityweek.com/vulnerabilities-expose-cisco-meraki-and-ece-products-to-dos-attacks/
##updated 2025-04-02T18:31:04
1 posts
Trend Micro released an advisory for Trend Vision One. There are five CVEs for broken access control and one for HTML injection.
https://success.trendmicro.com/en-US/solution/KA-0019386
CVE-2025-31282, CVE-2025-31283, CVE-2025-31284, CVE-2025-31285: Broken Access Control Vulnerabilities
CVE-2025-31286: HTML Injection Vulnerability
updated 2025-04-02T18:31:04
1 posts
Trend Micro released an advisory for Trend Vision One. There are five CVEs for broken access control and one for HTML injection.
https://success.trendmicro.com/en-US/solution/KA-0019386
CVE-2025-31282, CVE-2025-31283, CVE-2025-31284, CVE-2025-31285: Broken Access Control Vulnerabilities
CVE-2025-31286: HTML Injection Vulnerability
updated 2025-04-02T18:31:04
1 posts
Trend Micro released an advisory for Trend Vision One. There are five CVEs for broken access control and one for HTML injection.
https://success.trendmicro.com/en-US/solution/KA-0019386
CVE-2025-31282, CVE-2025-31283, CVE-2025-31284, CVE-2025-31285: Broken Access Control Vulnerabilities
CVE-2025-31286: HTML Injection Vulnerability
updated 2025-04-02T18:31:04
1 posts
Trend Micro released an advisory for Trend Vision One. There are five CVEs for broken access control and one for HTML injection.
https://success.trendmicro.com/en-US/solution/KA-0019386
CVE-2025-31282, CVE-2025-31283, CVE-2025-31284, CVE-2025-31285: Broken Access Control Vulnerabilities
CVE-2025-31286: HTML Injection Vulnerability
updated 2025-04-02T18:31:04
1 posts
New. The four vulnerabilities are CVE-2025-0014, CVE-2024-36337, CVE-2024-36328, and CVE-2024-36336, all rated for high severity.
AMD Ryzen™ AI Software Vulnerabilities https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7037.html #cybersecurity #Infosec #AMD #AI
AMD main product security link: https://www.amd.com/en/resources/product-security.html
##updated 2025-04-02T18:31:04
1 posts
New. The four vulnerabilities are CVE-2025-0014, CVE-2024-36337, CVE-2024-36328, and CVE-2024-36336, all rated for high severity.
AMD Ryzen™ AI Software Vulnerabilities https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7037.html #cybersecurity #Infosec #AMD #AI
AMD main product security link: https://www.amd.com/en/resources/product-security.html
##updated 2025-04-02T18:30:59
1 posts
New. The four vulnerabilities are CVE-2025-0014, CVE-2024-36337, CVE-2024-36328, and CVE-2024-36336, all rated for high severity.
AMD Ryzen™ AI Software Vulnerabilities https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7037.html #cybersecurity #Infosec #AMD #AI
AMD main product security link: https://www.amd.com/en/resources/product-security.html
##updated 2025-04-02T18:30:59
1 posts
New. The four vulnerabilities are CVE-2025-0014, CVE-2024-36337, CVE-2024-36328, and CVE-2024-36336, all rated for high severity.
AMD Ryzen™ AI Software Vulnerabilities https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7037.html #cybersecurity #Infosec #AMD #AI
AMD main product security link: https://www.amd.com/en/resources/product-security.html
##updated 2025-04-02T17:14:59
1 posts
Drupal published a bunch of CVEs for recent vulns of theirs, though they haven't been assessed for CVSS yet. I'm not going to list them all but there is one I want to point out.
https://www.drupal.org/security
##Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Drupal AI (Artificial Intelligence) allows OS Command Injection.This issue affects AI (Artificial Intelligence): from 0.0.0 before 1.0.5.
updated 2025-04-02T15:32:25
1 posts
1 repos
Patch your Mozilla things. They released an advisory for Firefox and Thunderbird with four sev:HIGH
vulns.
https://www.mozilla.org/en-US/security/advisories/mfsa2025-20/
##CVE-2025-3028: Use-after-free triggered by XSLTProcessor
CVE-2025-3031: JIT optimization bug with different stack slot sizes
CVE-2025-3032: Leaking file descriptors from the fork server
CVE-2025-3029: URL bar spoofing via non-BMP Unicode characters
CVE-2025-3035: Tab title disclosure across pages when using AI chatbot
CVE-2025-3033: Opening local .url files could lead to another file being opened
CVE-2025-3030: Memory safety bugs fixed in Firefox 137, Thunderbird 137, Firefox ESR 128.9, and Thunderbird 128.9
CVE-2025-3034: Memory safety bugs fixed in Firefox 137 and Thunderbird 137
updated 2025-04-02T15:31:44
1 posts
It seems like it's been a while since I've seen a SquirrelMail vuln.
sev:HIGH 7.2 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
https://squirrelmail.org/security/issue.php?d=2025-04-02
##mime.php in SquirrelMail through 1.4.23-svn-20250401 and 1.5.x through 1.5.2-svn-20250401 allows XSS via e-mail headers, because JavaScript payloads are mishandled after $encoded has been set to true.
updated 2025-04-02T14:58:07.527000
1 posts
Another new CVE for an old critical ../ by Fortinet.
https://www.fortiguard.com/psirt/FG-IR-23-085
sev:CRIT 9.9 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
##A relative path traversal in Fortinet FortiSIEM versions 7.0.0, 6.7.0 through 6.7.2, 6.6.0 through 6.6.3, 6.5.1, 6.5.0 allows attacker to escalate privilege via uploading certain GUI elements
updated 2025-04-02T14:58:07.527000
1 posts
1 repos
Researchers, you don't need to be this patient. Just publish that shit.
https://medium.com/@mihat2/onlyoffice-document-server-path-traversal-fdd573fec291
##Directory Traversal vulnerability in ONLYOFFICE Document Server v.7.5.0 and before allows a remote attacker to obtain sensitive information via a crafted file upload.
- October 10, 2023 – The moment I realized the flaw was real, I immediately reached out to ONLYOFFICE’s security team. To my surprise, they responded the same day! To ensure they had all the details, I sent them a thorough PDF report outlining the vulnerability, complete with technical analysis, proof-of-concept, and potential impact. I thought this was going to be a smooth disclosure process — how wrong I was.
- October 11 — November 19, 2023 — I followed up. Again. And again. Silence. Maybe my emails were lost? Maybe they were ignoring me? Either way, weeks passed, and still — no response.
- November 20, 2023 – We submitted the vulnerability to HackerOne, hoping to reach the ONLYOFFICE through another channel.
- December 4, 2023 – With no response from HackerOne, we escalated the report to HackerOne Disclosure Assistance, but STILL received no response.
- February 19, 2024 – ONLYOFFICE finally responded, stating that they were working on a fix.
- February 26, 2024 – ONLYOFFICE released a fix for the vulnerability.
- April 1, 2024 – ONLYOFFICE informed us that while the fix was available, some products would not receive the security patch until Summer 2024. They requested that we delay public disclosure until July 2024.
- February 21, 2025 – HackerOne Disclosure Assistance responded, stating that they were reviewing the backlog and asked for an update on the current situation.
updated 2025-04-02T09:30:43
1 posts
Zabbix published a few CVEs, including a couple sev:HIGH
vulns.
https://support.zabbix.com/browse/ZBX-26257
sev:HIGH 8.6 - CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
A low privilege (regular) Zabbix user with API access can use SQL injection vulnerability in include/classes/api/CApiService.php to execute arbitrary SQL commands via the groupBy parameter.
https://nvd.nist.gov/vuln/detail/CVE-2024-36465
https://support.zabbix.com/browse/ZBX-26254
sev:HIGH 7.5 - CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
##The endpoint /zabbix.php?action=export.valuemaps suffers from a Cross-Site Scripting vulnerability via the backurl parameter. This is caused by the reflection of user-supplied data without appropriate HTML escaping or output encoding. As a result, a JavaScript payload may be injected into the above endpoint causing it to be executed within the context of the victim's browser.
updated 2025-04-02T09:30:43
1 posts
Ooh, vulns in Moxa kit released today.
sev:CRIT 9.2 - CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:H
A remote attacker with web administrator privileges can exploit the device’s web interface to execute arbitrary system commands through the NTP settings. Successful exploitation may result in the device entering an infinite reboot loop, leading to a total or partial denial of connectivity for downstream systems that rely on its network services.
https://nvd.nist.gov/vuln/detail/CVE-2025-0415
sev:HIGH 8.6 - CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
##This vulnerability involves command injection in tcpdump within Moxa products, enabling an authenticated attacker with console access to exploit improper input validation to inject and execute systems commands. Successful exploitation could result in privilege escalation, allowing the attacker to gain root shell access and maintain persistent control over the device, potentially disrupting network services and affecting the availability of downstream systems that rely on its connectivity.
updated 2025-04-02T09:30:43
1 posts
Ooh, vulns in Moxa kit released today.
sev:CRIT 9.2 - CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:H
A remote attacker with web administrator privileges can exploit the device’s web interface to execute arbitrary system commands through the NTP settings. Successful exploitation may result in the device entering an infinite reboot loop, leading to a total or partial denial of connectivity for downstream systems that rely on its network services.
https://nvd.nist.gov/vuln/detail/CVE-2025-0415
sev:HIGH 8.6 - CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
##This vulnerability involves command injection in tcpdump within Moxa products, enabling an authenticated attacker with console access to exploit improper input validation to inject and execute systems commands. Successful exploitation could result in privilege escalation, allowing the attacker to gain root shell access and maintain persistent control over the device, potentially disrupting network services and affecting the availability of downstream systems that rely on its connectivity.
updated 2025-04-02T06:30:55
1 posts
Zabbix published a few CVEs, including a couple sev:HIGH
vulns.
https://support.zabbix.com/browse/ZBX-26257
sev:HIGH 8.6 - CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
A low privilege (regular) Zabbix user with API access can use SQL injection vulnerability in include/classes/api/CApiService.php to execute arbitrary SQL commands via the groupBy parameter.
https://nvd.nist.gov/vuln/detail/CVE-2024-36465
https://support.zabbix.com/browse/ZBX-26254
sev:HIGH 7.5 - CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
##The endpoint /zabbix.php?action=export.valuemaps suffers from a Cross-Site Scripting vulnerability via the backurl parameter. This is caused by the reflection of user-supplied data without appropriate HTML escaping or output encoding. As a result, a JavaScript payload may be injected into the above endpoint causing it to be executed within the context of the victim's browser.
updated 2025-04-01T21:32:20
1 posts
Patch your Mozilla things. They released an advisory for Firefox and Thunderbird with four sev:HIGH
vulns.
https://www.mozilla.org/en-US/security/advisories/mfsa2025-20/
##CVE-2025-3028: Use-after-free triggered by XSLTProcessor
CVE-2025-3031: JIT optimization bug with different stack slot sizes
CVE-2025-3032: Leaking file descriptors from the fork server
CVE-2025-3029: URL bar spoofing via non-BMP Unicode characters
CVE-2025-3035: Tab title disclosure across pages when using AI chatbot
CVE-2025-3033: Opening local .url files could lead to another file being opened
CVE-2025-3030: Memory safety bugs fixed in Firefox 137, Thunderbird 137, Firefox ESR 128.9, and Thunderbird 128.9
CVE-2025-3034: Memory safety bugs fixed in Firefox 137 and Thunderbird 137
updated 2025-04-01T21:32:20
1 posts
Patch your Mozilla things. They released an advisory for Firefox and Thunderbird with four sev:HIGH
vulns.
