The vulnerability of HashiCorp’s Vault and Vault Enterprise archiving platforms relates to errors in the certificate validation process, allowing attackers to bypass the authentication process.

The vulnerability of the HashiCorp Vault and Vault Enterprise archiving platforms relates to errors in the certificate validation process. Exploiting this vulnerability can allow an attacker to bypass the authentication process...

The vulnerabilities of HashiCorp’s Vault and Vault Enterprise storage platforms, related to authentication mechanisms’ deficiencies, allow attackers to trigger service interruptions.

The vulnerability of the HashiCorp Vault and Vault Enterprise archiving platforms relates to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow an attacker to cause service interruptions...

CVE-2024-51453

creationtimestamp| type| source ---|---|--- 2025-05-28 16:02:55+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114586299499494242 2025-05-28 16:29:44+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqamry7k4dr2...

How to load unsigned or fake-signed apps on iOS

TL;DR Issues commonly arise when clients provide an application which is unsigned or does not meet device requirements. Installing an application can be challenging without a Mac, access to Xcode or if the client is having trouble signing the application manually as this is normally done by the a...

Intel Core Ultra Processors CNVi Security Update May 2025

Intel has informed HP of a potential security in the Intel® Integrated Connectivity I/O interface CNVi for some Intel® Core™ Ultra Processors, which might allow escalation of privilege. Intel is releasing firmware updates to mitigate this potential vulnerability. Intel has released updates to...

Intel 2025.1 IPU – 13th and 14th Generation Processors Security Update

Intel has informed HP a potential security vulnerability in some 13th and 14th Generation Intel® Core™ Processors, which might allow denial of service. Intel is releasing microcode and UEFI reference code updates to mitigate this potential vulnerability. Intel has released updates to mitigate the...

Intel 2025.2 IPU - Processors May 2025 Security Update

Intel has informed HP of potential security vulnerabilities in some Intel® Processors, which might allow denial of service or information disclosure. Intel is releasing microcode updates to mitigate these potential vulnerabilities. Intel has released updates to mitigate the potential...

CVE-2025-40650

creationtimestamp| type| source ---|---|--- 2025-05-26 13:47:26+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17561 2025-05-26 14:08:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lq3dy3ntmz2a 2025-05-26 15:28:54+00:00| seen|...

CVE-2025-40653

creationtimestamp| type| source ---|---|--- 2025-05-26 13:47:24+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17559 2025-05-26 13:54:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lq3d6j4pzo2e 2025-05-26 15:24:26+00:00| seen|...

CERTFR-2025-ACT-022

creationtimestamp| type| source ---|---|--- 2025-05-26 12:40:53+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3lq3734nb3h22 2025-05-26 12:40:54+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/114574180514996446...

CVE-2024-3219

The “socket” module provides a pure-Python fallback to the socket.socketpair function for platforms that don’t support AFUNIX, such as Windows. This pure-Python implementation uses AFINET or AFINET6 to create a local connected pair of sockets. The connection between the two sockets was not verifi...

CVE-2024-7517

A command injection vulnerability in Brocade Fabric OS before 9.2.0c, and 9.2.1 through 9.2.1a on IP extension platforms could allow a local authenticated attacker to perform a privileged escalation via crafted use of the portcfg command. This specific exploitation is only possible on IP Extensio...

CVE-2024-29953

A vulnerability in the web interface in Brocade Fabric OS before v9.2.1, v9.2.0b, and v9.1.1d prints encoded session passwords on session storage for Virtual Fabric platforms. This could allow an authenticated user to view other users' session encoded passwords...

CVE-2024-27873

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8. Processing a maliciously crafted video file may lead to unexpected app...

CVE-2024-40809

A logic issue was addressed with improved checks. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8, visionOS 1.3, watchOS 10.6. A shortcut may be able to bypass Internet permission requirements...

CVE-2024-40777

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, tvOS 17.6, visionOS 1.3, watchOS 10.6. Processing a maliciously crafted file may lead to unexpected app termination...

CVE-2024-40799

An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8, tvOS 17.6, visionOS 1.3, watchOS 10.6. Processing a maliciously crafted file may...

CVE-2024-40795

This issue was addressed with improved data protection. This issue is fixed in iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, tvOS 17.6, watchOS 10.6. An app may be able to read sensitive location information...

CVE-2024-27811

The issue was addressed with improved checks. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, visionOS 1.2, watchOS 10.5. An app may be able to elevate privileges...

CVE-2024-27828

The issue was addressed with improved memory handling. This issue is fixed in iOS 17.5 and iPadOS 17.5, tvOS 17.5, visionOS 1.2, watchOS 10.5. An app may be able to execute arbitrary code with kernel privileges...