737 matches found
SUSE SLED15: MozillaThunderbird / MozillaThunderbird-translations-common / etc (SUSE-SU-2025:1157-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:1157-1 advisory. - Mozilla Thunderbird ESR 128.9 MFSA 2025-24 bsc1240083 CVE-2025-3028: Use-after-free triggered ...
RHSA-2025:2862
creationtimestamp| type| source ---|---|--- 2025-03-27 04:25:50+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9006 2025-03-27 04:25:50+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9007 2025-03-27 04:25:51+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9008 2025-03-27 04:25:52+00:00...
nss bug fix and enhancement update
An update is available for nss. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Network Security Services NSS is a set of libraries designed to support the...
GHSA-X3M8-899R-F7C3 xml-crypto Vulnerable to XML Signature Verification Bypass via DigestValue Comment
Impact An attacker may be able to exploit this vulnerability to bypass authentication or authorization mechanisms in systems that rely on xml-crypto for verifying signed XML documents. The vulnerability allows an attacker to modify a valid signed XML message in a way that still passes signature...
xml-crypto Vulnerable to XML Signature Verification Bypass via DigestValue Comment
Impact An attacker may be able to exploit this vulnerability to bypass authentication or authorization mechanisms in systems that rely on xml-crypto for verifying signed XML documents. The vulnerability allows an attacker to modify a valid signed XML message in a way that still passes signature...
CISA and Partners Release Cybersecurity Advisory on Medusa Ransomware
Today, CISA—in partnership with the Federal Bureau of Investigation FBI and Multi-State Information Sharing and Analysis Center MS-ISAC—released joint Cybersecurity Advisory, StopRansomware: Medusa Ransomware. This advisory provides tactics, techniques, and procedures TTPs, indicators of compromi...
RHSA-2024:8563
creationtimestamp| type| source ---|---|--- 2025-03-11 02:40:08+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7100 2025-04-10 21:49:44+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11358...
CVE-2025-27661
creationtimestamp| type| source ---|---|--- 2025-03-05 08:34:58+00:00| seen| https://t.me/cvedetector/19604 2025-03-05 20:29:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljnszhqoyj2o 2025-03-06 00:00:25+00:00| seen|...
CVE-2025-25476
creationtimestamp| type| source ---|---|--- 2025-02-28 23:27:50+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6023 2025-03-01 02:13:44+00:00| seen| https://t.me/cvedetector/19194 2025-03-02 11:46:30+00:00| seen| Telegram/3xB6M54-wSCQN7enHt26ebBCCT1YEan57cXsGm01RSafoLfk...
CVE-2025-25916
creationtimestamp| type| source ---|---|--- 2025-02-28 15:26:35+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5906 2025-02-28 17:51:54+00:00| seen| https://t.me/cvedetector/19157 2025-03-02 11:45:36+00:00| seen| Telegram/OqtijlW6O0ZityJe562GbnWUuNQKTkLnHrDYscLPgzD6l66v...
Becoming Ransomware Ready: Why Continuous Validation Is Your Best Defense
Ransomware doesn't hit all at once—it slowly floods your defenses in stages. Like a ship subsumed with water, the attack starts quietly, below the surface, with subtle warning signs that are easy to miss. By the time encryption starts, it's too late to stop the flood. Each stage of a ransomware...
CISA and Partners Release Advisory on Ghost (Cring) Ransomware
Today, CISA—in partnership with the Federal Bureau of Investigation FBI and Multi-State Information Sharing and Analysis Center MS-ISAC—released a joint Cybersecurity Advisory, StopRansomware: Ghost Cring Ransomware. This advisory provides network defenders with indicators of compromise IOCs,...
GHSA-7G7F-62CF-Q66H
creationtimestamp| type| source ---|---|--- 2025-02-17 00:19:09+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/4615 2025-02-17 00:20:14+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/4620 2025-02-17 00:21:11+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/4625 2025-02-17 00:22:16+00:00...
GHSA-F8Q2-7FV5-CG93
creationtimestamp| type| source ---|---|--- 2025-01-29 15:30:45+00:00| seen| https://infosec.exchange/users/cve/statuses/113912358161091347...
Key Performance Indicators for Effective DSPM Implementation
What are the most important KPI’s for a successful DSPM implementation? Let's explore what KPI’s to monitor, why they matter, and how you can take advantage of them for improved security at your org...
Vulnerability fixed in FortiNet FortiOS and FortiProxy
FortiNet has fixed a vulnerability in FortiOS and FortiProxy. The vulnerability is in the node.js implementation of the management Web interface and allows a malicious person to bypass authentication to become super-admin on the vulnerable system without prior authentication or authorizations. Fo...
Tracking cloud-fluent threat actors - Part two: Behavioral cloud IOCs
Discover how behavioral cloud IOCs can expose malicious activity as we break down real-world examples to reveal actionable detection techniques...
RHSA-2024:5145
creationtimestamp| type| source ---|---|--- 2025-01-09 22:16:14+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1110 2025-02-26 04:24:30+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5446 2025-03-03 14:30:00+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6207 2025-06-18 19:39:59+00:00...
