155 matches found
EUVD-2026-0767
A vulnerability in Nuvation Energy nCloud VPN Service allowed Network Boundary Bridging.This issue affected the nCloud VPN Service and was fixed on 2025-12-1 December, 2025. End users do not have to take any action to mitigate the issue...
CVE-2025-64125
Observation: CVE-2025-64125 affects Nuvation Energy nCloud VPN Service and enables Network Boundary Bridging. The issue is confirmed in multiple feeds (NVD/Red Hat) and is fixed as of 2025-12-01; end users did not need to take mitigation action. The available metrics indicate a high-severity impa...
Everest Ransomware Leaks 1TB of Stolen ASUS Data
On December 2, 2025, Hackread.com exclusively reported that the Everest ransomware group claimed to have stolen 1TB of…...
EmEditor Homepage Download Button Served Malware for 4 Days
Warning for EmEditor users: A third-party breach tampered with the official download link between Dec 19–22, 2025. Learn how to identify the fake installer and protect your data from infostealer malware...
WordPress HR Management Lite plugin <= 3.6 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by benzdeus in WordPress Plugin HR Management Lite versions = 3.6...
CVE-2021-47735
creationtimestamp| type| source ---|---|--- 2025-12-23 20:45:34+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3maomk2i3or2g 2025-12-23 21:41:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3maopo6bzwv2x...
PT-2025-52442
Name of the Vulnerable Software and Affected Versions Restajet Information Technologies Inc. Online Food Delivery System versions through 19122025 Description A Cross-Site Request Forgery CSRF issue exists in Restajet Information Technologies Inc. Online Food Delivery System. This allows an...
December 18, 2025—KB5074975 (OS Build 17763.8148) Out-of-band
None None...
Security Updates for Microsoft Windows Admin Center (December 2025)
The The Microsoft Windows Admin Center installed on the remote host is missing a security update. It is, therefore, affected by the following vulnerability: - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2025-64669 Note that Nessus has not...
CVE-2025-10738
creationtimestamp| type| source ---|---|--- 2025-12-13 07:03:22+00:00| seen| https://infosec.exchange/users/offseq/statuses/115710977696604993 2025-12-13 07:03:23+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m7tzwnt5rw2g 2025-12-13 11:25:30+00:00| seen|...
CISA Software Acquisition Guide Supplier Response Web Tool 安全漏洞
CISA Software Acquisition Guide Supplier Response Web Tool is an interactive Web tool from the CISA organization in the United States. A security vulnerability exists in versions of the CISA Software Acquisition Guide Supplier Response Web Tool prior to 2025-12-11, which stems from a cross-site...
CVE-2025-55816
HotelDruid v3.0.7 and before is vulnerable to Cross Site Scripting XSS in the /modificaapp.php file...
CVE-2025-67713
Miniflux 2 is an open source feed reader. Versions 2.2.14 and below treat redirecturl as safe when url.Parse....IsAbs is false, enabling phishing flows after login. Protocol-relative URLs like //ikotaslabs.com have an empty scheme and pass that check, allowing post-login redirects to...
Security Updates for Microsoft Excel Products C2R (December 2025)
The Microsoft Excel Products are missing a security update. It is, therefore, affected by the following vulnerabilities: - Multiple remote code execution vulnerabilities that attackers can exploit to bypass authentication and execute unauthorized arbitrary commands. CVE-2025-62553, CVE-2025-62556...
Microsoft Office 365 (2016 Click-to-Run) Multiple Vulnerabilities (Dec 2025)
This host is missing a critical security update according to Microsoft Office Click-to-Run update December 2025. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
PT-2025-50932
CVE-2025-67612 - Apache HTTP Server Cross-Site Scripting CVE ID : CVE-2025-67612 Published : Dec. 10, 2025, 4:15 a.m. | 49 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...
Security Updates for Microsoft Exchange Server (December 2025)
The Microsoft Exchange Server installed on the remote host is missing a security update. It is, therefore, affected by multiple vulnerabilities as referenced in the December, 2025 security bulletin. - Improper input validation in Microsoft Exchange Server allows an authorized attacker to elevate...
Microsoft and Adobe Patch Tuesday, December 2025 Security Update Review
As the year winds down, Microsoft Patch Tuesday in December arrives with essential fixes and enhancements to close vulnerabilities and boost performance. Here's a quick breakdown of what you need to know. Microsoft Patch Tuesday for December 2025 This month's release addresses 72 vulnerabilities,...
