16627 matches found
CISA and NSA Issue Urgent Guidance to Secure WSUS and Microsoft Exchange Servers
The U.S. Cybersecurity and Infrastructure Security Agency CISA and National Security Agency NSA, along with international partners from Australia and Canada, have released guidance to harden on-premise Microsoft Exchange Server instances from potential exploitation. "By restricting administrative...
SUSE SLES12 Security Update : chrony (SUSE-SU-2025:3868-1)
The remote SUSE Linux SLES12 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2025:3868-1 advisory. Security issues fixed: - Race condition during socket creation by chronyc allows privilege escalation from user chrony to root bsc1246544. Other issues...
CVE-2025-63423
creationtimestamp| type| source ---|---|--- 2025-10-30 19:56:49+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115464877431743690...
GHSA-29XP-372Q-XQPH
creationtimestamp| type| source ---|---|--- 2025-10-30 18:04:26+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115464435491893188...
GHSA-W6C3-PXVR-6M6J
creationtimestamp| type| source ---|---|--- 2025-10-30 17:24:43+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115464279319296932 2026-01-10 00:04:56+00:00| published-proof-of-concept| Telegram/ylcODQd3Ghku3NxDdtmMfOkVOnWhDQ3Q3s4y1swSp7-7I...
GHSA-6GHX-6VPV-3WG7
creationtimestamp| type| source ---|---|--- 2025-10-30 16:29:13+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115464061089942098...
CVE-2025-5347
Zohocorp ManageEngine Exchange Reporter Plus versions before 5723 are vulnerable to Stored Cross Site Scripting in the reports module...
CVE-2025-5343
Zohocorp ManageEngine Exchange Reporter Plus versions through 5721 are vulnerable to Stored Cross Site Scripting in the Instant Search option...
CVE-2025-5347
Zohocorp ManageEngine Exchange Reporter Plus versions before 5723 are vulnerable to Stored Cross Site Scripting in the reports module...
CVE-2025-5343
Zohocorp ManageEngine Exchange Reporter Plus versions through 5721 are vulnerable to Stored Cross Site Scripting in the Instant Search option...
CVE-2025-5342
Zohocorp ManageEngine Exchange Reporter Plus through 5721 are vulnerable to ReDOS vulnerability in the search module...
CVE-2025-5342
Zohocorp ManageEngine Exchange Reporter Plus through 5721 are vulnerable to ReDOS vulnerability in the search module...
EUVD-2025-37002
Zohocorp ManageEngine Exchange Reporter Plus versions before 5723 are vulnerable to Stored Cross Site Scripting in the reports module...
CVE-2025-5347 Stored XSS
Zohocorp ManageEngine Exchange Reporter Plus versions before 5723 are vulnerable to Stored Cross Site Scripting in the reports module...
CVE-2025-5347
CVE-2025-5347 affects Zohocorp ManageEngine Exchange Reporter Plus before version 5723. The vulnerability is a Stored Cross-Site Scripting flaw in the reports module, allowing injected scripts to be stored on the server and executed when users view affected reports. According to the connected adv...
CVE-2025-5347 Stored XSS
Zohocorp ManageEngine Exchange Reporter Plus versions before 5723 are vulnerable to Stored Cross Site Scripting in the reports module...
CVE-2025-5343
CVE-2025-5343 concerns ManageEngine Exchange Reporter Plus, affected up to version 5721. The vulnerability is a Stored Cross-Site Scripting (XSS) flaw in the Instant Search feature, allowing an attacker to inject scripts that are stored on the server and executed when other users access the affec...
CVE-2025-5343 Stored XSS
Zohocorp ManageEngine Exchange Reporter Plus versions through 5721 are vulnerable to Stored Cross Site Scripting in the Instant Search option...