Akamai CloudTest code-related vulnerabilities

Akamai CloudTest is a suite of scalable load testing platforms from Akamai Corporation. A code issue vulnerability exists in Akamai CloudTest versions prior to 2025.06.09 that stems from vulnerability to server-side request forgery attacks...

CVE-2025-5682 Klaro Cookie & Consent Management - Moderately critical - Cross-site Scripting - SA-CONTRIB-2025-080

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Klaro Cookie & Consent Management allows Cross-Site Scripting XSS.This issue affects Klaro Cookie & Consent Management: from 0.0.0 before 3.0.7...

AZL-64374 CVE-2024-6174 affecting package cloud-init for versions less than 23.3-7

When a non-x86 platform is detected, cloud-init grants root access to a hardcoded url with a local IP address. To prevent this, cloud-init default configurations disable platform enumeration...

ZOHO ManageEngine Exchange Reporter Plus security vulnerabilities

ZOHO ManageEngine Exchange Reporter Plus is a Web-based Exchange Server reporting software from ZOHO, Inc. A security vulnerability exists in ZOHO ManageEngine Exchange Reporter Plus 5722 and prior versions that stems from a stored cross-site scripting attack...

octo-sts code issue vulnerabilities

octo-sts is a Chainguard's GitHub security token service open-sourced by octo-sts. A code issue vulnerability exists in octo-sts versions prior to v0.5.3, which stems from an unauthenticated server-side request forgery vulnerability...

Iroha Board security vulnerabilities

iroha Board is an e-learning system from iroha Japan. A security vulnerability exists in iroha Board v0.10.12 and earlier versions, which stems from a direct request issue that could allow an attacker to view non-public content...

iOS Simulator MCP Server: Operating System Command Injection Vulnerability

iOS Simulator MCP Server is an MCP server for interacting with iOS Simulator by Joshua Yoes, an individual developer. An operating system command injection vulnerability exists in iOS Simulator MCP Server versions prior to 1.3.3, which stems from a command injection vulnerability in some MCP Serv...

wildfly-openssl: memory leak per HTTP session creation in WildFly OpenSSL

A memory leak flaw was found in WildFly OpenSSL in versions prior to 1.1.3.Final, where it removes an HTTP session. This flaw allows an attacker to cause an Out of memory OOM issue, leading to a denial of service. The highest threat from this vulnerability is to system availability...

Julia Registrator.jl command injection vulnerability

Julia Registrator.jl is a Julia open source registration bot for Julia packages. A command injection vulnerability exists in Julia Registrator.jl versions prior to 1.9.5, which stems from a script injection that could lead to remote code execution...

SUSE CVE-2025-6426

The executable file warning did not warn users before opening files with the terminal extension. This bug only affects Firefox for macOS. Other versions of Firefox are unaffected.. This vulnerability was fixed in Firefox 140, Firefox ESR 128.12, Thunderbird 140, and Thunderbird 128.12...

CVE-2025-49853 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in ControlID iDSecure On-premises

ControlID iDSecure On-premises versions 4.7.48.0 and prior are vulnerable to SQL injections which could allow an attacker to leak arbitrary information and insert arbitrary SQL syntax into SQL queries...

CVE-2025-6430

When a file download is specified via the Content-Disposition header, that directive would be ignored if the file was included via a embed or object tag, potentially making a website vulnerable to a cross-site scripting attack. This vulnerability affects Firefox 140, Firefox ESR 128.12, Thunderbi...

PT-2025-34935

Name of the Vulnerable Software and Affected Versions: D-Link DCS-825L firmware versions prior to 1.09.02 Description: The D-Link DCS-825L firmware contains a flaw in the watchdog script mydlink-watch-dog.sh. This script blindly respawns binaries, including dcp and signalc, without verifying thei...

Quest Software KACE Systems Management Appliance security vulnerabilities

Quest Software KACE Systems Management Appliance Quest KACE SMA is an automated and simplified IT systems management platform from Quest Software, USA. A security vulnerability exists in the Quest Software KACE Systems Management Appliance that stems from a flaw in the SSO authentication handling...

70mai 1S Authorization Issue Vulnerability

70mai 1S is a smart recorder from 70mai 70mai, a Chinese company. An authorization issue vulnerability exists in 70mai 1S 20250611 and prior versions, which stems from improper authentication...

70mai M300 security vulnerabilities

70mai M300 is a smart logger from 70mai 70mai, a Chinese company. A security vulnerability exists in 70mai M300 20250611 and prior versions, which stems from insufficient credential protection...

70mai M300 security vulnerabilities

70mai M300 is a smart logger from 70mai 70mai, a Chinese company. A security vulnerability exists in 70mai M300 20250611 and prior versions that stems from the use of default credentials...

SSLH Postback Link Vulnerability

sslh is an application protocol multiplexer by the individual developer Yves Rutschle. A backlink vulnerability exists in versions prior to sslh 2.2.2, which stems from improper link resolution before file access...

LLM Embedding-Based Attribution (LEA): Quantifying Source Contributions to Generative Model'S Response for Vulnerability Analysis

Security vulnerabilities are rapidly increasing in frequency and complexity, creating a shifting threat landscape that challenges cybersecurity defenses. Large Language Models LLMs have been widely adopted for cybersecurity threat analysis. When querying LLMs, dealing with new, unseen...

One-shot Face Sketch Synthesis in the Wild via Generative Diffusion Prior and Instruction Tuning

Face sketch synthesis is a technique aimed at converting face photos into sketches. Existing face sketch synthesis research mainly relies on training with numerous photo-sketch sample pairs from existing datasets. However, these large-scale discriminative learning methods will have to face proble...