14770 matches found
kernel: s390/sclp: Fix SCCB present check
In the Linux kernel, the following vulnerability has been resolved: s390/sclp: Fix SCCB present check Tracing code called by the SCLP interrupt handler contains early exits if the SCCB address associated with an interrupt is NULL. This check is performed after physical to virtual address...
PT-2025-39183
Name of the Vulnerable Software and Affected Versions WSO2 Identity Server affected versions not specified Description A reflected cross-site scripting XSS issue exists in the account registration process. This is due to improper output encoding, allowing a malicious actor to inject a crafted...
free5GC 安全漏洞
free5GC is a 5th Generation 5G mobile core network open source project by free5GC Open Source. A security vulnerability exists in free5GC version 4.0.1 that stems from the AMF not properly validating 5GS mobile identity, which could result in a buffer overflow...
WSO2 Identity Server 安全漏洞
WSO2 Identity Server IS is an identity server from the US-based WSO2 Inc. A security vulnerability exists in WSO2 Identity Server IS that stems from improperly encoded output and could lead to a reflective cross-site scripting attack...
WSO2 Identity Server 安全漏洞
WSO2 Identity Server IS is an identity server from WSO2, Inc. A security vulnerability exists in WSO2 Identity Server IS that originates from the failure to automatically remove associated FIDO registration data when a user account is deleted, which could lead to authentication bypass and...
WSO2 Identity Server 安全漏洞
WSO2 Identity Server IS is an identity server from the US-based WSO2 Inc. A security vulnerability exists in WSO2 Identity Server IS that stems from improper cryptographic design in adaptive authentication, which could lead to a cross-tenant authentication vulnerability...
CVE-2025-56394
Free5gc 4.0.1 is vulnerable to Buffer Overflow. The AMF incorrectly validates the 5GS mobile identity, resulting in slice reference overflow...
CVE-2025-56394
Free5gc 4.0.1 is vulnerable to Buffer Overflow. The AMF incorrectly validates the 5GS mobile identity, resulting in slice reference overflow...
PT-2025-39188
Name of the Vulnerable Software and Affected Versions Free5gc version 4.0.1 Description The AMF component contains a buffer overflow issue due to incorrect validation of the 5GS mobile identity, leading to a slice reference overflow. Recommendations At the moment, there is no information about a...
CVE-2025-56394
Free5gc 4.0.1 is vulnerable to Buffer Overflow. The AMF incorrectly validates the 5GS mobile identity, resulting in slice reference overflow...
WSO2 Identity Server 安全漏洞
WSO2 Identity Server IS is an identity server from WSO2, Inc. A security vulnerability exists in WSO2 Identity Server IS that stems from improper validation of Event Processor Management Service inputs, which could lead to remote code execution...
WSO2 Identity Server 安全漏洞
WSO2 Identity Server IS is an identity server from the US-based WSO2 Inc. A security vulnerability exists in WSO2 Identity Server IS, which stems from an improper implementation of enrich mediator and could lead to the disclosure of sensitive business information...
CVE-2025-56394
CVE-2025-56394 affects Free5gc 4.0.1. The AMF’s improper validation of the 5GS mobile identity enables a Buffer Overflow, described as a slice reference overflow. Impact is a high-severity memory corruption issue (CVSS 7.5, Network attack, no user interaction). Exploitation details are not provid...
WSO2 Identity Server 安全漏洞
WSO2 Identity Server IS is an identity server from WSO2, Inc. A security vulnerability exists in WSO2 Identity Server IS that stems from improper handling of error messages and could lead to malicious content injection and social engineering attacks...
WSO2 Identity Server 安全漏洞
WSO2 Identity Server IS is an identity server from the US-based WSO2, Inc. A security vulnerability exists in WSO2 Identity Server IS that originates from a failure to properly validate user input during API document uploads, which could lead to a stored cross-site scripting attack...
How to Gain Control of AI Agents and Non-Human Identities
We hear this a lot: "We've got hundreds of service accounts and AI agents running in the background. We didn't create most of them. We don't know who owns them. How are we supposed to secure them?" Every enterprise today runs on more than users. Behind the scenes, thousands of non-human identitie...
Openfire < 5.0.2 / 5.1.0 Identity Spoofing
The remote host is running a version of Openfire that is affected by an identity spoofing vulnerability. Openfireâs SASL EXTERNAL mechanism for client TLS authentication contains a vulnerability in how it extracts user identities from X.509 certificates. Instead of parsing the structured ASN.1...
Navigating SEBI’s Cloud Security Requirements: A Guide for Regulated Entities
Overview: Who is impacted: The Securities and Exchange Board of India SEBI is the primary regulatory authority for the securities market in India. It was established to protect investor interests and promote market development, but its guidelines also impact cybersecurity professionals at regulat...
Watch out for the “We are hiring” remote online evaluator message scam
Looking at our team’s recent text messages, you’d think that remote online evaluators are in high demand right now. Several members of our team have received the almost exact same job offer scam texts. The content of the messages is almost identical, but there is a variation in background images...
Openfire has potential identity spoofing issue via unsafe CN parsing
Summary Identity spoofing in X.509 client certificate authentication in Openfire allows internal attackers to impersonate other users via crafted certificate subject attributes, due to regex-based extraction of CN from an unescaped, provider-dependent DN string. Analysis Openfire’s SASL EXTERNAL...