FedRAMP at Startup Speed: Lessons Learned

For organizations eyeing the federal market, FedRAMP can feel like a gated fortress. With strict compliance requirements and a notoriously long runway, many companies assume the path to authorization is reserved for the well-resourced enterprise. But that's changing. In this post, we break down h...

CVE-2025-39448

creationtimestamp| type| source ---|---|--- 2025-05-19 17:38:53+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16885...

CVE-2024-3446

creationtimestamp| type| source ---|---|--- 2025-05-02 23:17:21+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14626 2025-09-12 22:13:53+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lyobvxu5h22i...

CVE-2025-44848

creationtimestamp| type| source ---|---|--- 2025-05-01 17:15:24+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14342 2025-05-01 20:41:53+00:00| seen| https://t.me/cvedetector/24253...

CVE-2025-46509

creationtimestamp| type| source ---|---|--- 2025-04-24 20:06:53+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13338...

AWS VDP: Non-Production API Endpoints for the Route 53 Service Fail to Log to CloudTrail Resulting in Silent Permission Enumeration

The non-production API endpoints for the Route 53 service failed to log to CloudTrail, resulting in silent permission enumeration. Two non-production endpoints were found that could be used with standard IAM credentials without logging to CloudTrail. This allowed an adversary to perform permissio...

GHSA-F5PH-J9M6-QJQC

creationtimestamp| type| source ---|---|--- 2025-01-27 07:07:53+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3164...

CVE-2006-4255

creationtimestamp| type| source ---|---|--- 2025-01-17 14:56:53+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2138...

CVE-2024-57764

creationtimestamp| type| source ---|---|--- 2025-01-15 01:43:53+00:00| seen| https://t.me/cvedetector/15393...

CVE-1999-0475 affecting package procmail 3.22-53

CVE-1999-0475 affecting package procmail 3.22-53. No patch is available currently...

CVE-2022-23861

Multiple Stored Cross-Site Scripting vulnerabilities were discovered in Y Soft SAFEQ 6 Build 53. Multiple fields in the YSoft SafeQ web application can be used to inject malicious inputs that, due to a lack of output sanitization, result in the execution of arbitrary JS code. These fields can be...

CVE-2022-23861

CVE-2022-23861 affects YSoft SAFEQ 6 Build 53. The vulnerability is Multiple Stored Cross-Site Scripting (XSS) in the SafeQ web interface, caused by lack of output sanitization in multiple input fields, allowing arbitrary JavaScript execution for users accessing the web UI. Connected sources corr...

Adobe Bridge 10.x < 10.0 Multiple Vulnerabilities (APSB19-53)

The version of Adobe Bridge installed on the remote macOS or Mac OS X host is prior to 10.0. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb19-53 advisory. - Adobe Bridge CC versions 9.1 and earlier have a memory corruption vulnerability. Successful exploitation...

Mozilla Firefox Security Update (MFSA2024-53) - Mac OS X

Mozilla Firefox is prone to an unspecified vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...

Mozilla Firefox < 131.0.3

The version of Firefox installed on the remote Windows host is prior to 131.0.3. It is, therefore, affected by a vulnerability as referenced in the mfsa2024-53 advisory. - When manipulating the selection node cache, an attacker may have been able to cause unexpected behavior, potentially leading ...

CVE-2024-46856

creationtimestamp| type| source ---|---|--- 2024-09-27 15:53:15+00:00| seen| https://t.me/cvedetector/6514...

CVE-2024-8693

creationtimestamp| type| source ---|---|--- 2024-09-11 22:53:38+00:00| seen| https://t.me/cvedetector/5410...

Adobe Media Encoder < 23.6.9 / 24.0 < 24.6 Multiple Vulnerabilities (APSB24-53)

The version of Adobe Media Encoder installed on the remote Windows host is prior to 23.6.9, 24.6. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB24-53 advisory. - Media Encoder versions 24.5, 23.6.8 and earlier are affected by an out-of-bounds read vulnerability...

CVE-2024-43922

creationtimestamp| type| source ---|---|--- 2024-08-29 17:53:41+00:00| seen| https://t.me/cvedetector/4409...

CVE-2024-6864

creationtimestamp| type| source ---|---|--- 2024-08-20 07:55:53+00:00| seen| https://t.me/cvedetector/3602...