RHSA-2025:1707

creationtimestamp| type| source ---|---|--- 2025-02-27 01:26:02+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5635 2025-04-16 18:56:07+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12130...

The vulnerability of the CalInvocationHandler component in the software for managing SAN networks by Brocade’s SANnav allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the CalInvocationHandler component in the software for managing SAN networks by Brocade’s SANnav relates to the unencrypted storage of account data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

CVE-2025-26871

creationtimestamp| type| source ---|---|--- 2025-02-25 19:23:34+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5348 2026-04-01 21:28:26+00:00| seen| Telegram/EgY-3dooiREg-dALgS8idmo8jFkn1Hp5AACRbJP7ZYbsQN4...

CVE-2024-9150

Report generation functionality in Wyn Enterprise allows for code inclusion, but not sufficiently limits what code might be included. An attacker is able use a low privileges account in order to abuse this functionality and execute malicious code, load DLL libraries and executing OS commands on a...

CVE-2025-25772

A Cross-Site Request Forgery CSRF in the component /back/UserController.java of Jspxcms v9.0 to v9.5 allows attackers to arbitrarily add Administrator accounts via a crafted request...

CVE-2025-25282

RAGFlow is an open-source RAG Retrieval-Augmented Generation engine based on deep document understanding. An authenticated user can exploit the Insecure Direct Object Reference IDOR vulnerability that may lead to unauthorized cross-tenant access list tenant user accounts, add user account into...

CVE-2025-25282

CVE-2025-25282 pertains to RAGFlow, an open-source RAG engine. An authenticated user can exploit an Insecure Direct Object Reference (IDOR) vulnerability that enables unauthorized cross-tenant access, including listing tenant user accounts and adding users to other tenants. Affected behavior cent...

CVE-2025-25282 Potential Insecure Direct Object Reference (IDOR) vulnerability in ragflow

RAGFlow is an open-source RAG Retrieval-Augmented Generation engine based on deep document understanding. An authenticated user can exploit the Insecure Direct Object Reference IDOR vulnerability that may lead to unauthorized cross-tenant access list tenant user accounts, add user account into...

CVE-2025-25772

A Cross-Site Request Forgery CSRF in the component /back/UserController.java of Jspxcms v9.0 to v9.5 allows attackers to arbitrarily add Administrator accounts via a crafted request...

CVE-2025-25772

A Cross-Site Request Forgery CSRF in the component /back/UserController.java of Jspxcms v9.0 to v9.5 allows attackers to arbitrarily add Administrator accounts via a crafted request...

CVE-2024-9150

Report generation functionality in Wyn Enterprise allows for code inclusion, but not sufficiently limits what code might be included. An attacker is able use a low privileges account in order to abuse this functionality and execute malicious code, load DLL libraries and executing OS commands on a...

CVE-2024-9150 Code Injection in Wyn Enterprise

Report generation functionality in Wyn Enterprise allows for code inclusion, but not sufficiently limits what code might be included. An attacker is able use a low privileges account in order to abuse this functionality and execute malicious code, load DLL libraries and executing OS commands on a...

CVE-2024-13751

creationtimestamp| type| source ---|---|--- 2025-02-21 04:19:43+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/4844 2025-02-21 07:14:48+00:00| seen| https://t.me/cvedetector/18631 2025-02-21 08:03:23+00:00| seen| Telegram/5H9FNLh74vj6kvayiqJBGA-kAWRU5Wm8JHG7o9RvQMjK9B...

CVE-2025-25772

CVE-2025-25772 affects Jspxcms versions 9.0–9.5. A CSRF vulnerability in the /back/UserController.java component could allow an attacker to arbitrarily add Administrator accounts via a crafted request. The CVSS base score is 5.1 (Medium) with local attack vector, low attack complexity, and no use...

CVE-2025-26618

creationtimestamp| type| source ---|---|--- 2025-02-20 19:49:28+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/4799 2025-02-20 20:41:09+00:00| seen| https://t.me/cvedetector/18578 2025-02-20 23:26:56+00:00| seen| Telegram/0RhbwYwzwEyjXCGtJTM02J2pXDTqA9dWpzhuh8c1zxBbzDF...

CVE-2025-1043

creationtimestamp| type| source ---|---|--- 2025-02-20 14:49:28+00:00| seen| https://t.me/cvedetector/18536 2025-02-20 23:26:54+00:00| seen| Telegram/PTOhxFVJBKf3mwqbfNg8QGoqLYG5vzoJiN6Uq9qlpyr3zMBh...

Hackers Tricking Users Into Linking Devices to Steal Signal Messages

Is your Signal, WhatsApp, or Telegram account safe? Google warns of increasing attacks by Russian state-backed groups. Learn…...

⚡ THN Weekly Recap: Google Secrets Stolen, Windows Hack, New Crypto Scams and More

Welcome to this week's Cybersecurity News Recap. Discover how cyber attackers are using clever tricks like fake codes and sneaky emails to gain access to sensitive data. We cover everything from device code phishing to cloud exploits, breaking down the technical details into simple, easy-to-follo...

A week in security (February 10 – February 16)

Last week on Malwarebytes Labs: A suicide reveals the lonely side of AI chatbots, with Courtney Brown Lock and Code S06E03 Apple ordered to grant access to users’ encrypted data Phishing evolves beyond email to become latest Android app threat Apple fixes zero-day vulnerability used in "extremely...

GHSA-P44G-M5W8-GWHM

creationtimestamp| type| source ---|---|--- 2025-02-17 00:19:06+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/4611 2025-02-17 00:20:11+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/4616 2025-02-17 00:21:07+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/4621 2025-02-17 00:22:13+00:00...