CVE-2025-0358

During an annual penetration test conducted on behalf of Axis Communication, Truesec discovered a flaw in the VAPIX Device Configuration framework that allowed a privilege escalation, enabling a lower-privileged user to gain administrator privileges...

CVE-2025-5428

creationtimestamp| type| source ---|---|--- 2025-06-02 06:31:51+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqm5pj77lbw2 2025-06-02 08:41:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqmexz5ziu2e...

CVE-2025-5431

creationtimestamp| type| source ---|---|--- 2025-06-02 06:31:24+00:00| seen| https://bsky.app/profile/FunctionalProgramming.activitypub.awakari.com.ap.brid.gy/post/3lqm5okzp5qe2...

CVE-2025-3951

creationtimestamp| type| source ---|---|--- 2025-06-02 06:31:11+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqm5odaztub2 2025-06-02 08:28:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqmeanlu3l2m...

CVE-2025-5427

creationtimestamp| type| source ---|---|--- 2025-06-02 04:06:18+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqlvk3f6fvn2 2025-06-02 08:25:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqme2oaoda2j...

CVE-2025-20676

creationtimestamp| type| source ---|---|--- 2025-06-02 04:05:56+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqlvk5kwt3b2 2025-06-02 04:25:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqlwnpt2gl2e...

CVE-2025-37096

creationtimestamp| type| source ---|---|--- 2025-06-02 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-319/ 2025-06-02 14:39:23+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqmyxginkhx2 2025-06-02 14:41:47+00:0...

CVE-2025-5420

creationtimestamp| type| source ---|---|--- 2025-06-02 00:52:31+00:00| seen| https://bsky.app/profile/potato.software/post/3lqlkqvj5b52v 2025-06-02 01:03:49+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqller46bob2 2025-06-02...

CVE-2025-23099

An issue was discovered in Samsung Mobile Processor Exynos 1480 and 2400. The lack of a length check leads to out-of-bounds writes...

CVE-2025-48994

SignXML is an implementation of the W3C XML Signature standard in Python. When verifying signatures with X509 certificate validation turned off and HMAC shared secret set signxml.XMLVerifier.verifyrequirex509=False, hmackey=..., versions of SignXML prior to 4.0.4 are vulnerable to a potential...

CVE-2025-3230

Mattermost versions 10.7.x = 10.7.0, 10.6.x = 10.6.2, 10.5.x = 10.5.3, 9.11.x = 9.11.12 fails to properly invalidate personal access tokens upon user deactivation, allowing deactivated users to maintain full system access by exploiting access token validation flaws via continued usage of previous...

CVE-2025-33004

CVE-2025-33004 affects IBM Planning Analytics Local (2.0 and 2.1). The vulnerability is a path traversal flaw caused by improper pathname restriction that could let a privileged user delete files from directories. Connected sources confirm affected versions 2.0–2.1 and cite the impact as file del...

CVE-2025-4636

Due to excessive privileges granted to the web user running the airpointer web platform, a malicious actor that gains control of the this user would be able to privilege escalate to the root user...

Privacy-Aware, Public-Aligned: Embedding Risk Detection and Public Values into Scalable Clinical Text De-Identification for Trusted Research Environments

Clinical free-text data offers immense potential to improve population health research such as richer phenotyping, symptom tracking, and contextual understanding of patient care. However, these data present significant privacy risks due to the presence of directly or indirectly identifying...

Developing a Risk Identification Framework for Foundation Model Uses

As foundation models grow in both popularity and capability, researchers have uncovered a variety of ways that the models can pose a risk to the model's owner, user, or others. Despite the efforts of measuring these risks via benchmarks and cataloging them in AI risk taxonomies, there is little...

CVE-2025-5383

creationtimestamp| type| source ---|---|--- 2025-05-31 15:54:31+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqi47ujc6em2 2025-05-31 18:36:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqifbkaj6j2r...

CVE-2025-3813

creationtimestamp| type| source ---|---|--- 2025-05-31 08:40:33+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqhdxvdlopp2 2025-05-31 11:42:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqho5qhyhw2m...

PackHero: a Scalable Graph-Based Approach for Efficient Packer Identification

Anti-analysis techniques, particularly packing, challenge malware analysts, making packer identification fundamental. Existing packer identifiers have significant limitations: signature-based methods lack flexibility and struggle against dynamic evasion, while Machine Learning approaches require...

Debian dla-4202 : net-tools - security update

The remote Debian 11 host has a package installed that is affected by a vulnerability as referenced in the dla-4202 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4202-1 [email protected] https://www.debian.org/lts/security/...

CVE-2025-5364

A vulnerability was found in Campcodes Online Hospital Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /doctor/add-patient.php. The manipulation of the argument patname leads to sql injection. The attack may be launched remotely...