CVE-2025-46658

An issue was discovered in ExonautWeb in 4C Strategies Exonaut 21.6. There are verbose error messages...

CVE-2025-46658

A security vulnerability exists in ExonautWeb within 4C Strategies Exonaut version 21.6 . The issue is caused by the generation of verbose error messages (CWE-209), which may leak sensitive information. This vulnerability has a CRITICAL severity score of 9.8 (CVSS v3.1). While the impact is high ...

CVE-2025-50340

An Insecure Direct Object Reference IDOR vulnerability was discovered in SOGo Webmail thru 5.6.0, allowing an authenticated user to send emails on behalf of other users by manipulating a user-controlled identifier in the email-sending request. The server fails to verify whether the authenticated...

Real-World Evaluation of Protocol-Compliant Denial-Of-Service Attacks on C-V2X-Based Forward Collision Warning Systems

Cellular Vehicle-to-Everything C-V2X technology enables low-latency, reliable communications essential for safety applications such as a Forward Collision Warning FCW system. C-V2X deployments operate under strict protocol compliance with the 3rd Generation Partnership Project 3GPP and the Societ...

RHSA-2024:1306

creationtimestamp| type| source ---|---|--- 2025-08-03 05:48:54+00:00| seen| Telegram/a8pEGOkTgJJux7W8-kIm1u5Bq3y4Apx45NIApUGzfKuHh8 2025-08-03 05:48:56+00:00| seen| Telegram/z6u7m9GyhDt-ZJU5rROxeIXptUYqKnCJTeQRltA3B8664MU...

RHSA-2023:7411

creationtimestamp| type| source ---|---|--- 2025-08-01 16:44:58+00:00| seen| Telegram/bcIbeCc6uOaGrdM5LOW5-5tLNmTviix1Z-9QPl2cq16iU8c 2025-08-01 16:45:01+00:00| seen| Telegram/xc3vkOd00NlphTo8oCaHSNQmEDCJCvPNfenHNFoNBmcoi4...

RHSA-2023:7379

creationtimestamp| type| source ---|---|--- 2025-08-01 16:44:58+00:00| seen| Telegram/bcIbeCc6uOaGrdM5LOW5-5tLNmTviix1Z-9QPl2cq16iU8c 2025-08-01 16:44:59+00:00| seen| Telegram/UvvK5lpUqP5-AKrc2HE3kUs7WF2Bdb-mYHzHriMNu4GQwA...

RHSA-2023:7695

creationtimestamp| type| source ---|---|--- 2025-08-01 15:49:22+00:00| seen| Telegram/vqMv-pw9KY3Z5TMAkCKFJ81O0KEk3Kk9SHClQG6teUoaj50 2025-08-02 14:50:53+00:00| seen| Telegram/O48YTDst3MKwqXTmoA7eKUU-Al4YKF5xmz2EhGo0DjbdKvM 2025-08-02 17:49:06+00:00| seen|...

RHSA-2023:7714

creationtimestamp| type| source ---|---|--- 2025-08-01 15:49:22+00:00| seen| Telegram/vqMv-pw9KY3Z5TMAkCKFJ81O0KEk3Kk9SHClQG6teUoaj50 2025-08-02 14:50:53+00:00| seen| Telegram/O48YTDst3MKwqXTmoA7eKUU-Al4YKF5xmz2EhGo0DjbdKvM 2025-08-02 17:49:06+00:00| seen|...

RHSA-2023:7694

creationtimestamp| type| source ---|---|--- 2025-08-01 15:49:22+00:00| seen| Telegram/vqMv-pw9KY3Z5TMAkCKFJ81O0KEk3Kk9SHClQG6teUoaj50 2025-08-02 14:50:53+00:00| seen| Telegram/O48YTDst3MKwqXTmoA7eKUU-Al4YKF5xmz2EhGo0DjbdKvM 2025-08-02 17:49:06+00:00| seen|...

GHSA-JXR6-QRXX-2PH2

creationtimestamp| type| source ---|---|--- 2025-07-31 19:54:33+00:00| seen| https://t.me/ctinow/235813 2025-07-31 19:59:50+00:00| seen| https://t.me/ctinow/235814...

MAL-2025-6400 Malicious code in analytics-messages-definition-activities (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in analytics-messages-definition-activities (npm)

--- -= Per source details. Do not edit below this line.=-...

That seemingly innocent text is probably a scam

A special thanks to all the people at Malwarebytes and ThreatDown for sharing the text messages they received from scammers. Many of us have received texts like these. Often super short, some flirty, some with a business tone, or sometimes just a simple ‘hello.’ You don't know the sender, and the...

CVE-2024-42655

An access control issue in NanoMQ v0.21.10 allows attackers to bypass security restrictions and access sensitive system topic messages using MQTT wildcard characters...

(Pwn2Own) QNAP QHora-322 gRPC WAN_ADDR6 Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of QNAP QHora-322 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of gRPC messages. The issue results from the lack of prope...

SUSE-SU-2025:20519-1 Security update for kernel-livepatch-MICRO-6-0-RT_Update_4

This update for kernel-livepatch-MICRO-6-0-RTUpdate4 fixes the following issues: - CVE-2024-53146: NFSD: prevent a potential integer overflow bsc1234854 - CVE-2024-53166: block, bfq: fix bfqq uaf in bfqlimitdepth bsc1234885 - CVE-2024-53173: NFSv4.0: Fix a use-after-free problem in the asynchrono...

CVE-2024-42655

An access control issue in NanoMQ v0.21.10 allows attackers to bypass security restrictions and access sensitive system topic messages using MQTT wildcard characters...

Tea Dating Advice app has users’ private messages disclosed

A few days after Tea Dating Advice discovered unauthorized access to one of its systems that leaked 72,000 user images, the popular mobile app faced a second issue involving a separate database, as a researcher reported to 404Media that they were able to access private conversations. Tea Dating...

PT-2025-33765

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A security issue was identified in the Linux kernel related to the handling of server-side TLS alerts within the sunrpc component. The tls alert recv function incorrectly assumed it...