https://www.mozilla.org/en-US/security/advisories/mfsa2025-20/
##CVE-2025-3028: Use-after-free triggered by XSLTProcessor
CVE-2025-3031: JIT optimization bug with different stack slot sizes
CVE-2025-3032: Leaking file descriptors from the fork server
CVE-2025-3029: URL bar spoofing via non-BMP Unicode characters
CVE-2025-3035: Tab title disclosure across pages when using AI chatbot
CVE-2025-3033: Opening local .url files could lead to another file being opened
CVE-2025-3030: Memory safety bugs fixed in Firefox 137, Thunderbird 137, Firefox ESR 128.9, and Thunderbird 128.9
CVE-2025-3034: Memory safety bugs fixed in Firefox 137 and Thunderbird 137
updated 2025-04-01T21:32:20
1 posts
Patch your Mozilla things. They released an advisory for Firefox and Thunderbird with four sev:HIGH
vulns.
https://www.mozilla.org/en-US/security/advisories/mfsa2025-20/
##CVE-2025-3028: Use-after-free triggered by XSLTProcessor
CVE-2025-3031: JIT optimization bug with different stack slot sizes
CVE-2025-3032: Leaking file descriptors from the fork server
CVE-2025-3029: URL bar spoofing via non-BMP Unicode characters
CVE-2025-3035: Tab title disclosure across pages when using AI chatbot
CVE-2025-3033: Opening local .url files could lead to another file being opened
CVE-2025-3030: Memory safety bugs fixed in Firefox 137, Thunderbird 137, Firefox ESR 128.9, and Thunderbird 128.9
CVE-2025-3034: Memory safety bugs fixed in Firefox 137 and Thunderbird 137
updated 2025-04-01T21:32:20
1 posts
Patch your Mozilla things. They released an advisory for Firefox and Thunderbird with four sev:HIGH
vulns.
https://www.mozilla.org/en-US/security/advisories/mfsa2025-20/
##CVE-2025-3028: Use-after-free triggered by XSLTProcessor
CVE-2025-3031: JIT optimization bug with different stack slot sizes
CVE-2025-3032: Leaking file descriptors from the fork server
CVE-2025-3029: URL bar spoofing via non-BMP Unicode characters
CVE-2025-3035: Tab title disclosure across pages when using AI chatbot
CVE-2025-3033: Opening local .url files could lead to another file being opened
CVE-2025-3030: Memory safety bugs fixed in Firefox 137, Thunderbird 137, Firefox ESR 128.9, and Thunderbird 128.9
CVE-2025-3034: Memory safety bugs fixed in Firefox 137 and Thunderbird 137
updated 2025-04-01T20:26:30.593000
4 posts
Flaw impacts drivers Generic Plus PCL6, UFR II, LIPS4, LIPSXL, and PS. That's quite a big range! Tracked as CVE-2025-1268 (CVSS score of 9.4).
Microsoft warns of critical flaw in Canon printer drivers https://securityaffairs.com/176104/security/microsoft-warns-of-critical-flaw-in-canon-printer-drivers.html
##Flaw impacts drivers Generic Plus PCL6, UFR II, LIPS4, LIPSXL, and PS. That's quite a big range! Tracked as CVE-2025-1268 (CVSS score of 9.4).
Microsoft warns of critical flaw in Canon printer drivers https://securityaffairs.com/176104/security/microsoft-warns-of-critical-flaw-in-canon-printer-drivers.html
##🚨 Critical vulnerability (CVE-2025-1268) found in Canon printer drivers allow remote code execution with no user interaction - Update your drivers ASAP.
Read: https://hackread.com/canon-printer-drivers-flaw-hackers-run-malicious-code/
##Canon CVE-2025-1268 Vulnerability: A Buffer Overflow Threatening Printer Security https://thecyberexpress.com/canon-printer-vulnerability-cve-2025-1268/ #outofboundsvulnerability #TheCyberExpressNews #Canonvulnerability #Vulnerabilities #TheCyberExpress #FirewallDaily #Canonprinter #CVE20251268 #GenericPlus #CyberNews
##updated 2025-04-01T20:26:22.890000
2 posts
Amazon, posted yesterday: Issue with AWS SAM CLI (CVE-2025-3047, CVE-2025-3048) has been resolved https://aws.amazon.com/security/security-bulletins/AWS-2025-008/ #Amazon #cybersecurity #Inffosec
##Issue with AWS SAM CLI (CVE-2025-3047, CVE-2025-3048)
https://aws.amazon.com/security/security-bulletins/AWS-2025-008/
sev:MED 6.9 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
##When running the AWS Serverless Application Model Command Line Interface (SAM CLI) build process with Docker and symlinks are included in the build files, the container environment allows a user to access privileged files on the host by leveraging the elevated permissions granted to the tool. A user could leverage the elevated permissions to access restricted files via symlinks and copy them to a more permissive location on the container. Users should upgrade to v1.133.0 or newer and ensure any forked or derivative code is patched to incorporate the new fixes.
updated 2025-04-01T20:26:22.890000
2 posts
Amazon, posted yesterday: Issue with AWS SAM CLI (CVE-2025-3047, CVE-2025-3048) has been resolved https://aws.amazon.com/security/security-bulletins/AWS-2025-008/ #Amazon #cybersecurity #Inffosec
##Issue with AWS SAM CLI (CVE-2025-3047, CVE-2025-3048)
https://aws.amazon.com/security/security-bulletins/AWS-2025-008/
sev:MED 6.9 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
##When running the AWS Serverless Application Model Command Line Interface (SAM CLI) build process with Docker and symlinks are included in the build files, the container environment allows a user to access privileged files on the host by leveraging the elevated permissions granted to the tool. A user could leverage the elevated permissions to access restricted files via symlinks and copy them to a more permissive location on the container. Users should upgrade to v1.133.0 or newer and ensure any forked or derivative code is patched to incorporate the new fixes.
updated 2025-04-01T20:26:11.547000
1 posts
LPE in VMWare Aria Operations.
sev:HIGH 7.8 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
VMware Aria Operations contains a local privilege escalation vulnerability. A malicious actor with local administrative privileges can escalate their privileges to root on the appliance running VMware Aria Operations.
##updated 2025-04-01T20:26:11.547000
1 posts
I don't know Apache Pinot but this seems like a good one to keep in your back pocket.
https://lists.apache.org/thread/ksf8qsndr1h66otkbjz2wrzsbw992r8v
##Authentication Bypass Issue
If the path does not contain / and contain., authentication is not required.
Expected Normal Request and Response Example
curl -X POST -H "Content-Type: application/json" -d {\"username\":\"hack2\",\"password\":\"hack\",\"component\":\"CONTROLLER\",\"role\":\"ADMIN\",\"tables\":[],\"permissions\":[],\"usernameWithComponent\":\"hack_CONTROLLER\"} http://{server_ip}:9000/users
Return: {"code":401,"error":"HTTP 401 Unauthorized"}
Malicious Request and Response Example
curl -X POST -H "Content-Type: application/json" -d '{\"username\":\"hack\",\"password\":\"hack\",\"component\":\"CONTROLLER\",\"role\":\"ADMIN\",\"tables\":[],\"permissions\":[],\"usernameWithComponent\":\"hack_CONTROLLER\"}' http://{serverip}:9000/users; http://{serverip}:9000/users; .
Return: {"users":{}}
updated 2025-04-01T20:26:11.547000
1 posts
Three new CVEs in Autodesk Navisworks this morning. All three are sev:HIGH 7.8 - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
.
https://www.autodesk.com/trust/security-advisories/adsk-sa-2025-0002
##CVE-2025-1658: A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.
CVE-2025-1659: A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.
CVE-2025-1660: A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.
updated 2025-04-01T20:26:11.547000
1 posts
Three new CVEs in Autodesk Navisworks this morning. All three are sev:HIGH 7.8 - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
.
https://www.autodesk.com/trust/security-advisories/adsk-sa-2025-0002
##CVE-2025-1658: A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.
CVE-2025-1659: A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.
CVE-2025-1660: A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.
updated 2025-04-01T20:26:11.547000
1 posts
Three new CVEs in Autodesk Navisworks this morning. All three are sev:HIGH 7.8 - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
.
https://www.autodesk.com/trust/security-advisories/adsk-sa-2025-0002
##CVE-2025-1658: A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.
CVE-2025-1659: A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.
CVE-2025-1660: A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.
updated 2025-04-01T20:26:11.547000
1 posts
Patch your Mozilla things. They released an advisory for Firefox and Thunderbird with four sev:HIGH
vulns.
https://www.mozilla.org/en-US/security/advisories/mfsa2025-20/
##CVE-2025-3028: Use-after-free triggered by XSLTProcessor
CVE-2025-3031: JIT optimization bug with different stack slot sizes
CVE-2025-3032: Leaking file descriptors from the fork server
CVE-2025-3029: URL bar spoofing via non-BMP Unicode characters
CVE-2025-3035: Tab title disclosure across pages when using AI chatbot
CVE-2025-3033: Opening local .url files could lead to another file being opened
CVE-2025-3030: Memory safety bugs fixed in Firefox 137, Thunderbird 137, Firefox ESR 128.9, and Thunderbird 128.9
CVE-2025-3034: Memory safety bugs fixed in Firefox 137 and Thunderbird 137
updated 2025-04-01T20:26:01.990000
1 posts
Simple and practical vulns like this are always nice to read about and learn from and replicate.
https://github.com/remix-run/react-router/security/advisories/GHSA-4q56-crqp-v477
sev:HIGH 7.5 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
##React Router is a multi-strategy router for React bridging the gap from React 18 to React 19. There is a vulnerability in Remix/React Router that affects all Remix 2 and React Router 7 consumers using the Express adapter. Basically, this vulnerability allows anyone to spoof the URL used in an incoming Request by putting a URL pathname in the port section of a URL that is part of a Host or X-Forwarded-Host header sent to a Remix/React Router request handler. This issue has been patched and released in Remix 2.16.3 and React Router 7.4.1.
updated 2025-04-01T18:30:49
1 posts
Patch your Mozilla things. They released an advisory for Firefox and Thunderbird with four sev:HIGH
vulns.
https://www.mozilla.org/en-US/security/advisories/mfsa2025-20/
##CVE-2025-3028: Use-after-free triggered by XSLTProcessor
CVE-2025-3031: JIT optimization bug with different stack slot sizes
CVE-2025-3032: Leaking file descriptors from the fork server
CVE-2025-3029: URL bar spoofing via non-BMP Unicode characters
CVE-2025-3035: Tab title disclosure across pages when using AI chatbot
CVE-2025-3033: Opening local .url files could lead to another file being opened
CVE-2025-3030: Memory safety bugs fixed in Firefox 137, Thunderbird 137, Firefox ESR 128.9, and Thunderbird 128.9
CVE-2025-3034: Memory safety bugs fixed in Firefox 137 and Thunderbird 137
updated 2025-04-01T15:31:39
1 posts
Patch your Mozilla things. They released an advisory for Firefox and Thunderbird with four sev:HIGH
vulns.
https://www.mozilla.org/en-US/security/advisories/mfsa2025-20/
##CVE-2025-3028: Use-after-free triggered by XSLTProcessor
CVE-2025-3031: JIT optimization bug with different stack slot sizes
CVE-2025-3032: Leaking file descriptors from the fork server
CVE-2025-3029: URL bar spoofing via non-BMP Unicode characters
CVE-2025-3035: Tab title disclosure across pages when using AI chatbot
CVE-2025-3033: Opening local .url files could lead to another file being opened
CVE-2025-3030: Memory safety bugs fixed in Firefox 137, Thunderbird 137, Firefox ESR 128.9, and Thunderbird 128.9
CVE-2025-3034: Memory safety bugs fixed in Firefox 137 and Thunderbird 137
updated 2025-04-01T06:31:46
1 posts
CVE-2025-24259: Leaking Bookmarks on macOS
https://wts.dev/posts/bookmarks-leak/
#HackerNews #CVE202524259 #macOS #Bookmarks #Security #Vulnerability #HackerNews #Cybersecurity
##updated 2025-04-01T06:30:51
1 posts
NCSC Finland published some vulns in Valmet DNA, which is a DCS system. Those are always fun to attack and / or defend.
