7233 matches found
CVE-2025-58055
Discourse is an open-source community discussion platform. In versions 3.5.0 and below, the Discourse AI suggestion endpoints for topic “Title”, “Category”, and “Tags” allowed authenticated users to extract information about topics that they weren’t authorized to access. By modifying the “topicid...
The Evolution of Russian Physical-Cyber Espionage
The Evolution of Russian Physical-Cyber Espionage By Ryan Slaney · October 6, 2025 Russian state-sponsored cyber operations, primarily those conducted by hackers belonging to its Main Intelligence Directorate GRU, also known as APT28, have long combined digital intrusions with physical tradecraft...
wisdom-education 安全漏洞
wisdom-education is a cloud intelligence education platform by zhuimengshaonian individual developer. A security vulnerability exists in wisdom-education 1.0.4 and earlier versions, which originates from the incorrect operation of subjectId in the file...
BIT-DISCOURSE-2025-58055 Discourse AI Suggestions Contain Insecure Direct Object Reference
Discourse is an open-source community discussion platform. In versions 3.5.0 and below, the Discourse AI suggestion endpoints for topic “Title”, “Category”, and “Tags” allowed authenticated users to extract information about topics that they weren’t authorized to access. By modifying the “topicid...
Lovable VDP: Improper Authorization Leads to Editor can toggle admin-only workspace features (Lovable AI)
The API endpoint /workspaces//tool-preferences/aigateway/enable did not enforce proper authorization checks. As a result, an account with the Editor role was able to disable the workspace-wide admin-only Lovable AI feature, which powers key AI functionalities across the workspace...
VulnCheck KEV: CVE-2025-61882
Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite component: BI Publisher Integration. Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...
EUVD-2022-37277
Malicious code in bioql PyPI...
EUVD-2025-14755
Malicious code in bioql PyPI...
EUVD-2023-12125
Malicious code in bioql PyPI...
EUVD-2025-16788
Malicious code in bioql PyPI...
EUVD-2023-26075
Malicious code in bioql PyPI...
EUVD-2022-45053
Malicious code in bioql PyPI...
EUVD-2023-26954
Malicious code in bioql PyPI...
EUVD-2023-26177
Malicious code in bioql PyPI...
EUVD-2024-52125
Malicious code in bioql PyPI...
EUVD-2025-13511
Malicious code in bioql PyPI...
EUVD-2023-26027
Malicious code in bioql PyPI...
EUVD-2023-26273
Malicious code in bioql PyPI...