9065 matches found
Guidelines for Mass Instant Recovery to Azure
Article Applicability This article contains information related to Veeam Backup & Replication build 13.0.1.180 and later, as performance for IR to Azure was significantly improved starting with this build. Challenge When attempting to perform mass recovery using Instant Recovery to Azure, the...
CVE-2025-36759
Through the provision of user names, SolaX Cloud will suggest similar user accounts and thereby leak sensitive information such as user email addresses and phone numbers...
CVE-2025-36759 Sensitive Information Disclosure in SolaX Cloud
Through the provision of user names, SolaX Cloud will suggest similar user accounts and thereby leak sensitive information such as user email addresses and phone numbers...
CVE-2025-36759 Sensitive Information Disclosure in SolaX Cloud
Through the provision of user names, SolaX Cloud will suggest similar user accounts and thereby leak sensitive information such as user email addresses and phone numbers...
CVE-2025-7049
CVE-2025-7049 affects the WordPress plugin WPGYM - Wordpress Gym Management System up to version 67.7.0 . The vulnerability is a Privilege Escalation via a missing validation on a user-controlled key in the function MJ_gmgt_gmgt_add_user , allowing authenticated users with Subscriber+ privileges ...
CVE-2025-8359
The AdForest theme for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 6.0.9. This is due to the plugin not properly verifying a user's identity prior to authenticating them. This makes it possible for unauthenticated attackers to log in as other users,...
secrets-store-sync-controller discloses service account tokens in logs
Hello Kubernetes Community, A security issue was discovered in secrets-store-sync-controller where an actor with access to the controller logs could observe service account tokens. These tokens could then potentially be exchanged with external cloud providers to access secrets stored in cloud vau...
Linux Distros Unpatched Vulnerability : CVE-2022-22967
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in SaltStack Salt in versions before 3002.9, 3003.5, 3004.2. PAM auth fails to reject locked accounts, which allows a previously...
Iranian Hackers Exploit 100+ Embassy Email Accounts in Global Phishing Targeting Diplomats
An Iran-nexus group has been linked to a "coordinated" and "multi-wave" spear-phishing campaign targeting the embassies and consulates in Europe and other regions across the world. The activity has been attributed by Israeli cybersecurity company Dream to Iranian-aligned operators connected to...
PT-2025-35801
Name of the Vulnerable Software and Affected Versions: Quest One Identity version 7.5.1.20903 Description: A crafted response manipulation can bypass the One-Time Password OTP on the Multi-Factor Authentication MFA page, leading to unauthorized access to the Privileged Access Management PAM porta...
Linux Distros Unpatched Vulnerability : CVE-2024-45690
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Moodle. Additional checks were required to ensure users can only delete their OAuth2-linked accounts. CVE-2024-45690 Note that Nessus relies...
Linux Distros Unpatched Vulnerability : CVE-2023-41324
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GLPI stands for Gestionnaire Libre de Parc Informatique is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses...
Linux Distros Unpatched Vulnerability : CVE-2023-41320
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GLPI stands for Gestionnaire Libre de Parc Informatique is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses...
CVE-2023-47799
Mahara before 22.10.4 and 23.x before 23.04.4 allows information disclosure if the experimental HTML bulk export is used via the administration interface or via the CLI, and the resulting export files are given to the account holders. They may contain images of other account holders because the...
CVE-2025-5931
The Dokan Pro plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 4.0.5. This is due to the plugin not properly validating a user's identity prior to updating their password during a staff password reset. This makes it possible for...
RHSA-2024:0423
creationtimestamp| type| source ---|---|--- 2025-08-30 02:22:26+00:00| seen| Telegram/swvvDBr4sLUJpO-Mf1lDD-RcBF5rVCeCsgITXhhnfHg5hTU 2025-08-30 05:19:18+00:00| seen| Telegram/IyktYvz2ZXSoln-Xw9gf7lHEpCZ8IZsKAFgChoCz0-9C5M 2025-08-30 05:19:19+00:00| seen|...
Linux Distros Unpatched Vulnerability : CVE-2020-1778
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When OTRS uses multiple backends for user authentication with LDAP, agents are able to login even if the account is set to invalid. This issue affects OTRS; 8.0...
Privilege Escalation
github.com/openbao/openbao is vulnerable to Privilege Escalation. The vulnerability is due to accounts with access to privileged identity entity systems in root namespaces being able to escalate privileges to the global root policy...
CVE-2025-9610 code-projects Online Event Judging System create_account.php sql injection
A vulnerability was determined in code-projects Online Event Judging System 1.0. This issue affects some unknown processing of the file /createaccount.php. This manipulation of the argument fname causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicl...