sev:HIGH 8.9 - CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/S:N/AU:Y/R:U/V:D/RE:H/U:Amber
Local privilege escalation through insecure DCOM configuration in Valmet DNA versions prior to C2023. The DCOM object Valmet DNA Engineering has permissions that allow it to run commands as a user with the SeImpersonatePrivilege privilege. The SeImpersonatePrivilege privilege is a Windows permission that allows a process to impersonate another user. An attacker can use this vulnerability to escalate their privileges and take complete control of the system.
https://nvd.nist.gov/vuln/detail/CVE-2025-0416
sev:HIGH 7.0 - CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/AU:Y/R:A/V:D/RE:L/U:Green
Lack of protection against brute force attacks in Valmet DNA visualization in DNA Operate. The possibility to make an arbitrary number of login attempts without any rate limit gives an attacker an increased chance of guessing passwords and then performing switching operations.
https://nvd.nist.gov/vuln/detail/CVE-2025-0417
sev:MED 5.4 - CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/AU:N/R:A/V:D/RE:L/U:Green
##Valmet DNA user passwords in plain text. This practice poses a security risk as attackers who gain access to local project data can read the passwords.
updated 2025-04-01T06:30:51
1 posts
NCSC Finland published some vulns in Valmet DNA, which is a DCS system. Those are always fun to attack and / or defend.
sev:HIGH 8.9 - CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/S:N/AU:Y/R:U/V:D/RE:H/U:Amber
Local privilege escalation through insecure DCOM configuration in Valmet DNA versions prior to C2023. The DCOM object Valmet DNA Engineering has permissions that allow it to run commands as a user with the SeImpersonatePrivilege privilege. The SeImpersonatePrivilege privilege is a Windows permission that allows a process to impersonate another user. An attacker can use this vulnerability to escalate their privileges and take complete control of the system.
https://nvd.nist.gov/vuln/detail/CVE-2025-0416
sev:HIGH 7.0 - CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/AU:Y/R:A/V:D/RE:L/U:Green
Lack of protection against brute force attacks in Valmet DNA visualization in DNA Operate. The possibility to make an arbitrary number of login attempts without any rate limit gives an attacker an increased chance of guessing passwords and then performing switching operations.
https://nvd.nist.gov/vuln/detail/CVE-2025-0417
sev:MED 5.4 - CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/AU:N/R:A/V:D/RE:L/U:Green
##Valmet DNA user passwords in plain text. This practice poses a security risk as attackers who gain access to local project data can read the passwords.
updated 2025-04-01T06:30:50
1 posts
NCSC Finland published some vulns in Valmet DNA, which is a DCS system. Those are always fun to attack and / or defend.
sev:HIGH 8.9 - CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/S:N/AU:Y/R:U/V:D/RE:H/U:Amber
Local privilege escalation through insecure DCOM configuration in Valmet DNA versions prior to C2023. The DCOM object Valmet DNA Engineering has permissions that allow it to run commands as a user with the SeImpersonatePrivilege privilege. The SeImpersonatePrivilege privilege is a Windows permission that allows a process to impersonate another user. An attacker can use this vulnerability to escalate their privileges and take complete control of the system.
https://nvd.nist.gov/vuln/detail/CVE-2025-0416
sev:HIGH 7.0 - CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/AU:Y/R:A/V:D/RE:L/U:Green
Lack of protection against brute force attacks in Valmet DNA visualization in DNA Operate. The possibility to make an arbitrary number of login attempts without any rate limit gives an attacker an increased chance of guessing passwords and then performing switching operations.
https://nvd.nist.gov/vuln/detail/CVE-2025-0417
sev:MED 5.4 - CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/AU:N/R:A/V:D/RE:L/U:Green
##Valmet DNA user passwords in plain text. This practice poses a security risk as attackers who gain access to local project data can read the passwords.
updated 2025-04-01T03:31:38
2 posts
Microsoft:
Critical: Azure Health Bot Elevation of Privilege Vulnerability - CVE-2025-21384 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21384
Critical: Azure Playwright Elevation of Privilege Vulnerability - CVE-2025-26683 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-26683 @microsoftsec #cybersecurity #infosec #Azure
##Another Microsoft cloud service vuln got patched. They claim no exploitation and it wasn't publicly known so you should be okay but that trust thing is hard.
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21384
sev:HIGH 8.3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
##An authenticated attacker can exploit an Server-Side Request Forgery (SSRF) vulnerability in Microsoft Azure Health Bot to elevate privileges over a network.
updated 2025-04-01T00:30:36
2 posts
Microsoft:
Critical: Azure Health Bot Elevation of Privilege Vulnerability - CVE-2025-21384 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21384
Critical: Azure Playwright Elevation of Privilege Vulnerability - CVE-2025-26683 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-26683 @microsoftsec #cybersecurity #infosec #Azure
##Microsoft Azure Playwright EoP vuln.
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-26683
Improper authorization in Azure Playwright allows an unauthorized attacker to elevate privileges over a network.
Microsoft says that it is not publicly disclosed and not EITW so if it's really fixed, you should be good to go. But I would still take a look in your logs to see what you don't see.
##updated 2025-03-31T18:31:14
2 posts
CVE-2025-1449: Rockwell Automation Verve Asset Manager Vulnerability Enables Adversaries to Gain Access to Run Arbitrary Commands – Source: socprime.com https://ciso2ciso.com/cve-2025-1449-rockwell-automation-verve-asset-manager-vulnerability-enables-adversaries-to-gain-access-to-run-arbitrary-commands-source-socprime-com/ #rssfeedpostgeneratorecho #CyberSecurityNews #CVE-2025-1449 #Latestthreats #Vulnerability #socprimecom #socprime #Blog #CVE #rce
##I for one like seeing command exec in Rockwell Automation products.
https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1723.html
sev:CRIT 9.1 - CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
##A vulnerability exists in the Rockwell Automation Verve Asset Manager due to insufficient variable sanitizing. A portion of the administrative web interface for Verve's Legacy Agentless Device Inventory (ADI) capability (deprecated since the 1.36 release) allows users to change a variable with inadequate sanitizing. If exploited, it could allow a threat actor with administrative access to run arbitrary commands in the context of the container running the service.
updated 2025-03-31T15:30:55
1 posts
Another old Fortinet advisory finally getting a CVE published. The advisory is from 2021, the CVE year is 2023, and here we are in 2025.
https://fortiguard.fortinet.com/psirt/FG-IR-21-023
sev:MED 4.5 - CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L/E:P/RL:U/RC:C
##A buffer copy without checking size of input ('classic buffer overflow') in Fortinet FortiMail webmail and administrative interface version 6.4.0 through 6.4.4 and before 6.2.6 and FortiNDR administrative interface version 7.2.0 and before 7.1.0 allows an authenticated attacker with regular webmail access to trigger a buffer overflow and to possibly execute unauthorized code or commands via specifically crafted HTTP requests.
updated 2025-03-31T15:30:54
1 posts
Unraid with Tailscale is pretty popular so maybe go check your targets and / or assets.
https://docs.unraid.net/unraid-os/release-notes/7.0.1/
https://edac.dev/security/CVE-2025-29266/
sev:CRIT 9.6 - CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
##Unraid 7.0.0 before 7.0.1 allows remote users to access the Unraid WebGUI and web console as root without authentication if a container is running in Host networking mode with Use Tailscale enabled.
updated 2025-03-31T15:30:39
5 posts
CVE-2025-31160 Atop 2.11 heap problems
Link: https://openwall.com/lists/oss-security/2025/03/29/1
Discussion: https://news.ycombinator.com/item?id=43518560
CVE-2025-31160 Atop 2.11 heap problems
Link: https://openwall.com/lists/oss-security/2025/03/29/1
Comments: https://news.ycombinator.com/item?id=43518560
CVE-2025-31160 Atop 2.11 heap problems
https://openwall.com/lists/oss-security/2025/03/29/1
#ycombinator
CVE-2025-31160 Atop 2.11 heap problems
https://openwall.com/lists/oss-security/2025/03/29/1
#HackerNews #CVE-2025-31160 #heap #vulnerabilities #security #issues #OpenWall #OSS #security
##Details about CVE-2025-31160 (memory corruption in #atop) are now available here: https://github.com/Atoptool/atop/issues/334
In a nutshell: atop at startup connects to local (non-privileged) TCP port 59123 where it expects certain data; if a regular user listens on that port, it can feed data to the next invocation of atop that can corrupt it.
The fix (https://github.com/Atoptool/atop/commit/542b7f7ac52926ca272129dba81d7db80279bb98) is primarily "don't do that" with some attempt at better parsing of the untrusted data (by adding return code checking of `sscanf`).
##updated 2025-03-31T09:30:39
1 posts
🚨CVE-2025-2071: OS Command Injection Vulnerability in FAST LTA Silent Brick WebUI
CVSS: 10
##updated 2025-03-29T00:31:40
1 posts
Here's another easy-mode PrivEsc like @wdormann was talking about the other day with his Nessus Agent CVE.
https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00004
sev:MED 6.3 - CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:H/SI:H/SA:H
##The WatchGuard Mobile VPN with SSL Client on Windows does not properly configure directory permissions when installed in a non-default directory. This could allow an authenticated local attacker to escalate to SYSTEM privileges on a vulnerable system. This issue affects Mobile VPN with SSL Client: from 11.0 through 12.11.
updated 2025-03-28T18:34:13
1 posts
There are a bunch of CVEs for libming v0.4.0 ( it's a SWF output library ) published today. The issue for them was opened last month with PoCs, but once again, a project isn't using the Security page on its GitHub.
https://github.com/libming/libming/issues/330
https://nvd.nist.gov/vuln/detail/CVE-2025-29483
https://nvd.nist.gov/vuln/detail/CVE-2025-29484
https://nvd.nist.gov/vuln/detail/CVE-2025-29485
https://nvd.nist.gov/vuln/detail/CVE-2025-29486
https://nvd.nist.gov/vuln/detail/CVE-2025-29487
https://nvd.nist.gov/vuln/detail/CVE-2025-29488
https://nvd.nist.gov/vuln/detail/CVE-2025-29489
https://nvd.nist.gov/vuln/detail/CVE-2025-29490
https://nvd.nist.gov/vuln/detail/CVE-2025-29491
https://nvd.nist.gov/vuln/detail/CVE-2025-29492
https://nvd.nist.gov/vuln/detail/CVE-2025-29493
https://nvd.nist.gov/vuln/detail/CVE-2025-29494
##updated 2025-03-28T18:33:11
1 posts
There are a bunch of CVEs for libming v0.4.0 ( it's a SWF output library ) published today. The issue for them was opened last month with PoCs, but once again, a project isn't using the Security page on its GitHub.
https://github.com/libming/libming/issues/330
https://nvd.nist.gov/vuln/detail/CVE-2025-29483
https://nvd.nist.gov/vuln/detail/CVE-2025-29484
https://nvd.nist.gov/vuln/detail/CVE-2025-29485
https://nvd.nist.gov/vuln/detail/CVE-2025-29486
https://nvd.nist.gov/vuln/detail/CVE-2025-29487
https://nvd.nist.gov/vuln/detail/CVE-2025-29488
https://nvd.nist.gov/vuln/detail/CVE-2025-29489
https://nvd.nist.gov/vuln/detail/CVE-2025-29490
https://nvd.nist.gov/vuln/detail/CVE-2025-29491
https://nvd.nist.gov/vuln/detail/CVE-2025-29492
https://nvd.nist.gov/vuln/detail/CVE-2025-29493
https://nvd.nist.gov/vuln/detail/CVE-2025-29494
##updated 2025-03-28T18:33:11
1 posts
There are a bunch of CVEs for libming v0.4.0 ( it's a SWF output library ) published today. The issue for them was opened last month with PoCs, but once again, a project isn't using the Security page on its GitHub.
