CVE-2025-25382: External Control of Assumed-Immutable Web Parameter

An issue in the Property Tax Payment Portal in Information Kerala Mission SANCHAYA v3.0.4 allows attackers to arbitrarily modify payment amounts via a crafted request...

CVE-2025-25382

An issue in the Property Tax Payment Portal of Information Kerala Mission SANCHAYA v3.0.4 allows an attacker to arbitrarily modify payment amounts by sending a crafted request . This vulnerability involves the External Control of Assumed-Immutable Web Parameter (CWE-472). The impact is categorize...

CVE-2025-25382

An issue in the Property Tax Payment Portal in Information Kerala Mission SANCHAYA v3.0.4 allows attackers to arbitrarily modify payment amounts via a crafted request...

CVE-2025-25382

An issue in the Property Tax Payment Portal in Information Kerala Mission SANCHAYA v3.0.4 allows attackers to arbitrarily modify payment amounts via a crafted request...

PT-2025-3164 · Cfengine · Cfengine Enterprise Mission Portal

Name of the Vulnerable Software and Affected Versions: CFEngine Enterprise Mission Portal versions 3.21.5 and below CFEngine Enterprise Mission Portal version 3.24.0 Description: The issue allows for XSS. The estimated number of potentially affected devices worldwide is not available. There is no...

CVE-2024-55958: Improper Neutralization of Input During Web Page Generation

Northern.tech CFEngine Enterprise Mission Portal 3.24.0, 3.21.5, and below allows XSS. The fixed versions are 3.24.1 and 3.21.6...

Announcing the BlueHat 2024 Sessions

34 sessions from 54 presenters representing 20 organizations! We are thrilled to reveal the lineup of speakers and presentations for the 23rd BlueHat Security Conference, in Redmond WA from Oct 29-30. This year's conference continues the BlueHat ethos and Secure Future Initiative mission of...

PT-2024-30676 · Gotenna · Gotenna Pro Atak Plugin

Name of the Vulnerable Software and Affected Versions: goTenna Pro ATAK Plugin affected versions not specified Description: The goTenna Pro ATAK Plugin has a default setting to share Automatic Position, Location, and Information PLI updates every 60 seconds once the plugin is active and goTenna i...

"There is no business school class that would ever sit down and design Talos"

As part of the celebrations of Cisco Talos turning 10, wed like to take you back to where it all began: How we formed our mission of protecting our customers and making the internet suck a bit less, an insight into our culture, and how we came to work with some of the most talented human beings o...

Advisory ROSA-SA-2024-2436

software: cfengine 3.21.3 OS: ROSA-CHROME packageevrstring: cfengine-3.21.3-1 CVE-ID: CVE-2021-36756 BDU-ID: None CVE-Crit: MEDIUM CVE-DESC.: There is no SSL certificate validation in CFEngine Enterprise. CVE-STATUS: Fixed CVE-REV: To close, execute command: sudo dnf update cfengine CVE-ID:...

CVE-2024-33844

The 'control' in Parrot ANAFI USA firmware 1.10.4 does not check the MAVMISSIONTYPE0, 1, 2, 255, which allows attacker to cut off the connection between a controller and the drone by sending MAVLink MISSIONCOUNT command with a wrong MAVMISSIONTYPE...

Parrot ANAFI 安全漏洞

The Parrot ANAFI is a drone product from the French company Parrot. A security vulnerability exists in Parrot ANAFI USA firmware version 1.10.4, which originates from a vulnerability that allows an attacker to disconnect the controller from the drone by sending the MAVLink MISSIONCOUNT command wi...

PT-2024-25506 · Parrot · Parrot Anafi Usa

Name of the Vulnerable Software and Affected Versions: Parrot ANAFI USA firmware version 1.10.4 Description: The issue concerns a lack of validation for the MAV MISSION TYPE in the Parrot ANAFI USA firmware, specifically for values 0, 1, 2, and 255. This allows an attacker to disrupt the connecti...

What does "democratizing cloud security" mean?

Due to the unprecedented growth of cloud technology, the democratization of cloud security -- making everyone in an organization a stakeholder in security practices -- has become a necessity. But how do organizations undertake this mission?...

PT-2024-22912 · Unknown · Px4-Autopilot

Name of the Vulnerable Software and Affected Versions: PX4 Autopilot version 1.14.0 Description: An issue in the mission block.cpp component allows an attacker to manipulate the flight path, potentially causing crashes of the drone by altering the home point location. Recommendations: For PX4...

The vulnerability of the software for HCL Sametime Chat and Meetings lies in the lack of protection for operational data, which allows attackers to disclose protected information.

The vulnerability of the HCL Sametime Chat and Meetings software lies in the lack of protection for mission-critical data. Exploiting this vulnerability could allow an attacker to disclose sensitive information that is protected by security measures...

CVE-2024-25123

MSS Mission Support System is an open source package designed for planning atmospheric research flights. In file: index.py, there is a method that is vulnerable to path manipulation attack. By modifying file paths, an attacker can acquire sensitive information from different resources. The filena...

CVE-2024-25123 Path Manipulation in file mslib/index.py in MSS

MSS Mission Support System is an open source package designed for planning atmospheric research flights. In file: index.py, there is a method that is vulnerable to path manipulation attack. By modifying file paths, an attacker can acquire sensitive information from different resources. The filena...

CVE-2024-25123 Path Manipulation in file mslib/index.py in MSS

MSS Mission Support System is an open source package designed for planning atmospheric research flights. In file: index.py, there is a method that is vulnerable to path manipulation attack. By modifying file paths, an attacker can acquire sensitive information from different resources. The filena...

Mission Support System security breach

Mission Support System is the mission support system software used to plan atmospheric research flights. A security vulnerability exists in Mission Support System versions 5.0.0 through 8.3.3 and earlier that could allow an attacker to obtain sensitive information via the file mslib/index.py...