392 matches found
CERTFR-2025-ACT-032
creationtimestamp| type| source ---|---|--- 2025-08-04 12:46:14+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3lvl7z56ibm26 2025-08-04 16:38:31+00:00| seen| https://bsky.app/profile/infosecfr.skyfleet.blue/post/3lvlmyiagdq2c...
GHSA-VMQ6-5M68-F53M
creationtimestamp| type| source ---|---|--- 2025-07-16 03:20:51+00:00| seen| https://gist.github.com/safer-bot/4a0c1681f4dce611ef9b2d8ad2491ce6 2025-07-16 03:41:01+00:00| seen| https://gist.github.com/safer-bot/1311a1d6fbeee3ebfc44b603cc3c1e8e 2025-07-16 03:46:52+00:00| seen|...
DEBIAN-CVE-2025-38230
In the Linux kernel, the following vulnerability has been resolved: jfs: validate AG parameters in dbMount to prevent crashes Validate dbagheight, dbagwidth, and dbagstart in dbMount to catch corrupted metadata early and avoid undefined behavior in dbAllocAG. Limits are derived from L2LPERCTL,...
Androxgh0st Botnet Expands Reach, Exploiting US University Servers
New CloudSEK findings show Androxgh0st botnet evolving. Academic institutions, including UC San Diego, hit. Discover how this sophisticated…...
Characterising Bugs in Jupyter Platform
As a representative literate programming platform, Jupyter is widely adopted by developers, data analysts, and researchers for replication, data sharing, documentation, interactive data visualization, and more. Understanding the bugs in the Jupyter platform is essential for ensuring its...
Wiz and AWS Security Hub Enhance Cloud Risk Prioritization
Wiz joins as a launch partner for AWS Security Hub to help customers act faster on prioritized security findings...
GHSA-2X5J-VHC8-9CWM CIRCL-Fourq: Missing and wrong validation can lead to incorrect results
Impact The CIRCL implementation of FourQ fails to validate user-supplied low-order points during Diffie-Hellman key exchange, potentially allowing attackers to force the identity point and compromise session security. Moreover, there is an incorrect point validation in ScalarMult can lead to...
The Rise of the LLM AI Scrapers: What It Means for Bot Management
Explore the rise of LLM AI scrapers and learn how to adapt to growing bot traffic with data-backed insights from our research...
The Rise of the LLM AI Scrapers: What It Means for Bot Management
Explore the rise of LLM AI scrapers and learn how to adapt to growing bot traffic with data-backed insights from our research...
CVE-2025-20257
A vulnerability in an API subsystem of Cisco Secure Network Analytics Manager and Cisco Secure Network Analytics Virtual Manager could allow an authenticated, remote attacker with low privileges to generate fraudulent findings that are used to generate alarms and alerts on an affected product. Th...
CVE-2025-20257
A vulnerability in an API subsystem of Cisco Secure Network Analytics Manager and Cisco Secure Network Analytics Virtual Manager could allow an authenticated, remote attacker with low privileges to generate fraudulent findings that are used to generate alarms and alerts on an affected product. Th...
CVE-2025-20257 Cisco Secure Network Analytics API Authorization Vulnerability
A vulnerability in an API subsystem of Cisco Secure Network Analytics Manager and Cisco Secure Network Analytics Virtual Manager could allow an authenticated, remote attacker with low privileges to generate fraudulent findings that are used to generate alarms and alerts on an affected product. Th...
CVE-2025-20257 Cisco Secure Network Analytics API Authorization Vulnerability
A vulnerability in an API subsystem of Cisco Secure Network Analytics Manager and Cisco Secure Network Analytics Virtual Manager could allow an authenticated, remote attacker with low privileges to generate fraudulent findings that are used to generate alarms and alerts on an affected product. Th...
CVE-2025-20257: Incorrect Authorization
A vulnerability in an API subsystem of Cisco Secure Network Analytics Manager and Cisco Secure Network Analytics Virtual Manager could allow an authenticated, remote attacker with low privileges to generate fraudulent findings that are used to generate alarms and alerts on an affected product. Th...
Beyond Vulnerability Management – Can You CVE What I CVE?
The Vulnerability Treadmill The reactive nature of vulnerability management, combined with delays from policy and process, strains security teams. Capacity is limited and patching everything immediately is a struggle. Our Vulnerability Operation Center VOC dataset analysis identified 1,337,797...
New Cloud Vulnerability Data Shows Google Cloud Leads in Risk
New research shows Google Cloud and smaller providers have the highest cloud vulnerability rates as compared to AWS…...
Empc: Effective Path Prioritization for Symbolic Execution with Path Cover
Symbolic execution is a powerful program analysis technique that can formally reason the correctness of program behaviors and detect software bugs. It can systematically explore the execution paths of the tested program. But it suffers from an inherent limitation: path explosion. Path explosion...
CVE-2025-46420
creationtimestamp| type| source ---|---|--- 2025-04-24 13:05:59+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13218 2025-04-24 14:16:52+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnkt4xahclj2 2025-04-24 15:49:31+00:00| seen|...
CVE-2022-46945
creationtimestamp| type| source ---|---|--- 2025-04-16 06:53:31+00:00| seen| https://bsky.app/profile/nimblenerd.social/post/3lmvyz4qv322j 2025-04-17 21:02:30+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lmzyvyf7du2a...