https://github.com/libming/libming/issues/330
https://nvd.nist.gov/vuln/detail/CVE-2025-29483
https://nvd.nist.gov/vuln/detail/CVE-2025-29484
https://nvd.nist.gov/vuln/detail/CVE-2025-29485
https://nvd.nist.gov/vuln/detail/CVE-2025-29486
https://nvd.nist.gov/vuln/detail/CVE-2025-29487
https://nvd.nist.gov/vuln/detail/CVE-2025-29488
https://nvd.nist.gov/vuln/detail/CVE-2025-29489
https://nvd.nist.gov/vuln/detail/CVE-2025-29490
https://nvd.nist.gov/vuln/detail/CVE-2025-29491
https://nvd.nist.gov/vuln/detail/CVE-2025-29492
https://nvd.nist.gov/vuln/detail/CVE-2025-29493
https://nvd.nist.gov/vuln/detail/CVE-2025-29494
##updated 2025-03-28T18:33:11
1 posts
There are a bunch of CVEs for libming v0.4.0 ( it's a SWF output library ) published today. The issue for them was opened last month with PoCs, but once again, a project isn't using the Security page on its GitHub.
https://github.com/libming/libming/issues/330
https://nvd.nist.gov/vuln/detail/CVE-2025-29483
https://nvd.nist.gov/vuln/detail/CVE-2025-29484
https://nvd.nist.gov/vuln/detail/CVE-2025-29485
https://nvd.nist.gov/vuln/detail/CVE-2025-29486
https://nvd.nist.gov/vuln/detail/CVE-2025-29487
https://nvd.nist.gov/vuln/detail/CVE-2025-29488
https://nvd.nist.gov/vuln/detail/CVE-2025-29489
https://nvd.nist.gov/vuln/detail/CVE-2025-29490
https://nvd.nist.gov/vuln/detail/CVE-2025-29491
https://nvd.nist.gov/vuln/detail/CVE-2025-29492
https://nvd.nist.gov/vuln/detail/CVE-2025-29493
https://nvd.nist.gov/vuln/detail/CVE-2025-29494
##updated 2025-03-28T18:33:11
1 posts
There are a bunch of CVEs for libming v0.4.0 ( it's a SWF output library ) published today. The issue for them was opened last month with PoCs, but once again, a project isn't using the Security page on its GitHub.
https://github.com/libming/libming/issues/330
https://nvd.nist.gov/vuln/detail/CVE-2025-29483
https://nvd.nist.gov/vuln/detail/CVE-2025-29484
https://nvd.nist.gov/vuln/detail/CVE-2025-29485
https://nvd.nist.gov/vuln/detail/CVE-2025-29486
https://nvd.nist.gov/vuln/detail/CVE-2025-29487
https://nvd.nist.gov/vuln/detail/CVE-2025-29488
https://nvd.nist.gov/vuln/detail/CVE-2025-29489
https://nvd.nist.gov/vuln/detail/CVE-2025-29490
https://nvd.nist.gov/vuln/detail/CVE-2025-29491
https://nvd.nist.gov/vuln/detail/CVE-2025-29492
https://nvd.nist.gov/vuln/detail/CVE-2025-29493
https://nvd.nist.gov/vuln/detail/CVE-2025-29494
##updated 2025-03-28T18:33:10
5 posts
1 repos
Firefox developers reported CVE-2025-2857, a sandbox vulnerability similar to a zero-day reported this week in Google Chrome.
https://therecord.media/firefox-sandbox-vulnerability-similar-chrome-zero-day
##Critical Firefox, Tor Browser sandbox escape flaw fixed (CVE-2025-2857)
##Critical Firefox, Tor Browser sandbox escape flaw fixed (CVE-2025-2857) https://www.helpnetsecurity.com/2025/03/28/critical-firefox-tor-browser-sandbox-escape-flaw-fixed-cve-2025-2857/ #securityupdate #vulnerability #Don'tmiss #Kaspersky #Hotstuff #Firefox #Chrome #Opera #News #Tor
##Whoa, talk about déjà vu! Seems like Firefox is playing catch-up right after Chrome dropped a fix for a sandbox escape. 🤯 Keep an eye out for CVE-2025-2857.
So, what's the deal? In short, this nasty bug could let an attacker break right out of the browser's protective sandbox. And *that* means they could potentially gain full access to your system. Yeah, pretty scary stuff. 😱
If you're running Firefox on Windows, heads up! This affects versions 136.0.4, ESR 115.21.1, and ESR 128.8.1. This whole situation feels familiar because Chrome *just* patched CVE-2025-2783, a similar issue that attackers were already actively exploiting out in the wild!
Make no mistake, sandbox escapes are a huge deal. As a pentester, I can tell you: vulnerabilities like this get weaponized *fast*. Don't wait around.
Seriously, update your Firefox ASAP! Trust me, you don't want to deal with the fallout if someone exploits this. It could get costly, fast.
Ever seen a browser exploit do its thing live? Wild, right? Drop your stories below!
##Firefox 0-day security vulnerability (CVE-2025-2857) patched
Mozilla patches a sandbox escape vulnerability that is already being exploited (in Chrome)
:firefox:https://www.mozilla.org/en-US/security/advisories/mfsa2025-19/
Announced: 2025-03-27
Impact: ⚠️ critical
Products: Firefox, Firefox ESR (Firefox on Windows only)
Fixed in:
• Firefox 136.0.4 :windows:
• Firefox ESR 115.21.1 :windows:
• Firefox ESR 128.8.1 :windows:
updated 2025-03-28T15:33:03
1 posts
There are a bunch of CVEs for libming v0.4.0 ( it's a SWF output library ) published today. The issue for them was opened last month with PoCs, but once again, a project isn't using the Security page on its GitHub.
https://github.com/libming/libming/issues/330
https://nvd.nist.gov/vuln/detail/CVE-2025-29483
https://nvd.nist.gov/vuln/detail/CVE-2025-29484
https://nvd.nist.gov/vuln/detail/CVE-2025-29485
https://nvd.nist.gov/vuln/detail/CVE-2025-29486
https://nvd.nist.gov/vuln/detail/CVE-2025-29487
https://nvd.nist.gov/vuln/detail/CVE-2025-29488
https://nvd.nist.gov/vuln/detail/CVE-2025-29489
https://nvd.nist.gov/vuln/detail/CVE-2025-29490
https://nvd.nist.gov/vuln/detail/CVE-2025-29491
https://nvd.nist.gov/vuln/detail/CVE-2025-29492
https://nvd.nist.gov/vuln/detail/CVE-2025-29493
https://nvd.nist.gov/vuln/detail/CVE-2025-29494
##updated 2025-03-28T15:32:59
5 posts
63 repos
https://github.com/alastair66/CVE-2025-29927
https://github.com/Nekicj/CVE-2025-29927-exploit
https://github.com/takumade/ghost-route
https://github.com/TheresAFewConors/CVE-2025-29927-Testing
https://github.com/BilalGns/CVE-2025-29927
https://github.com/elshaheedy/CVE-2025-29927-Sigma-Rule
https://github.com/yuzu-juice/CVE-2025-29927_demo
https://github.com/strobes-security/nextjs-vulnerable-app
https://github.com/furmak331/CVE-2025-29927
https://github.com/tobiasGuta/CVE-2025-29927-POC
https://github.com/nicknisi/next-attack
https://github.com/dante01yoon/CVE-2025-29927
https://github.com/lediusa/CVE-2025-29927
https://github.com/0xWhoknows/CVE-2025-29927
https://github.com/t3tra-dev/cve-2025-29927-demo
https://github.com/0xPb1/Next.js-CVE-2025-29927
https://github.com/ricsirigu/CVE-2025-29927
https://github.com/aleongx/CVE-2025-29927
https://github.com/lem0n817/CVE-2025-29927
https://github.com/maronnjapan/claude-create-CVE-2025-29927
https://github.com/MuhammadWaseem29/CVE-2025-29927-POC
https://github.com/c0dejump/CVE-2025-29927-check
https://github.com/alihussainzada/CVE-2025-29927-PoC
https://github.com/ferpalma21/Automated-Next.js-Security-Scanner-for-CVE-2025-29927
https://github.com/jmbowes/NextSecureScan
https://github.com/m2hcz/m2hcz-Next.js-security-flaw-CVE-2025-29927---PoC-exploit
https://github.com/Heimd411/CVE-2025-29927-PoC
https://github.com/Neoxs/nextjs-middleware-vuln-poc
https://github.com/jeymo092/cve-2025-29927
https://github.com/AnonKryptiQuz/NextSploit
https://github.com/fourcube/nextjs-middleware-bypass-demo
https://github.com/Eve-SatOrU/POC-CVE-2025-29927
https://github.com/arvion-agent/next-CVE-2025-29927
https://github.com/0x0Luk/0xMiddleware
https://github.com/Oyst3r1ng/CVE-2025-29927
https://github.com/serhalp/test-cve-2025-29927
https://github.com/ticofookfook/poc-nextjs-CVE-2025-29927
https://github.com/yugo-eliatrope/test-cve-2025-29927
https://github.com/Kamal-418/Vulnerable-Lab-NextJS-CVE-2025-29927
https://github.com/Naveen-005/Next.Js-middleware-bypass-vulnerability-CVE-2025-29927
https://github.com/azu/nextjs-cve-2025-29927-poc
https://github.com/0xPThree/next.js_cve-2025-29927
https://github.com/websecnl/CVE-2025-29927-PoC-Exploit
https://github.com/nyctophile0969/CVE-2025-29927
https://github.com/6mile/nextjs-CVE-2025-29927
https://github.com/Gokul-Krishnan-V-R/cve-2025-29927
https://github.com/Slvignesh05/CVE-2025-29927
https://github.com/0xcucumbersalad/cve-2025-29927
https://github.com/Ademking/CVE-2025-29927
https://github.com/ThemeHackers/CVE-2025-29972
https://github.com/w2hcorp/CVE-2025-29927-PoC
https://github.com/kOaDT/poc-cve-2025-29927
https://github.com/aydinnyunus/CVE-2025-29927
https://github.com/narasimhauppala/nextjs-middleware-bypass
https://github.com/ayato-shitomi/WebLab_CVE-2025-29927
https://github.com/aleongx/CVE-2025-29927_Scanner
https://github.com/Jull3Hax0r/next.js-exploit
https://github.com/RoyCampos/CVE-2025-29927
https://github.com/lirantal/vulnerable-nextjs-14-CVE-2025-29927
https://github.com/iSee857/CVE-2025-29927
https://github.com/nocomp/CVE-2025-29927-scanner
Vercel found a sev:LOW
in doing next dot js code review after CVE-2025-29927 and already published a CVE so that's nice to see.
https://github.com/vercel/next.js/security/advisories/GHSA-223j-4rm8-mrmf
sev:LOW 1.7 - CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
##Next.js is a React framework for building full-stack web applications. To mitigate CVE-2025-29927, Next.js validated the x-middleware-subrequest-id which persisted across multiple incoming requests. However, this subrequest ID is sent to all requests, even if the destination is not the same host as the Next.js application. Initiating a fetch request to a third-party within Middleware will send the x-middleware-subrequest-id to that third party. This vulnerability is fixed in 12.3.6, 13.5.10, 14.2.26, and 15.2.4.
Way to go with CVE-2025-29927 Vercel...
