Lucene search
+L

3703 matches found

Cvelist
Cvelist
•added 2025/10/29 11:12 p.m.•18 views

CVE-2025-9954 Acquia DAM - Moderately critical - Access bypass, Information Disclosure - SA-CONTRIB-2025-105

Missing Authorization vulnerability in Drupal Acquia DAM allows Forceful Browsing.This issue affects Acquia DAM: from 0.0.0 before 1.1.5...

0.00286EPSS
SaveExploits0References1
CVE
CVE
•added 2025/10/29 11:12 p.m.•28 views

CVE-2025-9954

Drupal Acquia DAM (versions 0.0.0 through 1.1.4) is vulnerable to an access bypass and information disclosure due to a missing authorization check. The module fails to sufficiently validate permissions for a list of DAM assets currently synced to the website, which allows for forceful browsing at...

6.6AI score0.00286EPSS
SaveExploits0References1Affected Software1
OSV
OSV
•added 2025/10/29 11:12 p.m.•14 views

CVE-2025-9954 Acquia DAM - Moderately critical - Access bypass, Information Disclosure - SA-CONTRIB-2025-105

Missing Authorization vulnerability in Drupal Acquia DAM allows Forceful Browsing.This issue affects Acquia DAM: from 0.0.0 before 1.1.5...

7.5CVSS5.9AI score
SaveExploits0References5
The Hacker News
The Hacker News
•added 2025/10/29 2:57 p.m.•19 views

New AI-Targeted Cloaking Attack Tricks AI Crawlers Into Citing Fake Info as Verified Facts

Cybersecurity researchers have flagged a new security issue in agentic web browsers like OpenAI ChatGPT Atlas that exposes underlying artificial intelligence AI models to context poisoning attacks. In the attack devised by AI security company SPLX, a bad actor can set up websites that serve...

7.6AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2025/10/29 12:00 a.m.•9 views

PT-2025-44365

Name of the Vulnerable Software and Affected Versions Acquia DAM versions 0.0.0 through 1.1.4 Description A missing authorization issue exists in Drupal Acquia DAM, allowing for forceful browsing. This allows unauthorized access to resources. Recommendations Update Acquia DAM to version 1.1.5 or...

7.5CVSS6.6AI score0.00286EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2025/10/29 12:00 a.m.•10 views

PT-2025-44360

Name of the Vulnerable Software and Affected Versions Drupal CivicTheme Design System versions prior to 1.12.0 Description An incorrect authorization issue exists in the CivicTheme Design System that allows for forceful browsing. This occurs due to insufficient access controls, potentially allowi...

7.5CVSS6.6AI score0.00286EPSS
SaveExploits0References6
OSV
OSV
•added 2025/10/27 9:16 a.m.•8 views

OPENSUSE-SU-2025:20027-1 Security update for chromium

This update for chromium fixes the following issues: Chromium 141.0.7390.107: CVE-2025-11756: Use after free in Safe Browsing boo1252013...

5.8AI score0.00425EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/10/27 12:00 a.m.•2 views

Linux Distros Unpatched Vulnerability : CVE-2025-11756

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Safe Browsing in Google Chrome prior to 141.0.7390.107 allowed a remote attacker who had compromised the renderer process to potentially perfo...

8.8CVSS6.9AI score0.00425EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2025/10/21 12:00 a.m.•18 views

The vulnerability of the Safe Browsing component in the Google Chrome browser allows a hacker to execute arbitrary code.

The vulnerability of Google Chrome’s Safe Browsing component is related to the use of memory after deallocation. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

7.5CVSS7.8AI score0.00425EPSS
SaveExploits0References8Affected Software3
Tenable Nessus
Tenable Nessus
•added 2025/10/21 12:00 a.m.•5 views

Fedora 41 : chromium (2025-3ec3fcd759)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-3ec3fcd759 advisory. Update 141.0.7390.107 High CVE-2025-11756: Use after free in Safe Browsing Tenable has extracted the preceding description block directly from the Fedora...

