CVE-2025-20049 Dario Health USB-C Blood Glucose Monitoring System Starter Kit Android Application Cross-site Scripting

The Dario Health portal service application is vulnerable to XSS, which could allow an attacker to obtain sensitive information...

CVE-2025-24849 Dario Health USB-C Blood Glucose Monitoring System Starter Kit Android Application Cleartext Transmission of Sensitive Information

Lack of encryption in transit for cloud infrastructure facilitating potential for sensitive data manipulation or exposure...

CVE-2025-24843 Dario Health USB-C Blood Glucose Monitoring System Starter Kit Android Application Storage of Sensitive Data in a Mechanism without Access Control

Insecure file retrieval process that facilitates potential for file manipulation to affect product stability and confidentiality, integrity, authenticity, and attestation of stored data...

CVE-2025-24843 Dario Health USB-C Blood Glucose Monitoring System Starter Kit Android Application Storage of Sensitive Data in a Mechanism without Access Control

Insecure file retrieval process that facilitates potential for file manipulation to affect product stability and confidentiality, integrity, authenticity, and attestation of stored data...

Millions of stalkerware users exposed again

There are many reasons not to use stalkerware, but the risk of getting exposed yourself seems to be a recurring deterrent, according to a new investigaton. As we have reported many times before, stalkerware-type apps are coded so badly that it’s possible to gain access to the back-end databases a...

Cisco Nexus 3000 9000 Series Switches Health Monitoring Diagnostics DoS (cisco-sa-n3kn9k-healthdos-eOqSWK4g)

According to its self-reported version, Cisco NX-OS Software is affected by a vulnerability. - A vulnerability in the health monitoring diagnostics of Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode could allow an unauthenticated, adjacent attacker t...

CVE-2025-20111

CVE-2025-20111 affects Cisco Nexus 3000/9000 Series switches (NX-OS standalone). The issue is in health monitoring diagnostics due to improper handling of specific Ethernet frames, allowing an unauthenticated, adjacent attacker to cause the device to reload and undergo DoS. Reported base score 7....

CVE-2025-20111 Cisco Nexus 3000 and 9000 Series Switches Layer 2 Ethernet Denial of Service Vulnerability

A vulnerability in the health monitoring diagnostics of Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode could allow an unauthenticated, adjacent attacker to cause the device to reload unexpectedly, resulting in a denial of service DoS condition. This...

Cisco Nexus 3000 and 9000 Series Switches Health Monitoring Diagnostics Denial of Service Vulnerability

A vulnerability in the health monitoring diagnostics of Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode could allow an unauthenticated, adjacent attacker to cause the device to reload unexpectedly, resulting in a denial of service DoS condition. This...

DEBIAN-CVE-2022-49565

In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel/lbr: Fix unchecked MSR access error on HSW The fuzzer triggers the below trace. 7763.384369 unchecked MSR access error: WRMSR to 0x689 tried to write 0x1fffffff8101349e at rIP: 0xffffffff810704a4...

CVE-2022-49565 perf/x86/intel/lbr: Fix unchecked MSR access error on HSW

In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel/lbr: Fix unchecked MSR access error on HSW The fuzzer triggers the below trace. 7763.384369 unchecked MSR access error: WRMSR to 0x689 tried to write 0x1fffffff8101349e at rIP: 0xffffffff810704a4...

WP Sessions Time Monitoring Plugin SQLi

The vulnerability of the WP Sessions Time Monitoring full-automatic content management system for WordPress exists due to the lack of security measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

SMA Solar Sunny Portal code-related vulnerabilities

SMA Solar Sunny Portal is a photovoltaic data monitoring platform from SMA Solar, Germany. It is used to monitor PV system operation in real time and to obtain performance data. A code issue vulnerability exists in versions prior to SMA Solar Sunny Portal 19.02.2024, which stems from...

Background check provider data breach affects 3 million people who may not have heard of the company

Employment screening company DISA Global Solutions has filed a data breach notification after a cyber incident on their network. DISA says a third party had access to its environment between February 9, 2024, and April 22, 2024. The attacker may have accessed over three million files containing...

GHSA-7MX2-6MM5-42M3 vulnerabilities

Vulnerabilities for packages: mysql...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: cass-operator, kaf, chartmuseum, wait-for-port, kubernetes-csi-livenessprobe, cert-exporter-fips, doppler-kubernetes-operator, nri-prometheus, prometheus-statsd-exporter, temporal-ui-server-fips, request-1279, goreleaser, dgraph, oras, tailscale, wazero,...

GHSA-236W-P7WF-5PH8 vulnerabilities

Vulnerabilities for packages: policy-controller-fips, weaviate, ollama, temporal-ui-server-fips, litestream, mc, ksops, docker-compose, harbor-scanner-trivy-fips, falcosidekick, helm-operator-fips, harbor-cli, kubernetes-csi-driver-hostpath, secrets-store-csi-driver-provider-azure, atlantis,...

How to Comply with PCI DSS 4.0 Requirements 6.4.3 and 11.6.1

The countdown to compliance is in its final stretch. With the third and final phase of PCI DSS 4.0 requirements taking effect on March 31, 2025, organizations are under increasing pressure to ensure their client-side security measures meet the new requirements. At Imperva, we’re committed to...

GHSA-G38C-WH3C-5H9R

creationtimestamp| type| source ---|---|--- 2025-02-24 12:05:45+00:00| seen| https://bsky.app/profile/azu.bsky.social/post/3liwcoiudqz2q 2025-04-02 14:16:10+00:00| seen| https://bsky.app/profile/tanfonto.wspanialy.eu.ap.brid.gy/post/3lltl6a4sptj2...

Data Leak Exposes TopSec's Role in China's Censorship-as-a-Service Operations

An analysis of a data leak from a Chinese cybersecurity company TopSec has revealed that it likely offers censorship-as-a-service solutions to prospective customers, including a state-owned enterprise in the country. Founded in 1995, TopSec ostensibly offers services such as Endpoint Detection an...