##Detect NetxJS CVE-2025-29927 efficiently and at scale https://www.patrowl.io/en/actualites/cve-2025-29927-next-js
##[Reproduce Steps]
Add Header
x-middleware-subrequest: middleware:middleware:middleware:middleware:middleware
to the request
⬇️
"Next.js POC for CVE-2025-29927"
👇
https://github.com/azu/nextjs-cve-2025-29927-poc
@da_667 Yes please. Rapid7 did publish this though: https://www.rapid7.com/blog/post/2025/03/25/etr-notable-vulnerabilities-in-next-js-cve-2025-29927/
It's not much, but it's better than the vendor.
##updated 2025-03-28T15:32:59
1 posts
There are a bunch of CVEs for libming v0.4.0 ( it's a SWF output library ) published today. The issue for them was opened last month with PoCs, but once again, a project isn't using the Security page on its GitHub.
https://github.com/libming/libming/issues/330
https://nvd.nist.gov/vuln/detail/CVE-2025-29483
https://nvd.nist.gov/vuln/detail/CVE-2025-29484
https://nvd.nist.gov/vuln/detail/CVE-2025-29485
https://nvd.nist.gov/vuln/detail/CVE-2025-29486
https://nvd.nist.gov/vuln/detail/CVE-2025-29487
https://nvd.nist.gov/vuln/detail/CVE-2025-29488
https://nvd.nist.gov/vuln/detail/CVE-2025-29489
https://nvd.nist.gov/vuln/detail/CVE-2025-29490
https://nvd.nist.gov/vuln/detail/CVE-2025-29491
https://nvd.nist.gov/vuln/detail/CVE-2025-29492
https://nvd.nist.gov/vuln/detail/CVE-2025-29493
https://nvd.nist.gov/vuln/detail/CVE-2025-29494
##updated 2025-03-28T15:32:59
1 posts
There are a bunch of CVEs for libming v0.4.0 ( it's a SWF output library ) published today. The issue for them was opened last month with PoCs, but once again, a project isn't using the Security page on its GitHub.
https://github.com/libming/libming/issues/330
https://nvd.nist.gov/vuln/detail/CVE-2025-29483
https://nvd.nist.gov/vuln/detail/CVE-2025-29484
https://nvd.nist.gov/vuln/detail/CVE-2025-29485
https://nvd.nist.gov/vuln/detail/CVE-2025-29486
https://nvd.nist.gov/vuln/detail/CVE-2025-29487
https://nvd.nist.gov/vuln/detail/CVE-2025-29488
https://nvd.nist.gov/vuln/detail/CVE-2025-29489
https://nvd.nist.gov/vuln/detail/CVE-2025-29490
https://nvd.nist.gov/vuln/detail/CVE-2025-29491
https://nvd.nist.gov/vuln/detail/CVE-2025-29492
https://nvd.nist.gov/vuln/detail/CVE-2025-29493
https://nvd.nist.gov/vuln/detail/CVE-2025-29494
##updated 2025-03-28T15:32:59
1 posts
There are a bunch of CVEs for libming v0.4.0 ( it's a SWF output library ) published today. The issue for them was opened last month with PoCs, but once again, a project isn't using the Security page on its GitHub.
https://github.com/libming/libming/issues/330
https://nvd.nist.gov/vuln/detail/CVE-2025-29483
https://nvd.nist.gov/vuln/detail/CVE-2025-29484
https://nvd.nist.gov/vuln/detail/CVE-2025-29485
https://nvd.nist.gov/vuln/detail/CVE-2025-29486
https://nvd.nist.gov/vuln/detail/CVE-2025-29487
https://nvd.nist.gov/vuln/detail/CVE-2025-29488
https://nvd.nist.gov/vuln/detail/CVE-2025-29489
https://nvd.nist.gov/vuln/detail/CVE-2025-29490
https://nvd.nist.gov/vuln/detail/CVE-2025-29491
https://nvd.nist.gov/vuln/detail/CVE-2025-29492
https://nvd.nist.gov/vuln/detail/CVE-2025-29493
https://nvd.nist.gov/vuln/detail/CVE-2025-29494
##updated 2025-03-28T15:32:59
1 posts
There are a bunch of CVEs for libming v0.4.0 ( it's a SWF output library ) published today. The issue for them was opened last month with PoCs, but once again, a project isn't using the Security page on its GitHub.
https://github.com/libming/libming/issues/330
https://nvd.nist.gov/vuln/detail/CVE-2025-29483
https://nvd.nist.gov/vuln/detail/CVE-2025-29484
https://nvd.nist.gov/vuln/detail/CVE-2025-29485
https://nvd.nist.gov/vuln/detail/CVE-2025-29486
https://nvd.nist.gov/vuln/detail/CVE-2025-29487
https://nvd.nist.gov/vuln/detail/CVE-2025-29488
https://nvd.nist.gov/vuln/detail/CVE-2025-29489
https://nvd.nist.gov/vuln/detail/CVE-2025-29490
https://nvd.nist.gov/vuln/detail/CVE-2025-29491
https://nvd.nist.gov/vuln/detail/CVE-2025-29492
https://nvd.nist.gov/vuln/detail/CVE-2025-29493
https://nvd.nist.gov/vuln/detail/CVE-2025-29494
##updated 2025-03-28T15:31:54
1 posts
There are a bunch of CVEs for libming v0.4.0 ( it's a SWF output library ) published today. The issue for them was opened last month with PoCs, but once again, a project isn't using the Security page on its GitHub.
https://github.com/libming/libming/issues/330
https://nvd.nist.gov/vuln/detail/CVE-2025-29483
https://nvd.nist.gov/vuln/detail/CVE-2025-29484
https://nvd.nist.gov/vuln/detail/CVE-2025-29485
https://nvd.nist.gov/vuln/detail/CVE-2025-29486
https://nvd.nist.gov/vuln/detail/CVE-2025-29487
https://nvd.nist.gov/vuln/detail/CVE-2025-29488
https://nvd.nist.gov/vuln/detail/CVE-2025-29489
https://nvd.nist.gov/vuln/detail/CVE-2025-29490
https://nvd.nist.gov/vuln/detail/CVE-2025-29491
https://nvd.nist.gov/vuln/detail/CVE-2025-29492
https://nvd.nist.gov/vuln/detail/CVE-2025-29493
https://nvd.nist.gov/vuln/detail/CVE-2025-29494
##updated 2025-03-28T15:31:54
1 posts
There are a bunch of CVEs for libming v0.4.0 ( it's a SWF output library ) published today. The issue for them was opened last month with PoCs, but once again, a project isn't using the Security page on its GitHub.
https://github.com/libming/libming/issues/330
https://nvd.nist.gov/vuln/detail/CVE-2025-29483
https://nvd.nist.gov/vuln/detail/CVE-2025-29484
https://nvd.nist.gov/vuln/detail/CVE-2025-29485
https://nvd.nist.gov/vuln/detail/CVE-2025-29486
https://nvd.nist.gov/vuln/detail/CVE-2025-29487
https://nvd.nist.gov/vuln/detail/CVE-2025-29488
https://nvd.nist.gov/vuln/detail/CVE-2025-29489
https://nvd.nist.gov/vuln/detail/CVE-2025-29490
https://nvd.nist.gov/vuln/detail/CVE-2025-29491
https://nvd.nist.gov/vuln/detail/CVE-2025-29492
https://nvd.nist.gov/vuln/detail/CVE-2025-29493
https://nvd.nist.gov/vuln/detail/CVE-2025-29494
##updated 2025-03-28T15:31:53
1 posts
There are a bunch of CVEs for libming v0.4.0 ( it's a SWF output library ) published today. The issue for them was opened last month with PoCs, but once again, a project isn't using the Security page on its GitHub.
https://github.com/libming/libming/issues/330
https://nvd.nist.gov/vuln/detail/CVE-2025-29483
https://nvd.nist.gov/vuln/detail/CVE-2025-29484
https://nvd.nist.gov/vuln/detail/CVE-2025-29485
https://nvd.nist.gov/vuln/detail/CVE-2025-29486
https://nvd.nist.gov/vuln/detail/CVE-2025-29487
https://nvd.nist.gov/vuln/detail/CVE-2025-29488
https://nvd.nist.gov/vuln/detail/CVE-2025-29489
https://nvd.nist.gov/vuln/detail/CVE-2025-29490
https://nvd.nist.gov/vuln/detail/CVE-2025-29491
https://nvd.nist.gov/vuln/detail/CVE-2025-29492
https://nvd.nist.gov/vuln/detail/CVE-2025-29493
https://nvd.nist.gov/vuln/detail/CVE-2025-29494
##updated 2025-03-28T12:31:35
1 posts
Fortinet published another CVE for a vuln from 2019. Just something to keep in mind when people blame Fortinet shops when they get popped by unpatched vulns.
##updated 2025-03-28T03:30:30
1 posts
🚨CVE-2025-24383: Dell Unity, Dell UnityVSA and Dell Unity XT remediation is available for multiple security vulnerabilities that could be exploited by malicious users to compromise the affected system
CVSS: 9.1
##updated 2025-03-28T03:30:24
1 posts
UAF PrivEsc in Exim. I think it was @buherator who shared the Openwall link for this earlier today or yesterday. It now has a CVE published.
https://www.exim.org/static/doc/security/CVE-2025-30232.txt
https://www.openwall.com/lists/oss-security/2025/03/26/1
sev:HIGH 8.1 - CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
##A use-after-free in Exim 4.96 through 4.98.1 could allow users (with command-line access) to escalate privileges.
updated 2025-03-27T21:32:22
1 posts
wait3() system call as a side-channel in setuid programs (nvidia-modprobe CVE-2024-0149)
##updated 2025-03-27T21:32:22
1 posts
There are a bunch of CVEs for libming v0.4.0 ( it's a SWF output library ) published today. The issue for them was opened last month with PoCs, but once again, a project isn't using the Security page on its GitHub.
https://github.com/libming/libming/issues/330
https://nvd.nist.gov/vuln/detail/CVE-2025-29483
https://nvd.nist.gov/vuln/detail/CVE-2025-29484
https://nvd.nist.gov/vuln/detail/CVE-2025-29485
https://nvd.nist.gov/vuln/detail/CVE-2025-29486
https://nvd.nist.gov/vuln/detail/CVE-2025-29487
https://nvd.nist.gov/vuln/detail/CVE-2025-29488
https://nvd.nist.gov/vuln/detail/CVE-2025-29489
https://nvd.nist.gov/vuln/detail/CVE-2025-29490
https://nvd.nist.gov/vuln/detail/CVE-2025-29491
https://nvd.nist.gov/vuln/detail/CVE-2025-29492
https://nvd.nist.gov/vuln/detail/CVE-2025-29493
https://nvd.nist.gov/vuln/detail/CVE-2025-29494
##updated 2025-03-27T18:18:41
1 posts
Code injection in Apache Kylin.
https://lists.apache.org/thread/6j19pt8yoqfphf1lprtrzoqkvz1gwbnc
##Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Kylin.
If an attacker gets access to Kylin's system or project admin permission, the JDBC connection configuration maybe altered to execute arbitrary code from the remote. You are fine as long as the Kylin's system and project admin access is well protected.This issue affects Apache Kylin: from 4.0.0 through 5.0.1.
Users are recommended to upgrade to version 5.0.2 or above, which fixes the issue.
updated 2025-03-27T16:45:46.410000
3 posts
WatchTower: XSS To RCE By Abusing Custom File Handlers - Kentico Xperience CMS (CVE-2025-2748) https://labs.watchtowr.com/xss-to-rce-by-abusing-custom-file-handlers-kentico-xperience-cms-cve-2025-2748/ #cybersecurity #infosec
##I know that many of us tend to scoff at XSS vulns, but it's good to be reminded how they can be successfully used in a chain for something more interesting.
