CVE-2025-13086: Improper Verification of Source of a Communication Channel

Improper validation of source IP addresses in OpenVPN version 2.6.0 through 2.6.15 and 2.7alpha1 through 2.7rc1 allows an attacker to open a session from a different IP address which did not initiate the connection resulting in a denial of service for the originating client...

CVE-2025-54515

The Secure Flag passed to Versal™ Adaptive SoC’s Trusted Firmware for Cortex®-A processors TF-A for Arm’s Power State Coordination Interface PSCI commands were incorrectly set to secure instead of using the processor’s actual security state. This would allow the PSCI requests to appear they were...

BreachLock Named a Leader in 2025 GigaOm Radar Report for Penetration Testing as a Service (PTaaS) for Third Consecutive Year

New York, New York, 1st December 2025, CyberNewsWire...

New Android malware lets criminals control your phone and drain your bank account

Albiriox is a new family of Android banking malware that gives attackers live remote control over infected phones, letting them quietly drain bank and crypto accounts during real sessions. Researchers have analyzed a new Android malware family called Albiriox which is showing signs of developing...

New Albiriox MaaS Malware Targets 400+ Apps for On-Device Fraud and Screen Control

A new Android malware named Albiriox has been advertised under a malware-as-a-service MaaS model to offer a "full spectrum" of features to facilitate on-device fraud ODF, screen manipulation, and real-time interaction with infected devices. The malware embeds a hard-coded list comprising over 400...

CVE-2025-13802

A vulnerability was determined in jairiidriss RestaurantWebsite up to e7911f12d035e8e2f9a75e7a28b59e4ef5c1d654. Impacted is an unknown function of the component Make a Reservation. This manipulation of the argument selecteddate causes cross site scripting. The attack can be initiated remotely. Th...

CVE-2025-13802

Affects jairiidriss RestaurantWebsite (Make a Reservation component). The vulnerability is a cross-site scripting flaw caused by how the selected_date argument is handled. It is exploitable remotely and has been publicly disclosed. No affected versions or updated releases are specified. The vendo...

CVE-2025-13802 jairiidriss RestaurantWebsite Make a Reservation cross site scripting

A vulnerability was determined in jairiidriss RestaurantWebsite up to e7911f12d035e8e2f9a75e7a28b59e4ef5c1d654. Impacted is an unknown function of the component Make a Reservation. This manipulation of the argument selecteddate causes cross site scripting. The attack can be initiated remotely. Th...

PT-2025-48644

CVE-2025-65793 - Apache Non-Vulnerability CVE ID : CVE-2025-65793 Published : Dec. 1, 2025, 5:15 p.m. | 17 minutes ago Description : Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security...

PT-2025-48406

Name of the Vulnerable Software and Affected Versions jairiidriss RestaurantWebsite versions prior to e7911f12d035e8e2f9a75e7a28b59e4ef5c1d654 Description A flaw exists in jairiidriss RestaurantWebsite, specifically within the Make a Reservation component. Manipulation of the selected date argume...

CVE-2025-66300: Improper Limitation of a Pathname to a Restricted Directory

Grav is a file-based Web platform. Prior to 1.8.0-beta.27, A low privilege user account with page editing privilege can read any server files using "Frontmatter" form. This includes Grav user account files /grav/user/accounts/.yaml, which store hashed user password, 2FA secret, and the password...

ASB-A-445793671

Bulletin has no description...

ASB-A-445785196

Bulletin has no description...

ASB-A-435065128

Bulletin has no description...

ASB-A-445793670

Bulletin has no description...

CVE-2025-13802: Improper Neutralization of Input During Web Page Generation

A vulnerability was determined in jairiidriss RestaurantWebsite up to e7911f12d035e8e2f9a75e7a28b59e4ef5c1d654. Impacted is an unknown function of the component Make a Reservation. This manipulation of the argument selecteddate causes cross site scripting. The attack can be initiated remotely. Th...

ASB-A-430043154

Bulletin has no description...

ASB-A-448236352

Bulletin has no description...

CVE-2025-33195: Improper Restriction of Operations within the Bounds of a Memory Buffer

NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause unexpected memory buffer operations. A successful exploit of this vulnerability might lead to data tampering, denial of service, or escalation of privileges...

CVE-2025-54515

The Secure Flag passed to Versal™ Adaptive SoC’s Trusted Firmware for Cortex®-A processors TF-A for Arm’s Power State Coordination Interface PSCI commands were incorrectly set to secure instead of using the processor’s actual security state. This would allow the PSCI requests to appear they were...