CVE-2025-59700: Insufficient Verification of Data Authenticity

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 patched in 13.6.12 LTS and 13.9.0 STS, allow a physically proximate attacker with root access to modify the Recovery Partition because of a lack of integrity protection...

Google Chrome security vulnerabilities

Google Chrome is a web browser from Google, Inc USA. A security vulnerability exists in Google Chrome prior to version 143.0.7499.41, which stems from an improper implementation of the download feature that could allow a remote attacker to bypass download protection via a specially crafted HTML...

CVE-2025-59700

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 patched in 13.6.12 LTS and 13.9.0 STS, allow a physically proximate attacker with root access to modify the Recovery Partition because of a lack of integrity protection...

CVE-2025-59700

The Entrust nShield Connect XC , nShield 5c , and nShield HSMi hardware security modules, running firmware versions through 13.6.11 or 13.7 , are vulnerable to unauthorized modification of the Recovery Partition . This issue stems from a lack of integrity protection , allowing a physically proxim...

PT-2025-48701

Name of the Vulnerable Software and Affected Versions Entrust nShield Connect XC versions through 13.6.11 Entrust nShield 5c versions through 13.6.11 Entrust nShield HSMi versions through 13.6.11 Entrust nShield Connect XC version 13.7 Entrust nShield 5c version 13.7 Entrust nShield HSMi version...

PT-2025-48746

Name of the Vulnerable Software and Affected Versions MCP TypeScript SDK versions prior to 1.24.0 Description The Model Context Protocol MCP TypeScript SDK does not enable DNS rebinding protection by default for HTTP-based servers. If an HTTP-based MCP server is running on localhost without...

MCP TypeScript SDK security vulnerabilities

MCP TypeScript SDK is a Model Context Protocol open source developer toolkit for Model Context Protocol servers and clients. A security vulnerability exists in MCP TypeScript SDK versions prior to 1.24.0 that stems from not enabling DNS rebinding protection by default, which could lead to bypassi...

PT-2026-2532

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.18.0-rc1-custom-g1a3d6d7cd014 Description The Linux kernel contained a use-after-free issue within the mlxsw spectrum mr module. A missing mutex acquisition during multicast route deletion could lead to this...

Description of the security update for the elevation of privilege vulnerability in Visual Studio 2015 Update 3: September 11, 2018

Description of the security update for the elevation of privilege vulnerability in Visual Studio 2015 Update 3: September 11, 2018 Applies to: All Visual Studio 2015 Update 3 editions except Build Tools Note Notice In November 2020, the content of this article was updated to clarify the affected...

Microsoft Security Advisory: Update to improve credentials protection and management: May 13, 2014

Microsoft Security Advisory: Update to improve credentials protection and management: May 13, 2014 INTRODUCTION Microsoft has released a Microsoft security advisory about this problem for IT professionals. The security advisory contains additional security-related information. To view the securit...

HarmonyOS File Management Unauthorized Access

The vulnerability of the File Management module in the HarmonyOS operating system is related to insufficient protection of service data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

Notepad HarmonyOS Unauthorized Access

The vulnerability of the Notepad module in the HarmonyOS operating system is related to insufficient protection of sensitive data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

Gallery app HarmonyOS Data Compromise

The vulnerability of the Gallery app for the HarmonyOS operating system is related to insufficient protection of sensitive data. Exploiting this vulnerability could allow attackers to compromise the confidentiality of the protected information...

Defend Post-Quantum Cryptography's “Harvest Now, Decrypt Later” with WAAP

Prepare for a quantum-safe future. Learn how Akamai App & API Protector helps stop the data leaks that fuel “harvest now, decrypt later” attacks...

Banning VPNs

This is crazy. Lawmakers in several US states are contemplating banning VPNs, because…think of the children! As of this writing, Wisconsin lawmakers are escalating their war on privacy by targeting VPNs in the name of "protecting children" in A.B. 105/S.B. 130. It’s an age verification bill that...

VMware VDP Known SSH Key

VMware vSphere Data Protection appliances 5.5.x through 6.1.x contain a knownssh private key for the local user admin who is a sudoer without password from kittysploit import from lib.protocols.ssh.sshclient import Sshclient from lib.exploit.handler import Handler class ModuleExploit, Sshclient,...

ASB-A-432439762

In pkvmguestrelinquishtohost of memprotect.c, there is a possible configuration data leak due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

WhiteLie: A Robust System for Spoofing User Data in Android Platforms

Android employs a permission framework that empowers users to either accept or deny sharing their private data for example, location with an app. However, many apps tend to crash when they are denied permission, leaving users no choice but to allow access to their data in order to use the app. In...

What’s your CNAPP maturity?

More and more enterprises are opting for cloud-native application protection platforms CNAPPs instead of complex and hard-to-manage cloud security point solutions. Find out where your organization is on its CNAPP maturity journey...

FortiADC Operational Data Unauthorized Access

The vulnerability of the FortiADC application delivery controller is related to insufficient protection for operational data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...