##XSS To RCE By Abusing Custom File Handlers - Kentico Xperience CMS (CVE-2025-2748) - watchTowr Labs https://labs.watchtowr.com/xss-to-rce-by-abusing-custom-file-handlers-kentico-xperience-cms-cve-2025-2748/
##updated 2025-03-27T15:31:23
1 posts
Multiple CVEs in gnuplot. They are all sev:MED 6.2
.
https://access.redhat.com/security/cve/CVE-2025-31176
https://access.redhat.com/security/cve/CVE-2025-31178
https://access.redhat.com/security/cve/CVE-2025-31179
##updated 2025-03-27T15:31:23
1 posts
Multiple CVEs in gnuplot. They are all sev:MED 6.2
.
https://access.redhat.com/security/cve/CVE-2025-31176
https://access.redhat.com/security/cve/CVE-2025-31178
https://access.redhat.com/security/cve/CVE-2025-31179
##updated 2025-03-27T15:31:23
1 posts
Multiple CVEs in gnuplot. They are all sev:MED 6.2
.
https://access.redhat.com/security/cve/CVE-2025-31176
https://access.redhat.com/security/cve/CVE-2025-31178
https://access.redhat.com/security/cve/CVE-2025-31179
##updated 2025-03-27T15:31:22
1 posts
Multiple CVEs in gnuplot. They are all sev:MED 6.2
.
https://access.redhat.com/security/cve/CVE-2025-31176
https://access.redhat.com/security/cve/CVE-2025-31178
https://access.redhat.com/security/cve/CVE-2025-31179
##updated 2025-03-27T15:31:22
1 posts
Multiple CVEs in gnuplot. They are all sev:MED 6.2
.
https://access.redhat.com/security/cve/CVE-2025-31176
https://access.redhat.com/security/cve/CVE-2025-31178
https://access.redhat.com/security/cve/CVE-2025-31179
##updated 2025-03-27T03:34:37
1 posts
Active exploitation of critical SAP flaw CVE-2017-12637 reported by Onapsis
#cybersecurity #infosec #attack #activeexploit
https://beyondmachines.net/event_details/active-exploitation-of-critical-sap-flaw-cve-2017-12637-reported-by-onapsis-3-q-e-2-a/gD2P6Ple2L
updated 2025-03-26T18:30:57
10 posts
1 repos
Patchez Google Chrome : cette faille zero-day est exploitée par une campagne d’espionnage https://www.it-connect.fr/google-chrome-faille-zero-day-est-exploitee-campagne-espionnage-cve-2025-2783/ #ActuCybersécurité #Cybersécurité #Vulnérabilité #Google
##Whoa, talk about déjà vu! Seems like Firefox is playing catch-up right after Chrome dropped a fix for a sandbox escape. 🤯 Keep an eye out for CVE-2025-2857.
So, what's the deal? In short, this nasty bug could let an attacker break right out of the browser's protective sandbox. And *that* means they could potentially gain full access to your system. Yeah, pretty scary stuff. 😱
If you're running Firefox on Windows, heads up! This affects versions 136.0.4, ESR 115.21.1, and ESR 128.8.1. This whole situation feels familiar because Chrome *just* patched CVE-2025-2783, a similar issue that attackers were already actively exploiting out in the wild!
Make no mistake, sandbox escapes are a huge deal. As a pentester, I can tell you: vulnerabilities like this get weaponized *fast*. Don't wait around.
Seriously, update your Firefox ASAP! Trust me, you don't want to deal with the fallout if someone exploits this. It could get costly, fast.
Ever seen a browser exploit do its thing live? Wild, right? Drop your stories below!
##CVE ID: CVE-2025-2783
Vendor: Google
Product: Chromium Mojo
Date Added: 2025-03-27
Vulnerability: Google Chromium Mojo Sandbox Escape Vulnerability
Notes: https://chromereleases.googleblog.com/2025/03/stable-channel-update-for-desktop_25.html ; https://nvd.nist.gov/vuln/detail/CVE-2025-2783
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2025-2783
This update included the fix for CVE-2025-2783.
##Just to be 100% clear this update included the fix for CVE-2025-2783. We actually had that out in the previous build 7.2.3621.71 from yesterday.
##Just to be 100% clear this update included the fix for CVE-2025-2783. We actually had that out in the previous build 7.2.3621.71 from yesterday.
##Just to be 100% clear this update included the fix for CVE-2025-2783. Indeed we were the first non-Chrome browser to get that out.
##The CVE for this is published but no CVSS assessment yet: https://nvd.nist.gov/vuln/detail/CVE-2025-2783
##Google fixes exploited Chrome sandbox bypass zero-day (CVE-2025-2783) – Help Net Security https://www.macken.xyz/2025/03/google-fixes-exploited-chrome-sandbox-bypass-zero-day-cve-2025-2783-help-net-security/?utm_source=dlvr.it&utm_medium=mastodon
##The vulnerability, tracked as CVE-2025-2783, was chained with a second exploit for remote code execution in attacks targeting organizations in Russia. https://www.securityweek.com/google-patches-chrome-sandbox-escape-zero-day-caught-by-kaspersky/
##updated 2025-03-26T15:32:52
1 posts
Bizerba doing that thing like in school where you take up as much of the page as possible. Instead of DoS
they say:
An authenticated attacker can compromise the availability of the device via the network
https://www.bizerba.com/downloads/global/information-security/2025/bizerba-sa-2025-0002.pdf
Through the public FTP access the mass storage can be completely filled by mass uploading of data because no quota is in place.
sev:MED 6.5 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
updated 2025-03-26T12:30:40
1 posts
Service desk application vulns are always fun. I don't know how popular OXARI is, but if you know it, you might want to look into this one.
https://cert.pl/en/posts/2025/03/CVE-2025-1542/
sev:CRIT 9.3 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N
##Improper permission control vulnerability in the OXARI ServiceDesk application could allow an attacker using a guest access or an unprivileged account to gain additional administrative permissions in the application.This issue affects OXARI ServiceDesk in versions before 2.0.324.0.
updated 2025-03-25T18:38:11
1 posts
1 repos
Apache Camel Exploit Attempt by Vulnerability Scan (CVE-2025-27636, CVE-2025-29891) https://isc.sans.edu/diary/31814
##updated 2025-03-25T15:31:35
2 posts
Authentication bypass CVE-2025-22230 impacts VMware Windows Tools – Source: securityaffairs.com https://ciso2ciso.com/authentication-bypass-cve-2025-22230-impacts-vmware-windows-tools-source-securityaffairs-com/ #rssfeedpostgeneratorecho #informationsecuritynews #ITInformationSecurity #SecurityAffairscom #CyberSecurityNews #PierluigiPaganini #SecurityAffairs #SecurityAffairs #BreakingNews #SecurityNews #hackingnews #vmwaretools #Security #hacking
##VMware corrige une faille importante dans les VMware Tools pour Windows : CVE-2025-22230 https://www.it-connect.fr/vmware-corrige-une-faille-vmware-tools-pour-windows-cve-2025-22230/ #ActuCybersécurité #Cybersécurité #Vulnérabilité #Windows #VMware
##updated 2025-03-25T15:10:16
9 posts
16 repos
https://github.com/hi-unc1e/CVE-2025-1974-poc
https://github.com/tuladhar/ingress-nightmare
https://github.com/lufeirider/IngressNightmare-PoC
https://github.com/zulloper/CVE-2025-1974
https://github.com/yanmarques/CVE-2025-1974
https://github.com/m-q-t/ingressnightmare-detection-poc
https://github.com/gian2dchris/ingress-nightmare-poc
https://github.com/dttuss/IngressNightmare-RCE-POC
https://github.com/Ar05un05kau05ndal/2025-1
https://github.com/rjhaikal/POC-IngressNightmare-CVE-2025-1974
https://github.com/yoshino-s/CVE-2025-1974
https://github.com/hakaioffsec/IngressNightmare-PoC
https://github.com/zwxxb/CVE-2025-1974
https://github.com/0xBingo/CVE-2025-1974
https://github.com/Esonhugh/ingressNightmare-CVE-2025-1974-exps
Discover how Kubewarden can protect you from the critical #IngressNightmare vulnerability (CVE-2025-1974): https://www.kubewarden.io/blog/2025/04/ingress-nginx-cve-2025-1974/
##Discover how Kubewarden can protect you from the critical #IngressNightmare vulnerability (CVE-2025-1974): https://www.kubewarden.io/blog/2025/04/ingress-nginx-cve-2025-1974/
##CVE-2025-1097, CVE-2025-1098, CVE-2025-1974, CVE-2025-24513, CVE-2025-24514: Frequently Asked Questions About IngressNightmare #SuggestedRead #devopsish https://www.tenable.com/blog/cve-2025-1974-frequently-asked-questions-about-ingressnightmare-kubernetes
##Critical Kubernetes controller flaws: 4,000 IPs exposed, with patch urgency increasing due to code to exploit CVE-2025-1974 vulnerability being published https://www.databreachtoday.com/critical-kubernetes-controller-flaws-4000-ips-exposed-a-27868
##Ingress-nginx CVE-2025-1974: What You Need to Know #SuggestedRead #devopsish https://kubernetes.io/blog/2025/03/24/ingress-nginx-cve-2025-1974/
##🚨PoC Code to Exploit the IngressNightmare Vulnerabilities (CVE-2025-1097, CVE-2025-1098, CVE-2025-24514, and CVE-2025-1974)
##CVE-2025-1974: Critical Set of Vulnerabilities in Ingress NGINX Controller for Kubernetes Leading to Unauthenticated RCE – Source: socprime.com https://ciso2ciso.com/cve-2025-1974-critical-set-of-vulnerabilities-in-ingress-nginx-controller-for-kubernetes-leading-to-unauthenticated-rce-source-socprime-com/ #rssfeedpostgeneratorecho #CyberSecurityNews #IngressNightmare #CVE-2025-1974 #Latestthreats #Vulnerability #socprimecom #socprime #Blog #CVE
##Ingress-nginx CVE-2025-1974: What You Need to Know | Kubernetes https://kubernetes.io/blog/2025/03/24/ingress-nginx-cve-2025-1974/
##CVE-2025-1974 #SuggestedRead #devopsish https://github.com/kubernetes/kubernetes/issues/131009
##updated 2025-03-25T15:10:09
2 posts
CVE-2025-1097, CVE-2025-1098, CVE-2025-1974, CVE-2025-24513, CVE-2025-24514: Frequently Asked Questions About IngressNightmare #SuggestedRead #devopsish https://www.tenable.com/blog/cve-2025-1974-frequently-asked-questions-about-ingressnightmare-kubernetes
##CVE-2025-24513 #SuggestedRead #devopsish https://github.com/kubernetes/kubernetes/issues/131005
##updated 2025-03-25T15:10:03
3 posts
3 repos
https://github.com/hakaioffsec/IngressNightmare-PoC
https://github.com/lufeirider/IngressNightmare-PoC
https://github.com/Esonhugh/ingressNightmare-CVE-2025-1974-exps
CVE-2025-1097, CVE-2025-1098, CVE-2025-1974, CVE-2025-24513, CVE-2025-24514: Frequently Asked Questions About IngressNightmare #SuggestedRead #devopsish https://www.tenable.com/blog/cve-2025-1974-frequently-asked-questions-about-ingressnightmare-kubernetes
##CVE-2025-24514 #SuggestedRead #devopsish https://github.com/kubernetes/kubernetes/issues/131006
##🚨PoC Code to Exploit the IngressNightmare Vulnerabilities (CVE-2025-1097, CVE-2025-1098, CVE-2025-24514, and CVE-2025-1974)
##updated 2025-03-25T15:07:13
3 posts
3 repos
https://github.com/hakaioffsec/IngressNightmare-PoC
https://github.com/lufeirider/IngressNightmare-PoC
https://github.com/Esonhugh/ingressNightmare-CVE-2025-1974-exps
CVE-2025-1097, CVE-2025-1098, CVE-2025-1974, CVE-2025-24513, CVE-2025-24514: Frequently Asked Questions About IngressNightmare #SuggestedRead #devopsish https://www.tenable.com/blog/cve-2025-1974-frequently-asked-questions-about-ingressnightmare-kubernetes
##🚨PoC Code to Exploit the IngressNightmare Vulnerabilities (CVE-2025-1097, CVE-2025-1098, CVE-2025-24514, and CVE-2025-1974)
##CVE-2025-1097 #SuggestedRead #devopsish https://github.com/kubernetes/kubernetes/issues/131007
##updated 2025-03-25T15:06:45
3 posts
3 repos
https://github.com/hakaioffsec/IngressNightmare-PoC
https://github.com/lufeirider/IngressNightmare-PoC
https://github.com/Esonhugh/ingressNightmare-CVE-2025-1974-exps
CVE-2025-1097, CVE-2025-1098, CVE-2025-1974, CVE-2025-24513, CVE-2025-24514: Frequently Asked Questions About IngressNightmare #SuggestedRead #devopsish https://www.tenable.com/blog/cve-2025-1974-frequently-asked-questions-about-ingressnightmare-kubernetes
##CVE-2025-1098 #SuggestedRead #devopsish https://github.com/kubernetes/kubernetes/issues/131008
##🚨PoC Code to Exploit the IngressNightmare Vulnerabilities (CVE-2025-1097, CVE-2025-1098, CVE-2025-24514, and CVE-2025-1974)
##updated 2025-03-25T00:30:26
1 posts
SnapCenter Security Flaw Rated Critical—NetApp Urges Immediate Patch https://thecyberexpress.com/netapp-snapcenter-vulnerability-cve-2025-26512/ #NetAppVulnerability #TheCyberExpressNews #SnapCenterServer #Vulnerabilities #TheCyberExpress #FirewallDaily #CVE202526512 #SnapCenter #CyberNews
##updated 2025-03-24T14:49:02
1 posts
CVE-2025-27407: Inside the Critical GraphQL-Ruby RCE Vulnerability https://cenobe.com/blog/cve-2025-27407/
##updated 2025-03-21T23:56:31
1 posts
This has been a busy month for Malcolm! I pushed hard to get v25.03.0 out earlier this month, as it contained pretty much just the Keycloak integration one of our partners (and major funding sources) was waiting for. Rather than wait until April for the other stuff that would have gone into the regular end-of-the-month release, I decided to pull those items into this smaller release just a week and a half after the last one.
