Lucene search
+L

14817 matches found

BDU FSTEC
BDU FSTEC
•added 2025/12/24 12:00 a.m.•24 views

SAP NetWeaver Internet Communication Manager Web Dispatcher Data Compromise

The vulnerability of the SAP NetWeaver Internet Communication Manager and SAP Web Dispatcher web applications is related to deficiencies in the mechanism for assigning internal resources with access levels for debugging purposes. Exploiting this vulnerability can allow attackers to compromise the...

8.2CVSS6.9AI score0.00359EPSS
SaveExploits0References2Affected Software1
Wallarm Lab
Wallarm Lab
•added 2025/12/23 7:55 a.m.•28 views

From Agent2Agent Prompt Injection to Runtime Self-Defense: How Wallarm Redefines Agentic AI Security

Is an AI-to-AI attack scenario a science fiction possibility only for blockbusters like the Terminator series of movies? Well, maybe not! Researchers recently discovered that one AI agent can “inject malicious instructions into a conversation, hiding them among otherwise benign client requests an...

6.9AI score
SaveExploits0
CNNVD
CNNVD
•added 2025/12/23 12:00 a.m.•20 views

Fast-DDS security vulnerabilities

Fast-DDS is a complete DDS open source by eProsima. A security vulnerability exists in Fast-DDS version 3.3 that stems from improper ticket revocation validation and could lead to insecure communication...

10CVSS5.8AI score0.00306EPSS
SaveExploits0References5
osv_mal
osv_mal
•added 2025/12/20 8:35 p.m.•15 views

MAL-2025-192682 Malicious code in @nosinovacao/nosid-mfe-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f49ca2c72725bef26372372dfae65145d32d2d69179865156de7a930c88853d The package @nosinovacao/nosid-mfe-common was found to contain malicious code. Source: ghsa-malware...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/12/20 8:20 a.m.•16 views

Malicious code in escaux-scrumboard-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2d3a9c35af8fd074327c2b67262963aa30c1d92abbee4132456ef354f51140e The package escaux-scrumboard-api was found to contain malicious code. Source: ossf-package-analysis...

6.9AI score
SaveExploits0
hivepro
hivepro
•added 2025/12/19 5:08 p.m.•27 views

How Threat Intelligence Transforms Vulnerability Management

Your security team isn't just fixing technical flaws; they're protecting the business from tangible risks. The problem is, a list of thousands of CVEs doesn't communicate business impact very well. It’s just noise until you can connect a vulnerability to a potential outcome. Threat intelligence...

6.9AI score
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/12/19 5:30 a.m.•28 views

CVE-2025-47319

Information disclosure while exposing internal TA-to-TA communication APIs to HLOS...

6.7CVSS6.7AI score0.00094EPSS
SaveExploits0References1
NVD
NVD
•added 2025/12/18 9:15 p.m.•22 views

CVE-2025-53710

Due to a product misconfiguration in certain deployment types, it was possible from different pods in the same namespace to communicate with each other. This issue resulted in bypass of access control due to the presence of a vulnerable endpoint in Foundry Container Service that executed...

7.5CVSS0.00276EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/12/18 9:05 p.m.•55 views

CVE-2025-53710 Network boundaries not respected in certain Foundry namespaces.

Due to a product misconfiguration in certain deployment types, it was possible from different pods in the same namespace to communicate with each other. This issue resulted in bypass of access control due to the presence of a vulnerable endpoint in Foundry Container Service that executed...

7.5CVSS0.00276EPSS
SaveExploits0References1
CVE
CVE
•added 2025/12/18 9:05 p.m.•48 views

CVE-2025-53710

CVE-2025-53710 affects Palantir Foundry Container Service. A product misconfiguration in certain deployment types allowed communication between different pods in the same namespace, bypassing access control via a vulnerable endpoint that executes user-controlled commands locally. Documented impac...

7.5CVSS5.7AI score0.00276EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/12/18 12:40 p.m.•24 views

CVE-2025-61736

Successful exploitation of this vulnerability could result in the product failing to re-establish communication once the certificate expires...

7.1CVSS6.8AI score0.00105EPSS
SaveExploits0References1
NVD
NVD
•added 2025/12/18 6:15 a.m.•25 views

CVE-2025-47319

Information disclosure while exposing internal TA-to-TA communication APIs to HLOS...

6.7CVSS0.00094EPSS
SaveExploits0References1
CVE
CVE
•added 2025/12/18 5:28 a.m.•85 views

CVE-2025-47319

CVE-2025-47319 describes information disclosure in Qualcomm embedded platform firmware caused by exposing internal TA-to-TA (Trusted Application to Trusted Application) communication APIs to HLOS (Host Linux Operating System). The CVE indicates a LOCAL attack vector with HIGH privileges required ...

6.7CVSS6.8AI score0.00094EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
•added 2025/12/18 5:28 a.m.•24 views

EUVD-2025-204032

Information disclosure while exposing internal TA-to-TA communication APIs to HLOS...

6.7CVSS6.2AI score0.00094EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/12/18 5:28 a.m.•16 views

CVE-2025-47319 Exposure of Sensitive System Information to an Unauthorized Control Sphere in HLOS

Information disclosure while exposing internal TA-to-TA communication APIs to HLOS...

6.7CVSS6.8AI score0.00094EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/18 12:00 a.m.•11 views

CVE-2025-47319: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Information disclosure while exposing internal TA-to-TA communication APIs to HLOS...

6.7CVSS6.8AI score0.00094EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/12/18 12:00 a.m.•28 views

PT-2025-52350

Name of the Vulnerable Software and Affected Versions Foundry Container Service affected versions not specified Description A product misconfiguration in certain deployment types allowed communication between different pods within the same namespace. This resulted in a bypass of access control du...

7.5CVSS6.7AI score0.00276EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/12/17 3:34 p.m.•22 views

EUVD-2025-203896

Successful exploitation of this vulnerability could result in the product failing to re-establish communication once the certificate expires...

7.1CVSS6.3AI score0.00105EPSS
SaveExploits0References3
NVD
NVD
•added 2025/12/17 1:15 p.m.•20 views

CVE-2025-61736

Successful exploitation of this vulnerability could result in the product failing to re-establish communication once the certificate expires...

7.1CVSS0.00105EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/12/17 12:36 p.m.•60 views

CVE-2025-61736 iSTAR- Improper Validation of Certificate Expiration

Successful exploitation of this vulnerability could result in the product failing to re-establish communication once the certificate expires...

7.1CVSS0.00105EPSS
SaveExploits0References2
Rows per page
Query Builder