About the security content of iOS 18.6 and iPadOS 18.6

About the security content of iOS 18.6 and iPadOS 18.6 This document describes the security content of iOS 18.6 and iPadOS 18.6. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches ...

CVE-2025-54535

CVE-2025-54535 affects JetBrains TeamCity versions prior to 2025.07, where password reset and email verification tokens were secured with weak hashing algorithms. The available documents describe the affected component and the root cause (weak hash usage for tokens) but do not provide explicit ex...

Fedora: Security Advisory (FEDORA-2025-6a7aa95984)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 4252-1] snapcast security update

Debian LTS Advisory DLA-4252-1 [email protected] https://www.debian.org/lts/security/ Daniel Leidert July 27, 2025 https://wiki.debian.org/LTS Package : snapcast Version : 0.23.0+dfsg1-1+deb11u1 CVE ID : CVE-2023-36177 An RCE vulnerability was found in snapcast, a multi-room client-serv...

[SECURITY] [DLA 4251-1] libxml2 security update

Debian LTS Advisory DLA-4251-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin July 26, 2025 https://wiki.debian.org/LTS Package : libxml2 Version : 2.9.10+dfsg-6.7+deb11u8 CVE ID : CVE-2024-34459 CVE-2025-6021 CVE-2025-6170 CVE-2025-49794 CVE-2025-49796 Debian Bug...

CVE-2025-38420

In the Linux kernel, the following vulnerability has been resolved: wifi: carl9170: do not ping device which has failed to load firmware Syzkaller reports 1, 2 crashes caused by an attempts to ping the device which has failed to load firmware. Since such a device doesn't pass 'ieee80211registerhw...

CVE-2025-34140

creationtimestamp| type| source ---|---|--- 2025-07-23 09:32:06+00:00| seen| https://bsky.app/profile/buherator.bsky.social/post/3lumpkwnnwq2y...

CVE-2025-51481

creationtimestamp| type| source ---|---|--- 2025-07-22 21:48:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3luliaz6au423...

CVE-2025-7371

Okta On-Premises Provisioning OPP agents log certain user data during administrator-initiated password resets. This vulnerability allows an attacker with access to the local servers running OPP agents to retrieve user personal information and temporary passwords created during password reset. You...

Exploit for CVE-2025-34085

📌 CVE-2025-34085 — Simple File List WordPress Plugin RCE 📌...

CVE-2025-7281

CVE-2025-7281 corresponds to IrfanView CADImage Plugin DWG parsing memory corruption leading to remote code execution. The flaw is in DWG file parsing due to insufficient input validation, allowing an attacker to execute code in the process context. This requires user interaction (visiting a mali...

Security Bulletin: Vulnerabilities exists in IBM Netezza Performance Server

Summary Vulnerabilities exist in IBM Netezza Performance Server are addressed in 11.2.3.3-IF1 Vulnerability Details CVEID:CVE-2024-6763 DESCRIPTION: Eclipse Jetty is a lightweight, highly scalable, Java-based web server and Servlet engine . It includes a utility class, HttpURI, for URI/URL parsin...

CVE-2025-43720

Headwind MDM before 5.33.1 makes configuration details accessible to unauthorized users. The Configuration profile is exposed to the Observer user role, revealing the password requires to escape out of the MDM controlled device's profile...

Exploit for CVE-2025-34085

CVE-2025-34085 — WordPress Simple File List Unauthenticated RC...

CVE-2025-7838

creationtimestamp| type| source ---|---|--- 2025-07-19 20:55:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ludtvnqh352i...

CVE-2025-7669

creationtimestamp| type| source ---|---|--- 2025-07-19 06:40:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3luce5aenvm2j...

CVE-2025-6717

creationtimestamp| type| source ---|---|--- 2025-07-18 09:05:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lua3qwinas2t...

CVE-2025-53817

7-Zip is a file archiver with a high compression ratio. 7-Zip supports extracting from Compound Documents. Prior to version 25.0.0, a null pointer dereference in the Compound handler may lead to denial of service. Version 25.0.0 contains a fix cor the issue...

CVE-2025-7472

creationtimestamp| type| source ---|---|--- 2025-07-17 19:03:41+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114870125851359984 2025-07-18 05:43:48+00:00| seen| https://poliverso.org/objects/0477a01e-b4ff51d2-3ebe177d5dcd7fd6...

PT-2025-30119 · Undefined · Undefined

CVE-2024-12498 - CVE-2021-42251: Apache Struts Deserialization Remote Code Execution CVE ID : CVE-2024-12498 Published : July 16, 2025, 11:15 p.m. | 1 hour, 51 minutes ago Description : Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Severity: 0.0 | NA...