Malcolm v25.03.1 contains a few enhancements, bug fixes, and several component version updates, including one that addresses a CVE that may affect Hedgehog Linux Kiosk mode and Malcolm's API container.
NOTE: If you have not already upgraded to v25.03.0, read the notes for v25.02.0 and v25.03.0 and follow the Read Before Upgrading instructions on those releases.
s7comm_known_devices.log
(#622)install.py
to allow the user to accept changes to sysctl.conf
, grub kernel parameters, etc., without having to answer "yes" to each one../config/
) for Malcolm and in control_vars.conf
for Hedgehog LinuxNGINX_REQUIRE_GROUP
and NGINX_REQUIRE_ROLE
to auth-common.env
to support Requiring user groups and realm roles for Keycloak authenticationdocker-compose.yml
at runtime.Malcolm is a powerful, easily deployable network 🖧 traffic analysis tool suite for network security monitoring 🕵🏻♀️.
Malcolm operates as a cluster of containers 📦, isolated sandboxes which each serve a dedicated function of the system. This makes Malcolm deployable with frameworks like Docker 🐋, Podman 🦭, and Kubernetes ⎈. Check out the Quick Start guide for examples on how to get up and running.
Alternatively, dedicated official ISO installer images 💿 for Malcolm and Hedgehog Linux 🦔 can be downloaded from Malcolm's releases page on GitHub. Due to limits on individual files in GitHub releases, these ISO files have been split 🪓 into 2GB chunks and can be reassembled with scripts provided for both Bash 🐧 (release_cleaver.sh
) and PowerShell 🪟 (release_cleaver.ps1
). See Downloading Malcolm - Installer ISOs for instructions.
As always, join us on the Malcolm discussions board 💬 to engage with the community, or pop some corn 🍿 and watch a video 📼.
#Malcolm #HedgehogLinux #Zeek #Arkime #NetBox #OpenSearch #Elasticsearch #Suricata #SSO #OIDC #Keycloak #PCAP #NetworkTrafficAnalysis #networksecuritymonitoring #OT #ICS #icssecurity #CyberSecurity #Cyber #Infosec #INL #DHS #CISA #CISAgov
##updated 2025-03-21T00:32:31
1 posts
CVE-2024-9956 - PassKey Account Takeover in All Mobile Browsers: https://mastersplinter.work/research/passkey/
##updated 2025-03-20T18:30:30
1 posts
Our crew members @mwulftange & @frycos discovered & responsibly disclosed several new RCE gadgets that bypass #Veeam's blacklist for CVE-2024-40711 & CVE-2025-23120 as well as further entry points following @SinSinology & @chudypb 's blog. Don’t blacklist - replace BinaryFormatter.
##updated 2025-03-20T15:30:32
1 posts
📣 EMERGENCY UPDATES 📣
Apple pushed additional updates for 3 zero-days that may have been actively exploited.
🐛 CVE-2025-24200 (Accessibility) additional patches,
🐛 CVE-2025-24201 (WebKit) additional patches:
- iOS and iPadOS 15.8.4
- iOS and iPadOS 16.7.11
🐛 CVE-2025-24085 (CoreMedia) additional patches:
- iPadOS 17.7.6
- macOS Sonoma 14.7.5
- macOS Ventura 13.7.5
updated 2025-03-19T15:44:53
1 posts
Apache Camel Exploit Attempt by Vulnerability Scan (CVE-2025-27636, CVE-2025-29891) https://isc.sans.edu/diary/31814
##updated 2025-03-11T18:32:20
8 posts
Seriously? Looks like Water Gamayun (aka EncryptHub) is back in action. They're dropping new Windows backdoors, SilentPrism and DarkWisp, using dodgy MSI installers and MSC files.
And get this: they're even exploiting a zero-day (CVE-2025-26633). Their aim? Snatching your data and crypto wallet seeds. 🤦♂️
So, you know the drill: double-check those MSIs, steer clear of MSCs from sketchy sources, keep your endpoint security patched, and lock down PowerShell. Yeah, standard procedure, right?
But honestly, how many times do we need to hammer this home? And seriously, where's the 'Security by Design' we keep hearing about? 🙄
As pentesters, we see clients are grateful for the help, but man, it's disheartening seeing the same fundamental gaps over and over.
What's your take? Is the real issue a lack of funds or a lack of know-how? Let me know below. 🤔
##Russian Hackers Exploit CVE-2025-26633 via MSC EvilTwin to Deploy SilentPrism and DarkWisp – Source:thehackernews.com https://ciso2ciso.com/russian-hackers-exploit-cve-2025-26633-via-msc-eviltwin-to-deploy-silentprism-and-darkwisp-sourcethehackernews-com/ #rssfeedpostgeneratorecho #CyberSecurityNews #TheHackerNews #Russian
##Russian Hackers Exploit CVE-2025-26633 via MSC EvilTwin to Deploy SilentPrism and DarkWisp https://thehackernews.com/2025/03/russian-hackers-exploit-cve-2025-26633.html
##Russian Hackers Exploit CVE-2025-26633 via MSC EvilTwin to Deploy SilentPrism and DarkWisp https://thehackernews.com/2025/03/russian-hackers-exploit-cve-2025-26633.html
##Hacker News: Russian Hackers Exploit CVE-2025-26633 via MSC EvilTwin to Deploy SilentPrism and DarkWisp https://thehackernews.com/2025/03/russian-hackers-exploit-cve-2025-26633.html #news #IT
##(trendmicro.com) A Deep Dive into Water Gamayun's Arsenal and Infrastructure https://www.trendmicro.com/en_us/research/25/c/deep-dive-into-water-gamayun.html
Executive Summary:
This research provides a comprehensive analysis of Water Gamayun (also known as EncryptHub and Larva-208), a suspected Russian threat actor exploiting the MSC EvilTwin zero-day vulnerability (CVE-2025-26633) in Microsoft Management Console. The threat actor employs sophisticated delivery methods including malicious provisioning packages, signed MSI files, and Windows MSC files to deploy multiple custom payloads. Their arsenal includes custom backdoors (SilentPrism and DarkWisp), multiple variants of the EncryptHub Stealer, and known malware like Stealc and Rhadamanthys. The research details the C&C infrastructure, data exfiltration techniques, and persistence mechanisms used by the group. Trend Micro researchers gained access to the C&C server components, enabling them to analyze the architecture, functionality, and evasion techniques employed by the threat actor.
#Cybersecurity #ThreatIntel #PowerShell #DarkWisp #SilentPrism #APT #WaterGamayun #EncryptHub #Russia #Rhadamanthys
##Seriously, EncryptHub isn't messing around! 🤯 They've jumped *right* on that Windows bug (CVE-2025-26633) that literally *just* got fixed. Talk about moving fast...
So, the exploit? It involves the Microsoft Management Console (MMC), those MSC files, and something called MUIPath. Sounds pretty techy, right? But basically, it's a clever workaround. EncryptHub crafts two MSC files – same name, one legit, one malicious. Windows doesn't double-check properly and ends up loading the nasty one. Boom! 💥
You see, as a pentester, I constantly witness attackers twisting legitimate system functions just like this. Your automated scanners? Yeah, they'll likely miss it completely. This kind of thing really needs hands-on analysis to catch. And yeah, updates are crucial, folks! Make sure you get CVE-2025-26633 patched ASAP. Oh, and those random MSI installers from sources you don't know? Big nope. Steer clear! ☝️
Have you run into attacks like this before? Or maybe you've got some other sneaky Windows tricks up your sleeve? Drop 'em in the comments!
##Trend Micro researchers identified a campaign by the Russian threat actor Water Gamayun exploiting CVE-2025-26633, a zero-day vulnerability in the Microsoft Management Console that attackers exploit to execute malicious code and exfiltrate data. https://www.trendmicro.com/en_us/research/25/c/cve-2025-26633-water-gamayun.html
##updated 2025-02-20T21:30:52
1 posts
Sitecore "thumbnailsaccesstoken" Deserialization Scans (and some new reports) CVE-2025-27218 https://isc.sans.edu/diary/31806
##updated 2025-02-15T05:15:11.683000
1 posts
1 repos
IBM has published several sev:CRIT
advisories the past couple days. I'll link to those but hopefully if you are protecting or targeting IBM you are already following their advisories for relevant products since there are plenty of them of varying severity ratings.
https://www.ibm.com/support/pages/bulletin/
Security Bulletin: IBM Automation Decision Services for Jan 2025 - Multiple CVEs addressed
: https://www.ibm.com/support/pages/node/7229441
Security Bulletin: BAMOE 9 vulnerability in tomcat-embed-core library, version 10.1.34, transitively linked from Spring Boot
: https://www.ibm.com/support/pages/node/7229575
Security Bulletin: Multiple security vulnerabilities are addressed with IBM Business Automation Manager Open Editions 9.2.0.
: https://www.ibm.com/support/pages/node/7229574
Security Bulletin: IBM App Connect Enterprise is vulnerable to Remote Code Execution and improper preservation of permissions due to jsonpath-plus & snowflake-sdk (CVE-2025-1302 & CVE-2025-24791)
: https://www.ibm.com/support/pages/node/7229584
Security Bulletin: IBM App Connect Enterprise is vulnerable to Remote Code Execution and improper preservation of permissions due to jsonpath-plus & snowflake-sdk (CVE-2025-1302 & CVE-2025-24791)
: https://www.ibm.com/support/pages/node/7229584
Security Bulletin: Multiple security vulnerabilities are addressed with IBM Business Automation Manager Open Editions 9.2.0.
