CVE-2025-68140: Incorrect Authorization

EVerest is an EV charging software stack. Prior to version 2025.9.0, once the validity of the received V2G message has been verified, it is checked whether the submitted session ID matches the registered one. However, if no session has been registered, the default value is 0. Therefore, a message...

📄 Mobile Mouse 3.6.0.4 Remote Code Execution

Mobile Mouse version 3.6.0.4 remote code execution proof of concept exploit written in php that takes advantage of an older flaw from 2022. ============================================================================================================================================= | Title : Mobil...

CVE-2025-66116

creationtimestamp| type| source ---|---|--- 2026-01-20 20:14:10+00:00| seen| Telegram/ZHK9Ax7pz7g83q2gubkfj9qF1U1WNdVQW2eXMG7gaIS8Ew 2026-01-20 20:28:32+00:00| seen| Telegram/jAKBh9rG5uUBdJqmDLLuw9WMdRwqmZINckpXdYl26M0yPRw...

CVE-2025-60199

creationtimestamp| type| source ---|---|--- 2026-01-20 20:13:56+00:00| seen| Telegram/H3CnBfK7PYddEv-M1ZTryUsCc1Bn9GTSxVyKpS3KhQYxX70 2026-01-20 20:14:12+00:00| seen| Telegram/S7LU1KYoexzUkQbYGegiPNoF7EU-htKWL8zCqfkFbNHFsA...

CVE-2025-58995

creationtimestamp| type| source ---|---|--- 2026-01-20 20:12:30+00:00| seen| Telegram/sWyHUnrbIHX-Kbgt2WnfloqXmwwtZwbq4XH8MFv2PgEZKIo 2026-01-20 20:12:55+00:00| seen| Telegram/QnrH5g5OwGBUAy6ScRFD4MTujgrWMEa1D4kehJKdWHvpG4...

CVE-2025-49372

creationtimestamp| type| source ---|---|--- 2026-01-20 20:10:39+00:00| seen| Telegram/wcxfxhIjQZfGrpmoi9YVl8EqIpyUUAzOkMzbhBvCapKIP8 2026-01-20 20:10:44+00:00| seen| Telegram/xvvbL5Om5SDy9fQ-TK8aTlHNeA5-FbP6-yWc-4dkev7kv8...

CVE-2025-53238

creationtimestamp| type| source ---|---|--- 2026-01-20 20:03:37+00:00| seen| Telegram/vDPjge6K1tF404WPf9Q1hmt1q7CFqM-WlHcCHFTuMGtlY9k 2026-01-20 20:03:42+00:00| seen| Telegram/iqXHuMDsRQAGn3zdqA8hR0jm1F7aKD9CXHXY4CRfZNP0Hs...

CVE-2025-49963

creationtimestamp| type| source ---|---|--- 2026-01-20 20:02:28+00:00| seen| Telegram/fMYFu5KBFVLJT0mlLdRRIfBapDJ5HzsO-6rws7oTheN0tY 2026-01-20 20:02:32+00:00| seen| Telegram/fN3HRIXpamftNoJynabwgfF0PiG7n5MNorfl43ZW2B0h3M...

GHSA-8W7M-W749-RX98 Pterodactyl websocket endpoints have no visible rate limits or monitoring, allowing for DOS attacks

Summary Websockets within wings lack proper rate limiting and throttling. As a result a malicious user can open a large number of connections and then request data through these sockets, causing an excessive volume of data over the network and overloading the host system memory and cpu...

CVE-2025-14027

CVE-2025-14027 affects Rockwell Automation 1756-RM2 and 1756-RM2XT firmware in ControlLogix Redundancy Enhanced Modules. The issue is described as multiple denial-of-service vulnerabilities triggered by crafted inputs (including malformed Class 3 messages, memory leak conditions, and other resour...

Hackers Use LinkedIn Messages to Spread RAT Malware Through DLL Sideloading

Cybersecurity researchers have uncovered a new phishing campaign that exploits social media private messages to propagate malicious payloads, likely with the intent to deploy a remote access trojan RAT. The activity delivers "weaponized files via Dynamic Link Library DLL sideloading, combined wit...

VulnCheck KEV: CVE-2024-12248

Contec Health CMS8000 Patient Monitor is vulnerable to an out-of-bounds write, which could allow an attacker to send specially formatted UDP requests in order to write arbitrary data. This could result in remote code execution...

MiracleLinux 8 : bind9.16-9.16.23-0.16.el8_9.2.ML.1 (AXSA:2024-7685:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-7685:01 advisory. bind9: Parsing large DNS messages may cause excessive CPU load CVE-2023-4408 bind9: Querying RFC 1918 reverse zones may cause an assertion failure...

MiracleLinux 7 : java-11-openjdk-11.0.7.10-4.el7 (AXSA:2020-011:04)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2020-011:04 advisory. OpenJDK: Incorrect bounds checks in NIO Buffers Libraries, 8234841 CVE-2020-2803 OpenJDK: Incorrect type checks in MethodType.readObject Libraries,...

MiracleLinux 8 : linuxptp-2.0-5.el8.1 (AXSA:2021-2195:03)

The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2021-2195:03 advisory. linuxptp: missing length check of forwarded messages CVE-2021-3570 Tenable has extracted the preceding description block directly from the MiracleLinux...

PT-2026-37465

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Distributed Lock Manager DLM where the len parameter in the dlm dump rsb name function is not validated. Because this parameter is derived from network messages,...

PT-2026-23549

Name of the Vulnerable Software and Affected Versions OpenClaw Nextcloud Talk plugin versions prior to 2026.2.6 Description The Nextcloud Talk plugin allows attackers to bypass direct message DM and room allowlists. The plugin incorrectly uses the mutable actor.name field for allowlist validation...

CVE-2025-14027: Missing Release of Memory after Effective Lifetime

Multiple denial-of-service vulnerabilities exist in the affected product. These issues can be triggered through various crafted inputs, including malformed Class 3 messages, memory leak conditions, and other resource exhaustion scenarios. Exploitation may cause the device to become unresponsive...

PT-2026-3559

A denial-of-service security issue in the affected product. The security issue occurs when a malformed CIP forward open message is sent. This could result in a major nonrecoverable fault a restart is required to recover...

MiracleLinux 9 : OpenIPMI-2.0.32-5.el9_4 (AXSA:2024-8899:01)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-8899:01 advisory. openipmi: missing check on the authorization type on incoming LAN messages in IPMI simulator CVE-2024-42934 Tenable has extracted the preceding description...