3885 matches found
CVE-2025-21335
Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...
Security Advisory 0109
Security Advisory 0109 . CSAF PDF Date: February 6, 2025 Revision | Date | Changes ---|---|--- 1.0 | January 14, 2025 | Initial release 1.1 | February 6, 2025 | Updated EOS-Based Product Versions The CVE-ID tracking this issue: CVE-2024-8000 CVSSv3.1 Base Score: 5.3...
CISA: Assessing the Risk from Stolen or Diverted Toxic Industrial Chemicals
System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...
CISA: Chemical Facility Anti-Terrorism Standards (CFATS) Risk Tiering
System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...
CVE-2024-57877
In the Linux kernel, the following vulnerability has been resolved: arm64: ptrace: fix partial SETREGSET for NTARMPOE Currently poeset doesn't initialize the temporary 'ctrl' variable, and a SETREGSET call with a length of zero will leave this uninitialized. Consequently an arbitrary value will b...
ABB Drive Composer
SUMMARY An update is available that resolves vulnerability in the product versions as affected in this advisory. An attacker who successfully exploits the vulnerability could get unauthorized access to the file system on the host machine. This can lead to the execution of arbitrary code, data...
Delta Electronics DRASimuCAD (Update A)
RISK EVALUATION Successful exploitation of these vulnerabilities could crash the device or potentially allow remote code execution. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities. CISA reminds organizations to...
CVE-2024-56779
creationtimestamp| type| source ---|---|--- 2025-01-08 18:16:03+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfarhetlg62l 2025-01-08 18:22:37+00:00| seen| https://infosec.exchange/users/cve/statuses/113794125484036956 2025-01-08 19:59:58+00:00| seen|...
PT-2025-3107 · Undefined · Undefined
Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions are specified. Description: The issue was initially considered but later rejected as it was determined not to be a security issue. Further investigation confirmed this assessment. Recommendations: A...
GHSA-FFHJ-HPRX-7QVR
creationtimestamp| type| source ---|---|--- 2025-01-07 16:07:43+00:00| seen| https://infosec.exchange/users/cve/statuses/113787932656548061 2025-01-07 17:42:22+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/497...
Nedap Librix Ecoreader
RISK EVALUATION Successful exploitation of this vulnerability could result in remote code execution. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability, such as: Minimize network exposure for all control system...
10 Non-tech things you wish you had done after being breached
TL;DR Non-tech aspects to breach follow-up are often overlooked but essential NDAs, supply chain, and third party contracts and obligations should be reviewed Reviewing communication protocols and employee training increases resilience Looking after, and retaining your people improves recovery fo...
CVE-2024-41763
creationtimestamp| type| source ---|---|--- 2025-01-04 14:42:21+00:00| seen| https://infosec.exchange/users/cve/statuses/113770603369270865 2025-01-04 15:15:32+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lewfirehej2m 2025-01-04 17:16:05+00:00| seen|...
PT-2025-1978 · Kentico · Kentico Cms
Name of the Vulnerable Software and Affected Versions: Kentico CMS version 7 Description: The issue is a Reflected XSS attack that occurs through the manipulation of a specific GET request parameter sent to the "/CMSMessages/AccessDenied.aspx" endpoint. Support for Kentico CMS version 7 ended in...
When Good Extensions Go Bad: Takeaways from the Campaign Targeting Browser Extensions
News has been making headlines over the weekend of the extensive attack campaign targeting browser extensions and injecting them with malicious code to steal user credentials. Currently, over 25 extensions, with an install base of over two million users, have been found to be compromised, and...
CVE-2024-6914
creationtimestamp| type| source ---|---|--- 2024-12-30 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1740/ 2025-05-22 20:55:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpryt6jtjv27...
GHSA-3PFM-HP96-PFGV
creationtimestamp| type| source ---|---|--- 2024-12-19 18:44:21+00:00| seen| https://infosec.exchange/users/cve/statuses/113680964695610869...
Hitachi Energy RTU500 series CMU
RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to cause a denial-of-service condition. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. CISA reminds organizations to perform...
Ossur Mobile Logic Application
RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker unauthorized access to sensitive information. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities, such as: Minimize network...