4949 matches found
SEC Drops SolarWinds Case After Years of High-Stakes Cybersecurity Scrutiny
The U.S. Securities and Exchange Commission SEC has abandoned its lawsuit against SolarWinds and its chief information security officer, alleging that the company had misled investors about the security practices that led to the 2020 supply chain attack. In a joint motion filed November 20, 2025,...
CVE-2025-55124
Improper neutralisation of input in Revive Adserver 6.0.0+ causes a reflected XSS attack in the banner-zone.php script...
TencentOS Server 4: tomcat (TSSA-2025:0440)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0440 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...
EUVD-2025-198189
Twonky Server 8.5.2 on Linux and Windows is vulnerable to an access control flaw. An unauthenticated attacker can bypass web service API authentication controls to leak a log file and read the administrator's username and encrypted password...
EUVD-2025-198192
A vulnerability was detected in Tenda CH22 1.0.0.1. Affected is the function formWrlExtraGet of the file /goform/WrlExtraGet. Performing manipulation of the argument chkHz results in buffer overflow. Remote exploitation of the attack is possible. The exploit is now public and may be used...
Veeam Backup & Replication 13.0.1 In-Place Upgrade Version Requirement
Challenge When attempting to upgrade an existing Veeam Backup & Replication deployment to version 13, the installer displays a message stating: Unable to upgrade Veeam Backup & Replication: you can upgrade from version 12.3.1.1139 or later only. Solution Before attempting an in-place upgrade to...
Average Hardness of SIVP for Module Lattices of Fixed Rank
The problem of finding short vectors in Euclidean lattices is a central hard problem in complexity theory. The case of module lattices i.e., lattices which are also modules over a number ring is of particular interest for cryptography and computational number theory. The hardness of finding short...
EUVD-2025-197705
A security flaw has been discovered in FantasticLBP Hotels Server up to 67b44df162fab26df209bd5d5d542875fcbec1d0. The impacted element is an unknown function of the file controller/api/hotelList.php. The manipulation of the argument subjectId/cityName results in sql injection. The attack can be...
Updated python-flask-cors packages fix security vulnerabilities
Log Injection Vulnerability in corydolphin/flask-cors. CVE-2024-1681 Improper Access Control in corydolphin/flask-cors. CVE-2024-6221 Improper Regex Path Matching in corydolphin/flask-cors. CVE-2024-6839 Inconsistent CORS Matching Due to Handling of '+' in URL Path in corydolphin/flask-cors...
CVE-2025-63892
creationtimestamp| type| source ---|---|--- 2025-11-13 08:35:54+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/59514 2025-11-13 15:00:08+00:00| published-proof-of-concept| Telegram/d8wD4nyiI6OV0OXzhOtZYCLbRAqpkWgPekubzfScCoXm1wI 2025-11-18 17:49:45+00:00| seen|...
EUVD-2025-177879
Malicious code in metabolomics-octans-soap-membrane npm...
EUVD-2025-179535
Malicious code in cosmochemistry-less-enceladus-eigenstate npm...
EUVD-2025-178264
Malicious code in joviology-mocha-cluster-redshift npm...
EUVD-2025-177153
Malicious code in pipe-orogeny-await-kaus npm...
EUVD-2025-178357
Malicious code in io-quark-babel-centaurus npm...
EUVD-2025-177257
Malicious code in perseus-global-meissa-terser-webpack-plugin npm...
EUVD-2025-176887
Malicious code in pyxis-blueshift-metalsmith-enceladus npm...
EUVD-2025-178106
Malicious code in library-capella-tectonic-child-process npm...