CVE-2025-66516: Detecting and Defending Against Apache Tika XXE Attack

...

@vitnode/blog (>=1.2.0-canary.56, <=1.2.0-canary.59) potentially affected by CVE-2025-55183 via next (15.6.0-canary.41)

next NPM version 15.6.0-canary.41 is affected by a known vulnerability. The following packages have a transitive dependency on next and may be impacted: - @vitnode/blog =1.2.0-canary.56, =1.2.0-canary.59 Source cves: CVE-2025-55183 Source advisory: GHSA-W37M-7FHW-FMV9...

@vitnode/blog (>=1.2.0-canary.56, <=1.2.0-canary.59) potentially affected by CVE-2025-55183 via next (15.6.0-canary.41)

next NPM version 15.6.0-canary.41 is affected by a known vulnerability. The following packages have a transitive dependency on next and may be impacted: - @vitnode/blog =1.2.0-canary.56, =1.2.0-canary.59 Source cves: CVE-2025-55183 Source advisory: OSV:GHSA-W37M-7FHW-FMV9...

@vitnode/blog (>=1.2.0-canary.56, <=1.2.0-canary.59) potentially affected by CVE-2025-55184 via next (15.6.0-canary.41)

next NPM version 15.6.0-canary.41 is affected by a known vulnerability. The following packages have a transitive dependency on next and may be impacted: - @vitnode/blog =1.2.0-canary.56, =1.2.0-canary.59 Source cves: CVE-2025-55184 Source advisory: GHSA-MWV6-3258-Q52C...

@vitnode/blog (>=1.2.0-canary.56, <=1.2.0-canary.59) potentially affected by CVE-2025-55184 via next (15.6.0-canary.41)

next NPM version 15.6.0-canary.41 is affected by a known vulnerability. The following packages have a transitive dependency on next and may be impacted: - @vitnode/blog =1.2.0-canary.56, =1.2.0-canary.59 Source cves: CVE-2025-55184 Source advisory: OSV:GHSA-MWV6-3258-Q52C...

INE Highlights Enterprise Shift Toward Hands-On Training Amid Widening Skills Gaps

Cary, North Carolina, USA, 11th December 2025, CyberNewsWire...

Top 10 Data Anonymization Solutions for 2026

Every business today has to deal with private information – whether it is about customers, employees, or financial…...

Patch Wednesday: Root Cause Analysis with LLMs

...

Serendipity code issue vulnerabilities

Serendipity is a PHP-based blogging system by the Serendipity team. The system supports the creation of online journals, blogs, web pages, and more. A code issue vulnerability exists in Serendipity version 2.5.0, which stems from an authenticated administrator being able to upload malicious PHP...

CVE-2025-14227

A security flaw has been discovered in Philipinho Simple-PHP-Blog up to 94b5d3e57308bce5dfbc44c3edafa9811893d958. This issue affects some unknown processing of the file /edit.php. The manipulation results in sql injection. The attack may be performed from remote. The exploit has been released to...

CVE-2025-62454

creationtimestamp| type| source ---|---|--- 2025-12-09 17:29:16+00:00| seen| https://www.thezdi.com/blog/2025/12/9/the-december-2025-security-update-review 2025-12-09 17:39:18+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0383...

CVE-2025-62571

creationtimestamp| type| source ---|---|--- 2025-12-09 17:29:16+00:00| seen| https://www.thezdi.com/blog/2025/12/9/the-december-2025-security-update-review 2025-12-09 17:39:18+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0383...

CVE-2025-62473

creationtimestamp| type| source ---|---|--- 2025-12-09 17:29:16+00:00| seen| https://www.thezdi.com/blog/2025/12/9/the-december-2025-security-update-review 2025-12-09 17:39:18+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0383...

CVE-2025-64658

creationtimestamp| type| source ---|---|--- 2025-12-09 17:29:16+00:00| seen| https://www.thezdi.com/blog/2025/12/9/the-december-2025-security-update-review 2025-12-09 17:39:18+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0383...

CVE-2025-64679

creationtimestamp| type| source ---|---|--- 2025-12-09 17:29:16+00:00| seen| https://www.thezdi.com/blog/2025/12/9/the-december-2025-security-update-review 2025-12-09 17:39:18+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0383...

CVE-2025-62457

creationtimestamp| type| source ---|---|--- 2025-12-09 17:29:16+00:00| seen| https://www.thezdi.com/blog/2025/12/9/the-december-2025-security-update-review 2025-12-09 17:39:18+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0383...

CVE-2025-53841: Guardicore Local Privilege Escalation Vulnerability

Get technical details about a security vulnerability CVE-2025-53841 in Akamai's Guardicore Platform Agent for Windows and clear guidance on mitigation...

CVE-2025-62458

creationtimestamp| type| source ---|---|--- 2025-12-09 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1049/ 2025-12-09 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1048/ 2025-12-09 05:00:00+00:00| seen|...

CVE-2025-62090: Missing Authorization

Missing Authorization vulnerability in Jegstudio Gutenverse News – Advanced News Magazine Blog Gutenberg Blocks Addons gutenverse-news allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Gutenverse News – Advanced News Magazine Blog Gutenberg Blocks Addons:...

CVE-2025-14227

A security flaw has been discovered in Philipinho Simple-PHP-Blog up to 94b5d3e57308bce5dfbc44c3edafa9811893d958. This issue affects some unknown processing of the file /edit.php. The manipulation results in sql injection. The attack may be performed from remote. The exploit has been released to...