5.9AI score0.00425EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/10/20 12:00 a.m.•9 views

Fedora 42 : chromium (2025-008cb0e5fe)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-008cb0e5fe advisory. Update 141.0.7390.107 High CVE-2025-11756: Use after free in Safe Browsing Tenable has extracted the preceding description block directly from the Fedora...

5.9AI score0.00425EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/10/18 12:00 a.m.•26 views

Microsoft Edge (Chromium) < 141.0.3537.85 (CVE-2025-11756)

The version of Microsoft Edge installed on the remote Windows host is prior to 141.0.3537.85. It is, therefore, affected by a vulnerability as referenced in the October 17, 2025 advisory. - Use after free in Safe Browsing. CVE-2025-11756 Note that Nessus has not tested for this issue but has...

8.2AI score0.00425EPSS
SaveExploits0References3
Microsoft CVE
Microsoft CVE
•added 2025/10/17 10:29 p.m.•8 views

Chromium: CVE-2025-11756 Use after free in Safe Browsing

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

6.4AI score0.00425EPSS
SaveExploits0
OPENSUSE Linux
OPENSUSE Linux
•added 2025/10/17 12:00 a.m.•22 views

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2025:0399-1 Rating: important References: 1252013 Cross-References: CVE-2025-11756 Affected Products: openSUSE Backports SLE-15-SP7 An update that fixes one vulnerability is now available. Description: This update...

7.5AI score0.00425EPSS
SaveExploits0References1
OPENSUSE Linux
OPENSUSE Linux
•added 2025/10/17 12:00 a.m.•24 views

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2025:0398-1 Rating: important References: 1252013 Cross-References: CVE-2025-11756 Affected Products: openSUSE Backports SLE-15-SP6 An update that fixes one vulnerability is now available. Description: This update...

7.5AI score0.00425EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
•added 2025/10/16 11:38 p.m.•10 views

SUSE CVE-2025-11756

Use after free in Safe Browsing in Google Chrome prior to 141.0.7390.107 allowed a remote attacker who had compromised the renderer process to potentially perform out of bounds memory access via a crafted HTML page. Chromium security severity: High...

8.8CVSS7AI score0.00425EPSS
SaveExploits0References3
Packet Storm News
Packet Storm News
•added 2025/10/16 12:00 a.m.•13 views

Beyond a Single Perspective: Towards a Realistic Evaluation of Website Fingerprinting Attacks

Website Fingerprinting WF attacks exploit patterns in encrypted traffic to infer the websites visited by users, posing a serious threat to anonymous communication systems. Although recent WF techniques achieve over 90% accuracy in controlled experimental settings, most studies remain confined to...

6.8AI score
SaveExploits0
FreeBSD
FreeBSD
•added 2025/10/14 12:00 a.m.•14 views

chromium -- multiple security fixes

Chrome Releases reports: This update includes 1 security fix: 447192722 High CVE-2025-11756: Use after free in Safe Browsing. Reported by asnine on 2025-09-25...

7.2AI score0.00425EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/10/14 12:00 a.m.•3 views

Google Chrome < 141.0.7390.107 Vulnerability

The version of Google Chrome installed on the remote macOS host is prior to 141.0.7390.107. It is, therefore, affected by a vulnerability as referenced in the 202510stable-channel-update-for-desktop14 advisory. - Use after free in Safe Browsing in Google Chrome prior to 141.0.7390.107 allowed a...

5.9AI score0.00425EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2025/10/14 12:00 a.m.•3 views

Google Chrome < 141.0.7390.107 Vulnerability

The version of Google Chrome installed on the remote Windows host is prior to 141.0.7390.107. It is, therefore, affected by a vulnerability as referenced in the 202510stable-channel-update-for-desktop14 advisory. - Use after free in Safe Browsing in Google Chrome prior to 141.0.7390.107 allowed a...

5.9AI score0.00425EPSS
SaveExploits0References3
Rows per page
Query Builder