CVE-2025-13596

A sensitive information disclosure vulnerability exists in the error handling component of ATISoluciones CIGES Application version 2.15.6 and earlier. When certain unexpected conditions trigger unhandled exceptions, the application returns detailed error messages and stack traces to the client...

Security Bulletin: Vulnerability has been identified in WebSphere Application Server shipped with WebSphere Service Registry and Repository (CVE-2025-7962)

Summary WebSphere Application Server is shipped as a component of WebSphere Service Registry and Repository. Information about an SMTP injection vulnerability affecting WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security bulletins...

web-app-vulnerability-scanner

web-app-vulnerability-scanner A Python-based Web Application V...

Paris, The Thinker, and why your WAF should block XSS by default

With Thales HQ in Paris, it felt right to detour to the Musée Rodin and stand before The Thinker, the bronze giant by Auguste Rodin whose clenched posture and chin-in-hand stance have become a universal symbol of deep judgment. Conceived for The Gates of Hell in 1880 and first cast monumentally i...

CVE-2025-64656

Out-of-bounds read in Application Gateway allows an unauthorized attacker to elevate privileges over a network...

CVE-2025-64657

Stack-based buffer overflow in Azure Application Gateway allows an unauthorized attacker to elevate privileges over a network...

CVE-2025-64657 Azure Application Gateway Elevation of Privilege Vulnerability

...

CVE-2025-64657

Azure Application Gateway Elevation of Privilege (CVE-2025-64657) is described as a stack-based overflow that allows an unauthenticated, network-based attacker to escalate privileges. Affected component: Azure App Gateway. Root cause: stack-based overflow. CVSSv3.1: 9.8 (CRITICAL), Network vector...

CVE-2025-64657 Azure Application Gateway Elevation of Privilege Vulnerability

...

CVE-2025-64657

Stack-based buffer overflow in Azure Application Gateway allows an unauthorized attacker to elevate privileges over a network...

EUVD-2025-199683

Stack-based buffer overflow in Azure Application Gateway allows an unauthorized attacker to elevate privileges over a network...

CVE-2025-64656 Azure Application Gateway Elevation of Privilege Vulnerability

...

CVE-2025-64656 Azure Application Gateway Elevation of Privilege Vulnerability

...

CVE-2025-64656

CVE-2025-64656 affects Microsoft Azure Application Gateway. An out-of-bounds read allows an unauthenticated attacker to elevate privileges over the network. Affected versions for Application Gateway are 9.4–9.8; the provided sources recommend updating to a fixed version, but no specific patched v...

CVE-2025-64656

Out-of-bounds read in Application Gateway allows an unauthorized attacker to elevate privileges over a network...

EUVD-2025-199684

Out-of-bounds read in Application Gateway allows an unauthorized attacker to elevate privileges over a network...

Exploring Hidden Geographic Disparities in Android Apps

While mobile app evolution has been widely studied, geographical variation in app behavior remains largely unexplored. This paper presents a large-scale study of location-based Android app differentiation, uncovering two important and underexamined phenomena with security and fairness implication...

Files 授权问题漏洞

Files is a single-file PHP application by the individual developer Karl Ward. It can be dragged and dropped into any directory, allowing browsing of the files and directories within. An authorization issue vulnerability exists in Files versions prior to 0.16.11 and 0.17.2, which stems from...

WordPress Search Exclude plugin <= 2.5.7 – Missing Authorization to Authenticated (Contributor+) Search Settings Modification via REST API vulnerability

Missing Authorization to Authenticated Contributor+ Search Settings Modification via REST API vulnerability discovered by Lucas Montes Nirox in WordPress Plugin Search Exclude versions = 2.5.7...

JLSEC-2025-310 A memory leak flaw was found in Libtiff's tiffcrop utility

A memory leak flaw was found in Libtiff's tiffcrop utility. This issue occurs when tiffcrop operates on a TIFF image file, allowing an attacker to pass a crafted TIFF image file to tiffcrop utility, which causes this memory leak issue, resulting an application crash, eventually leading to a denia...