Schneider Electric Discontinued Devices Detection

The current plugin identifies Schneider devices that are currently discontinued. Schneider Lifecycle Statuses: - Active: Most current offering within a product category. - End of Life: Discontinued date announced - actively execute migrations and last time buys. Product generally orderable until...

androidhiro.com Cross Site Scripting vulnerability OBB-4037536

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

python-awscrt bug fix and enhancement update

An update is available for python-awscrt. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linu...

libndp bug fix and enhancement update

An update is available for libndp. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 9.5...

999thepoint.com Cross Site Scripting vulnerability OBB-4037171

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2025-2354

creationtimestamp| type| source ---|---|--- 2025-03-17 00:55:22+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7730 2025-03-17 02:24:42+00:00| seen| https://t.me/cvedetector/20423 2025-03-17 03:41:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkkabgpmr...

K000150408: Pixman vulnerabilities CVE-2022-44638 and CVE-2023-37769

Security Advisory Description CVE-2022-44638 In libpixman in Pixman before 0.42.2, there is an out-of-bounds write aka heap-based buffer overflow in rasterizeedges8 due to an integer overflow in pixmansamplefloory. CVE-2023-37769 stress-test master commit e4c878 was discovered to contain a FPE...

Huawei EulerOS: Security Advisory for dhcp (EulerOS-SA-2025-1233)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-2025

creationtimestamp| type| source ---|---|--- 2025-03-15 11:44:19+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7680 2025-03-15 15:06:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkgfmsu3dh2s 2025-03-15 15:17:11+00:00| seen|...

RHEL 8 / 9 : Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update (Moderate) (RHSA-2025:2518)

The remote Redhat Enterprise Linux 8 / 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2025:2518 advisory. Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can...

CVE-2024-13824

CVE-2024-13824 affects the CiyaShop theme for WordPress. It is an unauthenticated PHP Object Injection vulnerability in all versions up to and including 4.19.0, caused by deserialization of untrusted input in the add_ciyashop_wishlist and ciyashop_get_compare functions. Impact requires a POP chai...

Ubuntu: Security Advisory (USN-7328-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PHP < 8.1.32, 8.2.x < 8.2.28 Multiple Vulnerabilities - Windows

PHP is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php"; if description...

Sungrow iSolarCloud Android App, WiNet Firmware

RISK EVALUATION Successful exploitation of these vulnerabilities could result in attackers being able to access and could modify sensitive information. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities, such as:...

Remote Code Execution (RCE)

plotai is vulnerable to Remote Code Execution RCE. The vulnerability is due to a lack of validation of LLM-generated output, which allows an attacker to execute arbitrary Python code...

PT-2025-11216 · Microsoft · Dataverse

Name of the Vulnerable Software and Affected Versions: Microsoft Dataverse affected versions not specified Description: Improper authentication in Microsoft Dataverse allows an authorized attacker to elevate privileges over a network. Recommendations: At the moment, there is no information about ...

Explaining External Network Assessment with Vector Command

Learn how external network assessment works within Vector Command, Rapid7’s continuous red team managed service. Understanding threat exposure management Let’s start by providing some context around where Vector Command fits into a security program and more specifically Continuous Threat Exposure...

Microsoft Windows Multiple Vulnerabilities (KB5053606)

This host is missing an important security update according to Microsoft KB5053606 SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Optigo Networks Visual BACnet Capture Tool / Optigo Visual Networks Capture Tool

RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to bypass authentication, gain control over the products, or impersonate the web applications. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of...

CVE-2025-24054

External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...