Adobe Commerce Security Bypass Vulnerability (CNVD-2025-03630)

Adobe Commerce is the United States of America Odobie Adobe company's a business and brand-oriented global leader in digital commerce solutions. A security bypass vulnerability exists in Adobe Commerce, which can be exploited by an attacker to cause a security feature bypass...

PT-2025-6915

Name of the Vulnerable Software and Affected Versions: Keycloak affected versions not specified Description: A flaw was found in the Keycloak organization feature, which allows the incorrect assignment of an organization to a user if their username or email matches the organization’s domain...

CVE-2025-21401

Microsoft Edge Chromium-based Security Feature Bypass Vulnerability...

Android's New Feature Blocks Fraudsters from Sideloading Apps During Calls

Google is working on a new security feature for Android that blocks device owners from changing sensitive settings when a phone call is in progress. Specifically, the in-call anti-scammer protections include preventing users from turning on settings to install apps from unknown sources and granti...

CVE-2025-21401

Microsoft Edge Chromium-based Security Feature Bypass Vulnerability...

CVE-2025-21401

Microsoft Edge Chromium-based Security Feature Bypass Vulnerability...

CVE-2025-21401: URL Redirection to Untrusted Site

Microsoft Edge Chromium-based Security Feature Bypass Vulnerability...

PT-2025-6942 · Joomla · Js Jobs

Name of the Vulnerable Software and Affected Versions: JS Jobs plugin versions 1.1.5 through 1.4.3 for Joomla Description: A SQL injection issue allows authenticated attackers, with administrator privileges, to execute arbitrary SQL commands via the searchpaymentstatus parameter in the Employer...

CVE-2025-21401 Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

...

CVE-2025-21401

Microsoft Edge (Chromium-based) Security Feature Bypass (CVE-2025-21401) is corroborated by connected sources indicating affected versions prior to 133.0.3065.69 and a security feature bypass issue. The Nessus entry specifies the vulnerability as present in Edge versions before 133.0.3065.69 and ...

CVE-2025-21401 Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

...

Metasploit Weekly Wrap-Up 02/14/2025

New module content 2 Unauthenticated RCE in NetAlertX Authors: Chebuya Rhino Security Labs and Takahiro Yokoyama Type: Exploit Pull request: 19868 contributed by Takahiro-Yoko Path: linux/http/netalertxrcecve202446506 AttackerKB reference: CVE-2024-46506 Description: A new module for an...

CVE-2023-39508

Execution with Unnecessary Privileges, : Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Software Foundation Apache Airflow.The "Run Task" feature enables authenticated user to bypass some of the restrictions put in place. It allows to execute code in the...

CVE-2025-24429

Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass allowing read only access. A low-privileged attacker could leverage this vulnerability to bypass securi...

CVE-2025-24430

Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a Time-of-check Time-of-use TOCTOU Race Condition vulnerability that could result in a security feature bypass. An attacker could exploit this race condition to alter a condition after it has...

CVE-2025-0426

A flaw was found in Kubernetes. A large number of container checkpoint requests made to the unauthenticated kubelet read-only HTTP endpoint may fill the Node's disk, potentially leading to a Node denial of service. Mitigation To mitigate this vulnerability, disable the kubelet read-only port by...

Microsoft Office Security Feature Bypass Vulnerability (CNVD-2025-04196)

Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. The product's common components include Word, Excel, Access, Powerpoint, FrontPage, etc.. A security feature bypass vulnerability exists in Microsoft Office, which can be exploited by attackers to...

Security Updates for Microsoft Office Products C2R (February 2025)

The Microsoft Office Products are missing a security update. It is, therefore, affected by the following vulnerabilities: - Microsoft Office is affected by a remote code execution vulnerability. CVE-2025-21392, CVE-2025-21365 - Microsoft Office is affected by a security feature bypass...

Security Updates for Microsoft Excel Products C2R (February 2025)

The Microsoft Excel Products are missing a security update. It is, therefore, affected by the following vulnerabilities: - Microsoft Office is affected by a remote code execution vulnerability. CVE-2025-21354, CVE-2025-21362, CVE-2025-21394, CVE-2025-21386, CVE-2025-21390, CVE-2025-21387,...

Microsoft Edge (Chromium) < 133.0.3065.69 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 133.0.3065.69. It is, therefore, affected by multiple vulnerabilities as referenced in the February 14, 2025 advisory. - Microsoft Edge Chromium-based Security Feature Bypass Vulnerability CVE-2025-21401 - Use after fr...