CVE-2025-55299 VaulTLS has a password-based login exploit in additional user accounts

VaulTLS is a modern solution for managing mTLS mutual TLS certificates. Prior to 0.9.1, user accounts created through the User web UI have an empty but not NULL password set, attackers can use this to login with an empty password. This is combined with that fact, that previously disabling the...

CVE-2025-31714

In Developer Tools, there is a possible missing verification incorrect input. This could lead to local escalation of privilege with no additional execution privileges needed...

CVE-2025-31714

In Developer Tools, there is a possible missing verification incorrect input. This could lead to local escalation of privilege with no additional execution privileges needed...

Addressing Side-Channel Threats in Quantum Key Distribution Via Deep Anomaly Detection

Traditional countermeasures against security side channels in quantum key distribution QKD systems often suffer from poor compatibility with deployed infrastructure, the risk of introducing new vulnerabilities, and limited applicability to specific types of attacks. In this work, we propose an...

Linux Distros Unpatched Vulnerability : CVE-2021-40085

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in OpenStack Neutron before 16.4.1, 17.x before 17.2.1, and 18.x before 18.1.1. Authenticated attackers can reconfigure dnsmasq via a...

Huawei HarmonyOS and EMUI Resource Read Vulnerability

Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scene distributed operating system based on a microkernel.Huawei EMUI is an emotional operating system developed by Huawei based on Android Android. A resource read vulnerability exists in Huawei HarmonyOS...

Linux Distros Unpatched Vulnerability : CVE-2021-20329

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Specific cstrings input may not be properly validated in the MongoDB Go Driver when marshalling Go objects into BSON. A malicious user could use a Go object wit...

CVE-2025-8891

The OceanWP theme for WordPress is vulnerable to Cross-Site Request Forgery in versions 4.0.9 to 4.1.1. This is due to missing or incorrect nonce validation on the oceanwpnoticebuttonclick function. This makes it possible for unauthenticated attackers to install the Ocean Extra plugin via a forge...

MAL-2025-9997 Malicious code in @zalastax/nolb-_extra (npm)

The package @zalastax/nolb-extra was found to contain malicious code...

MAL-2025-15914 Malicious code in bnrn-extra (npm)

The package bnrn-extra was found to contain malicious code...

Malicious code in test-mlw2-extra-varas-dilly-merge (npm)

The package test-mlw2-extra-varas-dilly-merge was found to contain malicious code...

MAL-2025-35305 Malicious code in test-mlw2-extra-varas-dilly-merge (npm)

The package test-mlw2-extra-varas-dilly-merge was found to contain malicious code...

Malicious code in src-rn-extra (npm)

The package src-rn-extra was found to contain malicious code...

Malicious code in eyeos-extra (npm)

The package eyeos-extra was found to contain malicious code...

Malicious code in bnrn-extra (npm)

The package bnrn-extra was found to contain malicious code...

MAL-2025-20112 Malicious code in eyeos-extra (npm)

The package eyeos-extra was found to contain malicious code...

MAL-2025-33860 Malicious code in src-rn-extra (npm)

The package src-rn-extra was found to contain malicious code...

CVE-2025-25006

Improper handling of additional special element in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network...

CVE-2025-8891

The OceanWP theme for WordPress is vulnerable to Cross-Site Request Forgery in versions 4.0.9 to 4.1.1. This is due to missing or incorrect nonce validation on the oceanwpnoticebuttonclick function. This makes it possible for unauthenticated attackers to install the Ocean Extra plugin via a forge...

CVE-2025-8891

The OceanWP theme for WordPress is vulnerable to Cross-Site Request Forgery in versions 4.0.9 to 4.1.1. This is due to missing or incorrect nonce validation on the oceanwpnoticebuttonclick function. This makes it possible for unauthenticated attackers to install the Ocean Extra plugin via a forge...