Windows Task Scheduler Data Compromise

The vulnerability of the Windows operating system’s task scheduler is related to insufficient checks for the correctness of messages or data structures. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

Google Is Using On-Device AI to Spot Scam Texts and Investment Fraud

Android’s “Scam Detection” protection in Google Messages will now be able to flag even more types of digital fraud...

thunderbird: Information Disclosure of /tmp directory listing

A flaw was found in Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: By crafting a malformed file name for an attachment in a multipart message, an attacker can trick Thunderbird into including a directory listing of /tmp when the message is forwarded or edit...

git: The sideband payload is passed unfiltered to the terminal in git

A flaw was found in Git. When cloning, fetching, or pushing from a server, informational or error messages are transported from the remote Git process to the client via a sideband channel. These messages are prefixed with "remote:" and printed directly to the standard error output. Typically, thi...

git: The sideband payload is passed unfiltered to the terminal in git

A flaw was found in Git. When cloning, fetching, or pushing from a server, informational or error messages are transported from the remote Git process to the client via a sideband channel. These messages are prefixed with "remote:" and printed directly to the standard error output. Typically, thi...

CVE-2025-40556

A vulnerability has been identified in BACnet ATEC 550-440 All versions, BACnet ATEC 550-441 All versions, BACnet ATEC 550-445 All versions, BACnet ATEC 550-446 All versions. Affected devices improperly handle specific incoming BACnet MSTP messages. This could allow an attacker residing in the sa...

CVE-2025-40556

The CVE-2025-40556 vulnerability affects Siemens BACnet ATEC devices (550-440, 550-441, 550-445, 550-446). Affected systems improperly handle specific BACnet MSTP messages, enabling an attacker on the same BACnet network to send crafted MSTP traffic that causes a denial of service, recoverable on...

CVE-2025-40556

A vulnerability has been identified in BACnet ATEC 550-440 All versions, BACnet ATEC 550-441 All versions, BACnet ATEC 550-445 All versions, BACnet ATEC 550-446 All versions. Affected devices improperly handle specific incoming BACnet MSTP messages. This could allow an attacker residing in the sa...

CVE-2025-40556

A vulnerability has been identified in BACnet ATEC 550-440 All versions, BACnet ATEC 550-441 All versions, BACnet ATEC 550-445 All versions, BACnet ATEC 550-446 All versions. Affected devices improperly handle specific incoming BACnet MSTP messages. This could allow an attacker residing in the sa...

CVE-2025-40555

CVE-2025-40555 affects the APOGEE PXC+TALON TC Series (BACnet). After processing a specific BACnet createObject request, affected devices may start sending unsolicited BACnet broadcast messages, which can enable a same-network attacker to induce a partial denial of service and reduce network avai...

CVE-2025-40555

A vulnerability has been identified in APOGEE PXC+TALON TC Series BACnet All versions. Affected devices start sending unsolicited BACnet broadcast messages after processing a specific BACnet createObject request. This could allow an attacker residing in the same BACnet network to send a specially...

CVE-2025-24510

The CVE-2025-24510 affects Siemens MS/TP Point Pickup Module (all versions). Affected devices improperly handle certain BACnet MSTP messages, enabling an attacker on the same BACnet network to craft an MSTP message that triggers a denial-of-service, requiring a power cycle to recover. Total impac...

CVE-2025-24510

A vulnerability has been identified in MS/TP Point Pickup Module All versions. Affected devices improperly handle specific incoming BACnet MSTP messages. This could allow an attacker residing in the same BACnet network to send a specially crafted MSTP message that results in a denial of service...

CVE-2025-24510

A vulnerability has been identified in MS/TP Point Pickup Module All versions. Affected devices improperly handle specific incoming BACnet MSTP messages. This could allow an attacker residing in the same BACnet network to send a specially crafted MSTP message that results in a denial of service...

kernel: vsock: Fix sk_error_queue memory leak

A flaw was found in the Linux kernel's Virtual Socket vsock implementation. When zero-copy data transfers are used, completion notifications placed on a socket's error queue are not cleared when the socket is closed. A local user can exploit this flaw to trigger an uncollected memory leak,...

CVE-2025-43009

creationtimestamp| type| source ---|---|--- 2025-05-13 05:30:19+00:00| seen| https://t.me/cvedetector/25146 2025-05-13 14:30:47+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16127...

Siemens BACnet ATEC input validation error vulnerability

Siemens BACnet ATEC Siemens BACnet Advanced Terminal Equipment Controller is a building automation terminal equipment controller from Siemens, Germany. An input validation error vulnerability exists in Siemens BACnet ATEC that stems from improper handling of certain BACnet MSTP messages, which...

PT-2025-23068 · Fortinet · Forticlient

Name of the Vulnerable Software and Affected Versions: FortiClient Mac versions 7.0.0 through 7.0.14 FortiClient Mac versions 7.2.0 through 7.2.8 FortiClient Mac versions 7.4.0 through 7.4.2 Description: The issue is related to an Incorrect Authorization vulnerability that may allow a local...

CVE-2022-42117

creationtimestamp| type| source ---|---|--- 2025-05-12 18:29:18+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15976 2025-05-12 18:31:37+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15990 2025-05-12 18:37:57+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16006...

CVE-2025-47270

nimiq/core-rs-albatross is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. The nimiq-network-libp2p subcrate of nimiq/core-rs-albatross is vulnerable to a Denial of Service DoS attack due to uncontrolled memory allocation. Specifically, the...