: https://www.ibm.com/support/pages/node/7229574
updated 2025-02-11T15:33:28
1 posts
1 repos
📣 EMERGENCY UPDATES 📣
Apple pushed additional updates for 3 zero-days that may have been actively exploited.
🐛 CVE-2025-24200 (Accessibility) additional patches,
🐛 CVE-2025-24201 (WebKit) additional patches:
- iOS and iPadOS 15.8.4
- iOS and iPadOS 16.7.11
🐛 CVE-2025-24085 (CoreMedia) additional patches:
- iPadOS 17.7.6
- macOS Sonoma 14.7.5
- macOS Ventura 13.7.5
updated 2025-01-29T17:15:30.020000
1 posts
IBM has published several sev:CRIT
advisories the past couple days. I'll link to those but hopefully if you are protecting or targeting IBM you are already following their advisories for relevant products since there are plenty of them of varying severity ratings.
https://www.ibm.com/support/pages/bulletin/
Security Bulletin: IBM Automation Decision Services for Jan 2025 - Multiple CVEs addressed
: https://www.ibm.com/support/pages/node/7229441
Security Bulletin: BAMOE 9 vulnerability in tomcat-embed-core library, version 10.1.34, transitively linked from Spring Boot
: https://www.ibm.com/support/pages/node/7229575
Security Bulletin: Multiple security vulnerabilities are addressed with IBM Business Automation Manager Open Editions 9.2.0.
: https://www.ibm.com/support/pages/node/7229574
Security Bulletin: IBM App Connect Enterprise is vulnerable to Remote Code Execution and improper preservation of permissions due to jsonpath-plus & snowflake-sdk (CVE-2025-1302 & CVE-2025-24791)
: https://www.ibm.com/support/pages/node/7229584
Security Bulletin: IBM App Connect Enterprise is vulnerable to Remote Code Execution and improper preservation of permissions due to jsonpath-plus & snowflake-sdk (CVE-2025-1302 & CVE-2025-24791)
: https://www.ibm.com/support/pages/node/7229584
Security Bulletin: Multiple security vulnerabilities are addressed with IBM Business Automation Manager Open Editions 9.2.0.
: https://www.ibm.com/support/pages/node/7229574
updated 2025-01-29T15:32:36
1 posts
1 repos
📣 EMERGENCY UPDATES 📣
Apple pushed additional updates for 3 zero-days that may have been actively exploited.
🐛 CVE-2025-24200 (Accessibility) additional patches,
🐛 CVE-2025-24201 (WebKit) additional patches:
- iOS and iPadOS 15.8.4
- iOS and iPadOS 16.7.11
🐛 CVE-2025-24085 (CoreMedia) additional patches:
- iPadOS 17.7.6
- macOS Sonoma 14.7.5
- macOS Ventura 13.7.5
updated 2025-01-28T18:32:27
1 posts
10 repos
https://github.com/44xo/CVE-2025-0282
https://github.com/sfewer-r7/CVE-2025-0282
https://github.com/AnonStorks/CVE-2025-0282-Full-version
https://github.com/rxwx/pulse-meter
https://github.com/Hexastrike/Ivanti-Connect-Secure-Logs-Parser
https://github.com/watchtowrlabs/CVE-2025-0282
https://github.com/almanatra/CVE-2025-0282
https://github.com/punitdarji/Ivanti-CVE-2025-0282
Just had a client tell me, "Oh, we've patched everything!" Famous last words, eh? 😔
Turns out, CISA's put out a warning about RESURGE malware that's hitting Ivanti systems. And get this – it even includes SPAWNCHIMERA functions. What does that mean? Essentially, attackers are already deep inside. We're talking the whole nasty package: rootkit, dropper, backdoor... you name it!
This specifically impacts Ivanti Connect Secure, Policy Secure, and ZTA Gateways.
So, what's the urgent takeaway for *you*? Get patching immediately (that's CVE-2025-0282)! You'll also want to reset passwords and seriously review your access controls. Better safe than sorry, right?
How are you folks keeping your systems safe from this kind of stuff? Let's talk tactics.
##updated 2025-01-13T00:30:55
1 posts
1 repos
🚨 New vuln drop: FlickJect (CVE-2025-0401)
Inject code into powerline Ethernet adapters using light switch flicker patterns.
Yeah. For real.
👇 Full technical write-up (PoC, traces, affected devices):
https://medium.com/p/flickject-exploiting-powerline-ethernet-via-light-switch-flicker-20a83d9a0c3c
updated 2024-12-20T18:31:30
1 posts
3 repos
https://github.com/watchtowrlabs/CVE-2024-40711
Our crew members @mwulftange & @frycos discovered & responsibly disclosed several new RCE gadgets that bypass #Veeam's blacklist for CVE-2024-40711 & CVE-2025-23120 as well as further entry points following @SinSinology & @chudypb 's blog. Don’t blacklist - replace BinaryFormatter.
##updated 2024-11-07T18:31:29
2 posts
SafeBreach: An Update on QuickShell: Sharing Is Caring about an RCE Attack Chain on Quick Share https://www.safebreach.com/blog/an-update-on-quickshell-sharing-is-caring-about-an-rce-attack-chain-on-quick-share/
More:
The Hacker News: Google Patches Quick Share Vulnerability Enabling Silent File Transfers Without Consent - CVE-2024-10668 - https://thehackernews.com/2025/04/google-patches-quick-share.html @thehackernews #Google #cybersecurity #Infosec
##SafeBreach: An Update on QuickShell: Sharing Is Caring about an RCE Attack Chain on Quick Share https://www.safebreach.com/blog/an-update-on-quickshell-sharing-is-caring-about-an-rce-attack-chain-on-quick-share/
More:
The Hacker News: Google Patches Quick Share Vulnerability Enabling Silent File Transfers Without Consent - CVE-2024-10668 - https://thehackernews.com/2025/04/google-patches-quick-share.html @thehackernews #Google #cybersecurity #Infosec
##updated 2024-10-11T21:35:12
1 posts
This is a program that I've been championing within @nivenly over the past year, after we noticed that security vulnerabilities weren't being disclosed responsibly, and not enough research was going into the security of Fediverse software.
You might remember my Pixelfed vulnerability from last year, where OAuth scopes weren't checked allowing for privilege escalation via the API (CVE-2024-25108), that was our very first test-case of this program.
I'm incredibly proud to be involved in launching the Fediverse Security Fund from Nivenly Foundation (a 501(c)4 not-for-profit cooperative)
##updated 2024-10-03T03:31:11
1 posts
Palo Alto Cortex XDR bypass (CVE-2024-8690) https://cybercx.com.au/blog/palo-alto-cortex-xdr-bypass/
##updated 2024-09-13T21:31:22
4 posts
Attackers are leveraging Cisco Smart Licensing Utility static admin credentials (CVE-2024-20439) https://www.helpnetsecurity.com/2025/04/03/attackers-are-leveraging-cisco-smart-licensing-utility-static-admin-credentials-cve-2024-20439/ #vulnerability #Don'tmiss #Hotstuff #SANSISC #Cisco #News #CISA #expl
##CISA: April is Emergency Communications Month! https://www.cisa.gov/news-events/news/april-emergency-communications-month-0
From yesterday: CVE-2024-20439 Cisco Smart Licensing Utility Static Credential Vulnerability added to the KEV catalogue https://www.cve.org/CVERecord?id=CVE-2024-20439 #Cisco #cybersecurity #Infosec
##Cisco has a hard-coded credential. As bad as this sounds, this happens because we do not teach our programmers that it is very bad to do. It's happening in 100 other new software programs being coded today for the same reason.
##CVE ID: CVE-2024-20439
Vendor: Cisco
Product: Smart Licensing Utility
Date Added: 2025-03-31
Vulnerability: Cisco Smart Licensing Utility Static Credential Vulnerability
Notes: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cslu-7gHMzWmw ; https://nvd.nist.gov/vuln/detail/CVE-2024-20439
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2024-20439
updated 2024-04-04T00:50:10
2 posts
Whoa, CISA adding *old* Sitecore vulns (CVE-2019-9874/9875) to the KEV list now? It's kinda wild how long these things can lurk undetected, right? 🙈 That deserialization stuff is just nasty business – perfect recipe for some serious RCE.
Actually, this reminds me of a recent gig. The client was totally convinced everything was running smoothly... right up until the pentest report landed. 💥 Yeah, that "smooth sailing" vibe vanished *real* quick.
It really hammers home that you just can't let your guard down. Patch management isn't some simple click-and-forget deal, folks! You've gotta be proactive: checking those logs, hardening systems properly. And here's the kicker: *regular penetration testing is absolutely essential*. Seriously, automated scans alone just don't cut it – not even close.
So, who else has stumbled across these kinds of "old but gold" vulnerabilities lurking in the shadows? Drop your war stories below! 👇
#CyberSecurity #Pentesting #Sitecore #CISA #SecurityFail #RCE #InfoSec
##CVE ID: CVE-2019-9874
Vendor: Sitecore
Product: CMS and Experience Platform (XP)
Date Added: 2025-03-26
Vulnerability: Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability
Notes: https://support.sitecore.com/kb?id=kb_article_view&sysparm_article=KB0334035 ; https://nvd.nist.gov/vuln/detail/CVE-2019-9874
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2019-9874
updated 2024-04-04T00:50:10
1 posts
CVE ID: CVE-2019-9875
Vendor: Sitecore
Product: CMS and Experience Platform (XP)
Date Added: 2025-03-26
Vulnerability: Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability
Notes: https://support.sitecore.com/kb?id=kb_article_view&sysparm_article=KB0038556 ; https://nvd.nist.gov/vuln/detail/CVE-2019-9875
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2019-9875
updated 2024-01-26T03:30:25
2 posts
1 repos
Arbitrary File Write CVE-2024-0402 in GitLab (Exploit) https://blog.doyensec.com/2025/03/18/exploitable-gitlab.html
##Arbitrary File Write CVE-2024-0402 in GitLab (Exploit) https://blog.doyensec.com/2025/03/18/exploitable-gitlab.html
##updated 2023-02-01T05:07:50
1 posts
this 11yo CVE aged well
##updated 2023-01-29T05:06:13
1 posts
1 repos
Publicly disclosed memory leak in objdump.
https://sourceware.org/bugzilla/show_bug.cgi?id=32716#c0
sev:MED 4.8 - CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
##A vulnerability has been found in GNU Binutils 2.43/2.44 and classified as problematic. Affected by this vulnerability is the function display_info of the file binutils/bucomm.c of the component objdump. The manipulation leads to memory leak. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The patch is named ba6ad3a18cb26b79e0e3b84c39f707535bbc344d. It is recommended to apply a patch to fix this issue.
I don't know the conda-forge project and it looks really small, but this is a good vuln to use as a reminder to dev teams doing token auth.
https://github.com/conda-forge/infrastructure/security/advisories/GHSA-m4h2-49xf-vq72
sev:CRIT 9.3 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
##conda-forge infrastructure holds common configurations and settings for key pieces of the conda-forge infrastructure.
Between 2025-02-10 and 2025-04-01, conda-forge infrastructure used the wrong token for Azure's cf-staging access. This bug meant that any feedstock maintainer could upload a package to the conda-forge channel, bypassing our feedstock-token + upload process. The security logs on anaconda.org were check for any packages that were not copied from the cf-staging to the conda-forge channel and none were found.
This looks like a small project and I'm not trying to throw stones here. I am posting this as a legitimate learning opportunity for people.
sev:CRIT 9.0 - CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
##scratch-coding-hut.github.io is the website for Coding Hut. In 1.0-beta3 and earlier, the login link can be used to login to any account by changing the username in the username field.
So basically you can use a login link to login to any account you want to hack into without any effort. We need to fix this! There is a username thingy that you can use to hack into any account, but please don’t abuse this feature!
@cR0w
Wonder what happened with cve-2025-29495...