Microsoft NTLM 安全漏洞

Microsoft NTLM is a Microsoft USA authentication protocol used on networks including systems running the Windows operating system as well as standalone systems. A security vulnerability exists in Microsoft NTLM that originates from an attacker exploiting the vulnerability to perform a spoofing...

Microsoft NTLM 安全漏洞

Microsoft NTLM is a Microsoft USA authentication protocol used on networks including systems running the Windows operating system as well as standalone systems. A security vulnerability exists in Microsoft NTLM that originates from an attacker exploiting the vulnerability to perform a spoofing...

EUVD-2025-34045

SOOP-CLM developed by PiExtract has a Server-Side Request Forgery vulnerability, allowing privileged remote attackers to read server files or probe internal network information...

CVE-2025-11674

SOOP-CLM developed by PiExtract has a Server-Side Request Forgery vulnerability, allowing privileged remote attackers to read server files or probe internal network information...

[SECURITY] Fedora 41 Update: prometheus-podman-exporter-1.19.0-1.fc41

Prometheus exporter for podman environments exposing containers, pods, images, volumes and networks information...

[SECURITY] Fedora 42 Update: prometheus-podman-exporter-1.19.0-1.fc42

Prometheus exporter for podman environments exposing containers, pods, images, volumes and networks information...

F5 Networks BIG-IP : IPMI vulnerability (K000156992)

The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K000156992 advisory. AMI MegaRAC SPx12 and SPx13 devices have Insufficient Verification of Data Authenticity.CVE-2023-28863 Tenable has...

A Graph-Attentive LSTM Model for Malicious URL Detection

Malicious URLs pose significant security risks as they facilitate phishing attacks, distribute malware, and empower attackers to deface websites. Blacklist detection methods fail to identify new or obfuscated URLs because they depend on pre-existing patterns. This work presents a hybrid deep...

EUVD-2025-33583

An improper input neutralization vulnerability in the management web interface of the Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and execute arbitrary commands. The security risk posed by this issue is significantly minimized when CLI...

CVE-2025-4615

An improper input neutralization vulnerability in the management web interface of the Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and execute arbitrary commands. The security risk posed by this issue is significantly minimized when CLI...

CVE-2025-4614

An information disclosure vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to view session tokens of users authenticated to the firewall web UI. This may allow impersonation of users whose session tokens are leaked. The security risk posed by this issue...

EUVD-2025-33386

An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the Device Template Definition page that, when visited by another user, enables the attacker to execute commands with the...

EUVD-2025-33387

An Authentication Bypass by Primary Weakness in the FTP server of Juniper Networks Junos OS allows an unauthenticated, network-based attacker to get limited read-write access to files on the device. When the FTP server is enabled and a user named "ftp" or "anonymous" is configured, that user can...

CVE-2025-59962

An Access of Uninitialized Pointer vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved with BGP sharding configured allows an attacker triggering indirect next-hop updates, along with timing outside the attacker's control, to cause rpd to crash and...

CVE-2025-59964

This CVE concerns Juniper Networks Junos OS on SRX4700 devices. A Use of Uninitialized Resource vulnerability in the PFE (Packet Forwarding Engine) can be triggered by forwarding-options sampling, allowing an unauthenticated, network-based attacker to cause a DoS. Specifically, when traffic desti...

CVE-2025-52961

CVE-2025-52961 affects Juniper Networks Junos OS Evolved on PTX10001-36MR, PTX10002-36QDD, PTX10004, PTX10008, PTX10016. The issue is an Uncontrolled Resource Consumption in the CFM daemon (cfmd) and CFM Manager (cfmman) that allows an unauthenticated adjacent attacker to trigger Denial-of-Servic...

Rockwell Automation Stratix

RISK EVALUATION Successful exploitation of this vulnerability could result in arbitrary code execution. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability, such as: Minimize network exposure for all control system...

Juniper Networks Junos Space 跨站脚本漏洞

Juniper Networks Junos Space is a suite of network management solutions from Juniper Networks, Inc. The solution supports automated configuration, monitoring, and troubleshooting of devices and services throughout their lifecycle. A cross-site scripting vulnerability exists in Juniper Networks...

Juniper Networks Junos OS Evolved 代码问题漏洞

Juniper Networks Junos OS Evolved is an upgraded system of Juniper Networks' Junos OS. A code issue vulnerability exists in Juniper Networks Junos OS Evolved, which stems from the presence of a null pointer dereference in the evo-pfemand process, which could lead to a denial of service attack...

Juniper Networks Junos Space 跨站脚本漏洞

Juniper Networks Junos Space is a suite of network management solutions from Juniper Networks, Inc. The solution supports automated configuration, monitoring, and troubleshooting of devices and services throughout their lifecycle. A cross-site scripting vulnerability exists in Juniper Networks...