Lucene search
+L

17395 matches found

Packet Storm News
Packet Storm News
•added 2025/09/10 12:00 a.m.•14 views

Fluid-Antenna-Aided AAV Secure Communications in Eavesdropper Uncertain Location

For autonomous aerial vehicle AAV secure communications, traditional designs based on fixed position antenna FPA lack sufficient spatial degrees of freedom DoF, which leaves the line-of-sight-dominated AAV links vulnerable to eavesdropping. To overcome this problem, this paper proposes a framewor...

6.8AI score
SaveExploits0
OSV
OSV
•added 2025/09/09 8:15 p.m.•13 views

CVE-2025-54255

Acrobat Reader versions 24.001.30254, 20.005.30774, 25.001.20672 and earlier are affected by a Violation of Secure Design Principles vulnerability that could result in a security feature bypass impacting integrity. An attacker does not have to be authenticated. Exploitation of this issue does not...

4CVSS5.8AI score0.00266EPSS
SaveExploits0References1
NVD
NVD
•added 2025/09/09 8:15 p.m.•12 views

CVE-2025-54255

Acrobat Reader versions 24.001.30254, 20.005.30774, 25.001.20672 and earlier are affected by a Violation of Secure Design Principles vulnerability that could result in a security feature bypass impacting integrity. An attacker does not have to be authenticated. Exploitation of this issue does not...

4CVSS0.00266EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/09/09 8:10 p.m.•7 views

CVE-2025-54255 Acrobat Reader | Violation of Secure Design Principles (CWE-657)

Acrobat Reader versions 24.001.30254, 20.005.30774, 25.001.20672 and earlier are affected by a Violation of Secure Design Principles vulnerability that could result in a security feature bypass impacting integrity. An attacker does not have to be authenticated. Exploitation of this issue does not...

4CVSS5.8AI score0.00266EPSS
SaveExploits0References1
CVE
CVE
•added 2025/09/09 8:10 p.m.•95 views

CVE-2025-54255

Adobe Acrobat Reader is affected by CVE-2025-54255 (Violation of Secure Design Principles) in versions 24.001.30254, 20.005.30774, 25.001.20672 and earlier. The issue could bypass an integrity-related security feature and does not require authentication or user interaction; the impact is limited ...

4CVSS5.8AI score0.00266EPSS
SaveExploits0References1Affected Software3
Cvelist
Cvelist
•added 2025/09/09 8:10 p.m.•47 views

CVE-2025-54255 Acrobat Reader | Violation of Secure Design Principles (CWE-657)

Acrobat Reader versions 24.001.30254, 20.005.30774, 25.001.20672 and earlier are affected by a Violation of Secure Design Principles vulnerability that could result in a security feature bypass impacting integrity. An attacker does not have to be authenticated. Exploitation of this issue does not...

4CVSS0.00266EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/09/09 12:00 a.m.•9 views

PT-2025-36949

Name of the Vulnerable Software and Affected Versions: Acrobat Reader versions 24.001.30254 and earlier Acrobat Reader version 20.005.30774 Acrobat Reader version 25.001.20672 Description: Acrobat Reader is susceptible to a security issue related to a Violation of Secure Design Principles...

4CVSS6AI score0.00266EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2025/09/09 12:00 a.m.•11 views

The vulnerability of the Drawing SDK, a software development tool for engineering applications, arises from the possibility of operations going beyond buffer boundaries in memory. This allows attackers to execute arbitrary code or cause system failures.

The vulnerability of the Drawing SDK, a software development tool for engineering applications, is related to the execution of operations beyond the buffer boundaries in memory when processing DWF files. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause servic...

8.2CVSS6.4AI score0.00193EPSS
SaveExploits0References2Affected Software1
GithubExploit
GithubExploit
•added 2025/09/08 9:03 p.m.•257 views

Exploit for Deserialization of Untrusted Data in Apache Activemq

Project-Vuln-Detection-N-Mitigation101 Apache ActiveMQ D...

10CVSS9.1AI score0.99891EPSS
SaveExploits33
Packet Storm News
Packet Storm News
•added 2025/09/06 12:00 a.m.•14 views

Wrangling Entropy: Next-Generation Multi-Factor Key Derivation, Credential Hashing, and Credential Generation Functions

The Multi-Factor Key Derivation Function MFKDF offered a novel solution to the classic problem of usable client-side key management by incorporating multiple popular authentication factors into a key derivation process, but was later shown to be vulnerable to cryptanalysis that degraded its...

7.3AI score
SaveExploits0
OSV
OSV
•added 2025/09/05 5:10 p.m.•6 views

MAL-2025-45737 Malicious code in radioastronomy-node-config-antd-selenium (npm)

The package radioastronomy-node-config-antd-selenium was found to contain malicious code...

7AI score
SaveExploits0
OSV
OSV
•added 2025/09/05 5:10 p.m.•7 views

MAL-2025-45498 Malicious code in paleobotany-multiverse-jasmine-antd (npm)

The package paleobotany-multiverse-jasmine-antd was found to contain malicious code...

7AI score
SaveExploits0
Patchstack
Patchstack
•added 2025/09/05 1:32 p.m.•8 views

WordPress Bonus for Woo plugin <= 7.6.6 - Other Vulnerability Type vulnerability

Other Vulnerability Type vulnerability discovered by Martino Spagnuolo r3verii in WordPress Plugin Bonus for Woo versions = 7.6.6...

5.3CVSS5.4AI score0.00288EPSS
SaveExploits0Affected Software1
OSV
OSV
•added 2025/09/05 11:09 a.m.•23 views

OESA-2025-2124 krb5 security update

Kerberos is a network authentication protocol. It is designed to provide strong authentication for client/server applications by using secret-key cryptography. Security Fixes: A vulnerability in the MIT Kerberos implementation allows GSSAPI-protected messages using RC4-HMAC-MD5 to be spoofed due ...

5.9CVSS7AI score0.00345EPSS
SaveExploits0References2
Packet Storm News
Packet Storm News
•added 2025/09/05 12:00 a.m.•13 views

Bi-Level Game-Theoretic Planning of Cyber Deception for Cognitive Arbitrage

Cognitive vulnerabilities shape human decision-making and arise primarily from two sources: 1 cognitive capabilities, which include disparities in knowledge, education, expertise, or access to information, and 2 cognitive biases, such as rational inattention, confirmation bias, and base rate...

7.6AI score
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2025/09/04 1:36 p.m.•14 views

sfc: fix NULL dereferences in ef100_process_design_param()

...

5.5CVSS6.8AI score0.00272EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2025/09/03 10:08 p.m.•11 views

ASoC: SOF: ipc4-topology: Harden loops for looking up ALH copiers

...

7.8CVSS7AI score0.00202EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2025/09/01 12:00 a.m.•7 views

Linux Distros Unpatched Vulnerability : CVE-2025-48946

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms. liboqs prior to version 0.13.0 supports the...

3.7CVSS5.8AI score0.00238EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/08/30 6:18 p.m.•13 views

CVE-2025-54731

Improper Control of Generation of Code 'Code Injection' vulnerability in emarket-design YouTube Showcase youtube-showcase allows Object Injection.This issue affects YouTube Showcase: from n/a through = 3.5.1...

8.1CVSS5.9AI score0.00307EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/08/30 6:17 p.m.•8 views

CVE-2025-53572

Deserialization of Untrusted Data vulnerability in emarket-design WP Easy Contact wp-easy-contact allows Object Injection.This issue affects WP Easy Contact: from n/a through = 4.0.1...

8.1CVSS5.9AI score0.00325EPSS
SaveExploits0References1
Rows per page
Query Builder