PT-2025-49566

Name of the Vulnerable Software and Affected Versions usememos memos version 0.25.2 Description A flaw exists in the Identity Provider service of usememos memos that involves incorrect access control. Attackers with limited privileges can modify or delete registered identity providers. This can...

CVE-2025-65797

Incorrect access control in the Identity Provider service of usememos memos v0.25.2 allows attackers with low-level privileges to arbitrarily modify or delete registered identity providers, leading to an account takeover or Denial of Service DoS...

GHSA-5MH9-3JWC-RP59 vulnerabilities

Vulnerabilities for packages: nri-apache, policy-controller, headlamp, newrelic-infrastructure-agent, pgtimetable, ko, kubeflow, kubelet-csr-approver, kubernetes-event-exporter, gogatekeeper, rancher-telemetry, terraform-mcp-server, harbor-scanner-trivy, osv-scanner, polaris, rancher-system-agent...

CVE-2025-61727 vulnerabilities

Vulnerabilities for packages: nri-apache, policy-controller, headlamp, newrelic-infrastructure-agent, pgtimetable, ko, kubeflow, kubelet-csr-approver, kubernetes-event-exporter, gogatekeeper, rancher-telemetry, terraform-mcp-server, harbor-scanner-trivy, osv-scanner, polaris, rancher-system-agent...

GHSA-5MH9-3JWC-RP59 vulnerabilities

Vulnerabilities for packages: k8ssandra-client, kubo-fips, keda-fips, temporal-server, dragonfly-operator-fips, nvidia-nsight-compute-13.2, rook-fips, azuredisk-csi-fips, cluster-api-aws-controller-fips, gpu-operator-fips, gatekeeper-fips, protoc-gen-go, mkcert, grafana-pyroscope,...

CVE-2025-66558

Nextcloud Twofactor WebAuthn is the WebAuthn Two-Factor Provider for Nextcloud. Prior to 1.4.2 and 2.4.1, a missing ownership check allowed an attack to take-away a 2FA webauthn device when correctly guessing a 80-128 character long random string of letters, numbers and symbols. The victim would...

GHSA-7C64-F9JR-V9H2 vulnerabilities

Vulnerabilities for packages: gomplate-fips, k8ssandra-client, nri-postgresql, opentelemetry-operator, db-operator, kubo-fips, keda-fips, temporal-server, dragonfly-operator-fips, secrets-store-csi-driver-provider-gcp, nvidia-nsight-compute-13.2, rook-fips, dcgm-exporter-fips, azuredisk-csi-fips,...

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: gomplate-fips, k8ssandra-client, nri-postgresql, opentelemetry-operator, db-operator, kubo-fips, keda-fips, temporal-server, dragonfly-operator-fips, secrets-store-csi-driver-provider-gcp, nvidia-nsight-compute-13.2, rook-fips, dcgm-exporter-fips, azuredisk-csi-fips,...

wp_exploitation_framework

🚀 WordPress PWN Framework v5.0 - AI-Powered Edition !Python...

CVE-2025-27935 Authentication Bypass in OTP (One-time Passcode) IdP Adapter Integration Kit

The OTP Integration Kit for PingFederate fails to enforce HTTP method validation and state validation properly. The server advances the authentication state without verifying the OTP, thereby bypassing multi-factor authentication...

CVE-2025-27935 Authentication Bypass in OTP (One-time Passcode) IdP Adapter Integration Kit

The OTP Integration Kit for PingFederate fails to enforce HTTP method validation and state validation properly. The server advances the authentication state without verifying the OTP, thereby bypassing multi-factor authentication...

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: nri-apache, nri-redis, buildkitd, gomplate, grafana-operator, newrelic-infrastructure-agent, kubelet-csr-approver, kubernetes-dashboard, gogatekeeper, polaris, nri-elasticsearch, sonobuoy, regclient, multus-cni, secrets-store-csi-driver-provider-azure,...

GHSA-7C64-F9JR-V9H2 vulnerabilities

Vulnerabilities for packages: nri-apache, nri-redis, buildkitd, gomplate, grafana-operator, newrelic-infrastructure-agent, kubelet-csr-approver, kubernetes-dashboard, gogatekeeper, polaris, nri-elasticsearch, sonobuoy, regclient, multus-cni, secrets-store-csi-driver-provider-azure,...

CVE-2022-50335

creationtimestamp| type| source ---|---|--- 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8...

Oracle Linux 9 : openssl (ELSA-2025-21255)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-21255 advisory. 3.5.1-4.0.1 - Enable openssl-fips-provider dependency Orabug: 36504822 - Temporary disable openssl-fips-provider dependency Orabug: 36504822 - Replace upstream...

openssl security update

3.5.1-4.0.1 - Enable openssl-fips-provider dependency Orabug: 36504822 - Temporary disable openssl-fips-provider dependency Orabug: 36504822 - Replace upstream references Orabug: 34340177 3.5.1.openela.0.1 - Add OpenELA specific changes 1:3.5.1-4 - Fix CVE-2025-9230 Resolves: RHEL-115929 1:3.5.1-...

CVE-2025-12419

Mattermost versions 10.12.x = 10.12.1, 10.11.x = 10.11.4, 10.5.x = 10.5.12, 11.0.x = 11.0.3 fail to properly validate OAuth state tokens during OpenID Connect authentication which allows an authenticated attacker with team creation privileges to take over a user account via manipulation of...

CVE-2025-65238

Incorrect access control in the getSubUsersByProvider function of OpenCode Systems USSD Gateway OC Release: 5 Version 6.13.11 allows attackers with low-level privileges to dump user records and access sensitive information...

CVE-2025-65235

OpenCode Systems USSD Gateway OC Release: 5 Version 6.13.11 was discovered to contain a SQL injection vulnerability via the ID parameter in the getSubUsersByProvider function...

AI Inference at the Edge: How Akamai’s Evolution Made It Possible

Read how Akamai, a pioneer in CDNs, is undergoing a profound strategic transformation into a diversified cloud and cybersecurity provider in the AI era...