6993 matches found
CVE-2025-4948
CVE-2025-4948 affects the libsoup HTTP library (soup_multipart_new_from_message), causing an integer underflow when processing crafted multipart messages. Concrete details from connected advisories show the flaw can crash apps/servers using libsoup, enabling DoS. Confirmed by multiple vendors: De...
Important: compat-openssl11 security update
The OpenSSL toolkit provides support for secure communications between machines. This version of OpenSSL package contains only the libraries from the 1.1.1 version and is provided for compatibility with previous releases. Security Fixes: openssl: X.400 address type confusion in X.509 GeneralName...
Simultaneously Exposing and Jamming Covert Communications Via Disco Reconfigurable Intelligent Surfaces
Covert communications provide a stronger privacy protection than cryptography and physical-layer security PLS. However, previous works on covert communications have implicitly assumed the validity of channel reciprocity, i.e., wireless channels remain constant or approximately constant during the...
MAL-2025-3865 Malicious code in mfe-react-bridge (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f7835d0f6b232544302030371ac74d4c595860a04736a2ef54259a32993f9c8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
The vulnerability of Elber Communications Equipment’s software products lies in their ability to bypass the authentication process by using an alternative path or channel. This allows attackers to circumvent the authentication procedures.
The vulnerability of Elber Communications Equipment’ software products relates to bypassing the authentication process by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to circumvent the authentication process and re-register user credentials...
Machine Learning-Based Detection of DDoS Attacks in VANETs for Emergency Vehicle Communication
Vehicular Ad Hoc Networks VANETs play a key role in Intelligent Transportation Systems ITS, particularly in enabling real-time communication for emergency vehicles. However, Distributed Denial of Service DDoS attacks, which interfere with safety-critical communication channels, can severely impai...
Malicious code in ace-tools (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
The vulnerability of the IBM Personal Communications terminal emulator arises from the possibility of writing operations outside of the buffer in memory, allowing an attacker to exploit their privileges.
The vulnerability of the IBM Personal Communications terminal emulator relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...
PT-2025-20381 · Telemessage · Telemessage Archiving Backend +1
Name of the Vulnerable Software and Affected Versions: TeleMessage versions prior to 2025-05-05 Description: The TeleMessage archiving backend holds cleartext copies of messages from TM SGNL aka Archive Signal app users, which is different functionality than described in the TeleMessage "End-to-E...
The Trump Administration Sure Is Having Trouble Keeping Its Comms Private
In the wake of SignalGate, a knockoff version of Signal used by a high-ranking member of the Trump administration was hacked. Today on Uncanny Valley, we discuss the platforms used for government communications...
Unauthorized Access Vulnerability in NetDrive Unified Communications Platform of Beijing NetDrive Network Technology Co.
NetDrive Unified Communications Platform is a comprehensive communications platform designed to enhance users' communication efficiency and convenience and provide a unified communications environment. An unauthorized access vulnerability exists in NetDrive Unified Communications Platform of...
Unauthorized Access Vulnerability in NetDrive Unified Communications Platform of Beijing NetDrive Network Technology Co.
NetDrive Unified Communications Platform is a comprehensive communications platform designed to enhance users' communication efficiency and convenience and provide a unified communications environment. An unauthorized access vulnerability exists in the NetDrive Unified Communications Platform of...
Risk Assessment and Threat Modeling for Safe Autonomous Driving Technology
This research paper delves into the field of autonomous vehicle technology, examining the vulnerabilities inherent in each component of these transformative vehicles. Autonomous vehicles AVs are revolutionizing transportation by seamlessly integrating advanced functionalities such as sensing,...
MAL-2025-3576 Malicious code in adobe-io-events (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 96f150232693e090d60954bb70dd3a03535edeceb5d77cc30a30914454396963 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MintsLoader Drops GhostWeaver via Phishing, ClickFix — Uses DGA, TLS for Stealth Attacks
The malware loader known as MintsLoader has been used to deliver a PowerShell-based remote access trojan called GhostWeaver. "MintsLoader operates through a multi-stage infection chain involving obfuscated JavaScript and PowerShell scripts," Recorded Future's Insikt Group said in a report shared...
MAL-2025-3566 Malicious code in lezer-snowsql (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 79d686dc87e1e046c8091bd313f15cba6ccc513fa0effa19a8798c4d23e066c5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2025-3200
An unauthenticated remote attacker could exploit the used, insecure TLS 1.0 and TLS 1.1 protocols to intercept and manipulate encrypted communications between the Com-Server and connected systems...
CVE-2025-23181 Ribbon Communications - CWE-250: Execution with Unnecessary Privileges
CWE-250: Execution with Unnecessary Privileges...
CVE-2025-23181
CVE-2025-23181 affects Ribbon Communications Apollo 9608 SBC; root cause is an unnecessary privileged operation in v9.6R3, enabling Execution with Unnecessary Privileges. CVSS 3.1 base score 8.0 (HIGH) with Adjacent attack vector, Low attack complexity, Low privileges required, no user interactio...
