CISA Releases Microsoft Expanded Cloud Logs Implementation Playbook

Today, CISA released the Microsoft Expanded Cloud Logs Implementation Playbook to help organizations get the most out of Microsoft’s newly introduced logs in Microsoft Purview Audit Standard. This step-by-step guide enables technical personnel to better detect and defend against advanced intrusio...

CVE-2025-23013

In Yubico pam-u2f before 1.3.1, local privilege escalation can sometimes occur. This product implements a Pluggable Authentication Module PAM that can be deployed to support authentication using a YubiKey or other FIDO compliant authenticators on macOS or Linux. This software package has an issue...

CISA: Compliance Requirements for Release Chemicals

System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...

[SECURITY] Fedora 40 Update: firefox-134.0-1.fc40

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

CVE-2023-28362

The redirectto method in Rails allows provided values to contain characters which are not legal in an HTTP header value. This results in the potential for downstream services which enforce RFC compliance on HTTP response headers to remove the assigned Location header...

CVE-2023-28362

The redirectto method in Rails allows provided values to contain characters which are not legal in an HTTP header value. This results in the potential for downstream services which enforce RFC compliance on HTTP response headers to remove the assigned Location header...

CVE-2023-28362: Improper Encoding or Escaping of Output

The redirectto method in Rails allows provided values to contain characters which are not legal in an HTTP header value. This results in the potential for downstream services which enforce RFC compliance on HTTP response headers to remove the assigned Location header...

FCC Launches 'Cyber Trust Mark' for IoT Devices to Certify Security Compliance

The U.S. government on Tuesday announced the launch of the U.S. Cyber Trust Mark, a new cybersecurity safety label for Internet-of-Things IoT consumer devices. "IoT products can be susceptible to a range of security vulnerabilities," the U.S. Federal Communications Commission FCC said. "Under thi...

[SECURITY] Fedora 41 Update: firefox-134.0-1.fc41

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

CVE-2024-9950

A vulnerability in Forescout SecureConnector v11.3.07.0109 on Windows allows unauthenticated user to modify compliance scripts due to insecure temporary directory...

CVE-2024-9950 Abuse of Unauthenticated Compliance Recheck in SecureConnector

A vulnerability in Forescout SecureConnector v11.3.07.0109 on Windows allows unauthenticated user to modify compliance scripts due to insecure temporary directory...

CVE-2024-9950 Abuse of Unauthenticated Compliance Recheck in SecureConnector

A vulnerability in Forescout SecureConnector v11.3.07.0109 on Windows allows unauthenticated user to modify compliance scripts due to insecure temporary directory...

CVE-2024-9950

CVE-2024-9950 affects Forescout SecureConnector on Windows (version 11.3.07.0109 and earlier). The root cause is an insecure temporary directory that allows an unauthenticated user to modify compliance scripts, enabling local privilege escalation. The CVE is supported by published PoC/example exp...

CVE-2023-47515 WordPress Seers | GDPR & CCPA Cookie Consent & Compliance plugin <= 8.1.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Nick Spencer Seers seers-cookie-consent-banner-privacy-policy allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Seers: from n/a through = 8.1.1...

ForeScout SecureConnector security vulnerabilities

ForeScout SecureConnector is a network security software from ForeScout, Inc. that authenticates machines attempting to join a network. A security vulnerability exists in ForeScout SecureConnector version 11.3.07.0109, which stems from an insecure temporary directory causing an unauthenticated us...

PT-2025-3737

Name of the Vulnerable Software and Affected Versions Forescout SecureConnector version 11.3.07.0109 Description A vulnerability in Forescout SecureConnector allows unauthenticated users to modify compliance scripts due to an insecure temporary directory. This issue enables unauthorized...

PT-2025-2347 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: A CVE record was rejected due to invalidation, as it hasn't been used, adhering to CNA compliance rules. Recommendations: At the moment, there is no information about a newer version th...

PT-2025-2326 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about a specific vulnerability. It appears to be a notification about a rejected CVE record du...

PT-2025-2346 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: The issue concerns a rejected CVE record due to non-compliance with CNA rules, as it was not used. No further details are provided about the nature of the issue or its...

PT-2025-2349 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: The issue concerns a rejected CVE record due to non-compliance with CNA rules, as it has not been utilized. No further details are provided about the nature of the issue or i...