HaloBot 安全漏洞

HaloBot is a robotics framework by the individual developers at SNRainiar. A security vulnerability exists in HaloBot, which stems from the incorrect manipulation of the parameter action in the file plugins/htmlrenderer/index.js, which could lead to dynamically managed code resources...

CVE-2025-12512

The GenerateBlocks plugin for WordPress is vulnerable to information exposure due to missing object-level authorization checks in versions up to, and including, 2.1.2. This is due to the plugin registering multiple REST API routes under generateblocks/v1/meta/ that gate access with...

CVE-2024-44598

creationtimestamp| type| source ---|---|--- 2025-12-13 18:41:11+00:00| seen| https://gist.github.com/ZeroBreach-GmbH/e957dc32e72b366894565b7ff03659a4...

UK’s ICO Fine LastPass £1.2 Million Over 2022 Security Breach

UK's ICO fines LastPass £1.2M for the 2022 data breach that exposed 1.6 million users’ data. Learn how a flaw in an employee's personal PC led to the massive security failure...

The 5 Stages of Continuous Threat Exposure Management

Attackers don’t care about your compliance reports or the sheer number of vulnerabilities you have. They look for a single, exploitable path to your most valuable assets. To defend effectively, you need to see your organization through their eyes. This is the core principle behind continuous thre...

Apple macOS 安全漏洞

Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS Tahoe versions prior to 26.1, which stems from an insufficient sandbox restriction that could cause an application to break throug...

Apple macOS 安全漏洞

Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS Sonoma prior to 14.8.3 and Sequoia prior to 15.7.3, which stems from an insufficient check and could result in access to sensitive...

Plesk 安全漏洞

Plesk is a web hosting control panel from the Swiss company Plesk. A security vulnerability exists in Plesk version 18.0 that stems from improper access control...

Apple macOS 安全漏洞

Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS Sonoma prior to 14.8.3 and Sequoia prior to 15.7.3, which stems from a privacy concern and could result in access to protected use...

Vuetify 安全漏洞

vuetify is a material component framework for Vue open sourced by vuetify Germany. A security vulnerability exists in Vuetify version 2.0.0 up to versions prior to 3.0.0, which stems from cross-site scripting in the VDatePicker component that may result in the injection of uncleaned HTML...

Google Pixel 安全漏洞

Google Pixel is a smartphone from Google, an American company. A security vulnerability exists in Google Pixel that stems from a competing condition in PrepareWorkloadBuffers in gxpmainactor.cc, which could lead to local elevation of privilege...

Google Pixel 安全漏洞

Google Pixel is a smartphone from Google, an American company. Google Pixel has a security vulnerability that stems from the lack of boundary checking in GetHostAddress in gxpbuffer.h, which could lead to local elevation of privilege...

Google Pixel 安全漏洞

Google Pixel is a smartphone from Google, an American company. Google Pixel has a security vulnerability that stems from a privilege bypass in onCreateTasks in CameraActivity.java, which could lead to the disclosure of local information...

The vulnerability in the implementation of the IEEE 802.11 protocol in Linux kernel allows a attacker to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Linux operating system’s IEEE 802.11 kernel implementation is related to insufficient verification of data authenticity. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality and integrity of the protected information...

Google Pixel 安全漏洞

Google Pixel is a smartphone from the American company Google Google. Google Pixel has a security vulnerability that can be exploited by an attacker to cause local elevation of privilege...

Vulnerabilities fixed in Adobe ColdFusion

Adobe has fixed vulnerabilities in ColdFusion Specifically for versions 25.4, 23.16, 21.22 and earlier. The vulnerabilities are in the way ColdFusion handles file uploads, input validation, and data access. Users with high privileges can execute unauthorized code or access sensitive data without...

CVE-2025-65297

The CVE-2025-65297 entry covers Aqara Hub devices (Camera Hub G3 4.1.9_0027; Hub M2 4.3.6_0027; Hub M3 4.3.6_0025) that automatically collect and upload unencrypted sensitive information without disclosure or consent. The connected sources corroborate the same description across Red Hat/CIRA ENIS...

Gogs 安全漏洞

Gogs Go Git Service is a self-service Git hosting service based on the Go language by the Gogs team, which supports creating and migrating public/private repositories, adding and removing repository collaborators, and so on. A security vulnerability exists in Gogs, which stems from the mishandlin...

Im Park DijiDemi 安全漏洞

Im Park DijiDemi is an educational software from Im Park Turkey. A security vulnerability exists in Im Park DijiDemi version 28.11.2025 and earlier, which stems from a user control key leading to an authorization bypass that could exploit trusted identifiers...

DataGear 安全漏洞

DataGear is an open source, free data visualization and analysis platform from DataGear, Inc. A security vulnerability exists in DataGear version 5.5.0, which originates from the possibility of arbitrary file deletion...