CVE-2025-46658

CVE-2025-46658 affects ExonautWeb in 4C Strategies Exonaut 21.6, where the issue is characterized by verbose error messages. The available connected documents confirm the vulnerable component (ExonautWeb 21.6) and describe the symptom (verbose errors) but do not provide concrete root-cause detail...

CVE-2025-46658

An issue was discovered in ExonautWeb in 4C Strategies Exonaut 21.6. There are verbose error messages...

PT-2025-31938 · Unknown · Exonautweb

Name of the Vulnerable Software and Affected Versions: ExonautWeb versions 21.6 Description: The software exhibits verbose error messages. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...

CVE-2025-46658

An issue was discovered in ExonautWeb in 4C Strategies Exonaut 21.6. There are verbose error messages...

CVE-2025-50340

An Insecure Direct Object Reference IDOR vulnerability was discovered in SOGo Webmail thru 5.6.0, allowing an authenticated user to send emails on behalf of other users by manipulating a user-controlled identifier in the email-sending request. The server fails to verify whether the authenticated...

Real-World Evaluation of Protocol-Compliant Denial-Of-Service Attacks on C-V2X-Based Forward Collision Warning Systems

Cellular Vehicle-to-Everything C-V2X technology enables low-latency, reliable communications essential for safety applications such as a Forward Collision Warning FCW system. C-V2X deployments operate under strict protocol compliance with the 3rd Generation Partnership Project 3GPP and the Societ...

RHSA-2024:1306

creationtimestamp| type| source ---|---|--- 2025-08-03 05:48:54+00:00| seen| Telegram/a8pEGOkTgJJux7W8-kIm1u5Bq3y4Apx45NIApUGzfKuHh8 2025-08-03 05:48:56+00:00| seen| Telegram/z6u7m9GyhDt-ZJU5rROxeIXptUYqKnCJTeQRltA3B8664MU...

RHSA-2023:7411

creationtimestamp| type| source ---|---|--- 2025-08-01 16:44:58+00:00| seen| Telegram/bcIbeCc6uOaGrdM5LOW5-5tLNmTviix1Z-9QPl2cq16iU8c 2025-08-01 16:45:01+00:00| seen| Telegram/xc3vkOd00NlphTo8oCaHSNQmEDCJCvPNfenHNFoNBmcoi4...

RHSA-2023:7379

creationtimestamp| type| source ---|---|--- 2025-08-01 16:44:58+00:00| seen| Telegram/bcIbeCc6uOaGrdM5LOW5-5tLNmTviix1Z-9QPl2cq16iU8c 2025-08-01 16:44:59+00:00| seen| Telegram/UvvK5lpUqP5-AKrc2HE3kUs7WF2Bdb-mYHzHriMNu4GQwA...

RHSA-2023:7695

creationtimestamp| type| source ---|---|--- 2025-08-01 15:49:22+00:00| seen| Telegram/vqMv-pw9KY3Z5TMAkCKFJ81O0KEk3Kk9SHClQG6teUoaj50 2025-08-02 14:50:53+00:00| seen| Telegram/O48YTDst3MKwqXTmoA7eKUU-Al4YKF5xmz2EhGo0DjbdKvM 2025-08-02 17:49:06+00:00| seen|...

RHSA-2023:7694

creationtimestamp| type| source ---|---|--- 2025-08-01 15:49:22+00:00| seen| Telegram/vqMv-pw9KY3Z5TMAkCKFJ81O0KEk3Kk9SHClQG6teUoaj50 2025-08-02 14:50:53+00:00| seen| Telegram/O48YTDst3MKwqXTmoA7eKUU-Al4YKF5xmz2EhGo0DjbdKvM 2025-08-02 17:49:06+00:00| seen|...

RHSA-2023:7714

creationtimestamp| type| source ---|---|--- 2025-08-01 15:49:22+00:00| seen| Telegram/vqMv-pw9KY3Z5TMAkCKFJ81O0KEk3Kk9SHClQG6teUoaj50 2025-08-02 14:50:53+00:00| seen| Telegram/O48YTDst3MKwqXTmoA7eKUU-Al4YKF5xmz2EhGo0DjbdKvM 2025-08-02 17:49:06+00:00| seen|...

GHSA-JXR6-QRXX-2PH2

creationtimestamp| type| source ---|---|--- 2025-07-31 19:54:33+00:00| seen| https://t.me/ctinow/235813 2025-07-31 19:59:50+00:00| seen| https://t.me/ctinow/235814...

Malicious code in analytics-messages-definition-activities (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-6400 Malicious code in analytics-messages-definition-activities (npm)

--- -= Per source details. Do not edit below this line.=-...

That seemingly innocent text is probably a scam

A special thanks to all the people at Malwarebytes and ThreatDown for sharing the text messages they received from scammers. Many of us have received texts like these. Often super short, some flirty, some with a business tone, or sometimes just a simple ‘hello.’ You don't know the sender, and the...

CVE-2024-42655

An access control issue in NanoMQ v0.21.10 allows attackers to bypass security restrictions and access sensitive system topic messages using MQTT wildcard characters...

(Pwn2Own) QNAP QHora-322 gRPC WAN_ADDR6 Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of QNAP QHora-322 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of gRPC messages. The issue results from the lack of prope...

SUSE-SU-2025:20519-1 Security update for kernel-livepatch-MICRO-6-0-RT_Update_4

This update for kernel-livepatch-MICRO-6-0-RTUpdate4 fixes the following issues: - CVE-2024-53146: NFSD: prevent a potential integer overflow bsc1234854 - CVE-2024-53166: block, bfq: fix bfqq uaf in bfqlimitdepth bsc1234885 - CVE-2024-53173: NFSv4.0: Fix a use-after-free problem in the asynchrono...

CVE-2024-42655

An access control issue in NanoMQ v0.21.10 allows attackers to bypass security restrictions and access sensitive system topic messages using MQTT wildcard characters...