PT-2025-40032

Name of the Vulnerable Software and Affected Versions Quadient DS-700 iQ devices through 2025-09-30 Description Quadient DS-700 iQ devices may experience a race condition when quickly clicking the Question Mark button, the Help Button, the About button, and the Help Button in sequence. This can...

CVE-2025-61792

Quadient DS-700 iQ devices through 2025-09-30 might have a race condition during the quick clicking of in order the Question Mark button, the Help Button, the About button, and the Help Button, leading to a transition out of kiosk mode into local administrative access. NOTE: the reporter indicate...

Quadient DS-700 iQ competitive conditions issue vulnerabilities

The Quadient DS-700 iQ is an automated envelope sealer device from Quadient, France. A Competitive Condition Issue vulnerability exists in the Quadient DS-700 iQ version 2025-09-30 and earlier, which originates from a competitive condition that exists when clicking the Question Mark button, the...

OESA-2025-2348 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel's JSM serial driver, a resource leak vulnerability exists in the probe function. The error path needs to properly unwind instead of just returning directly, which may lead to resource leakage...

HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack)

A flaw was found in handling multiplexed streams in the HTTP/2 protocol. A client can repeatedly make a request for a new multiplex stream and immediately send an RSTSTREAM frame to cancel it. This creates extra work for the server setting up and tearing down the streams while not hitting any...

Rapid7 AppSpider Pro security vulnerabilities

Rapid7 AppSpider Pro is a dynamic application security testing solution from Rapid7, Inc. that allows you to scan Web and mobile applications for vulnerabilities. A security vulnerability exists in Rapid7 AppSpider Pro versions prior to 7.5.021 that stems from an access control flaw in the...

What happens when you engage Cisco Talos Incident Response?

In today's world, cybersecurity incidents are not a matter of if, but when and how. From ransomware attacks to data breaches exposing sensitive information, organizations face a changing threat landscape. As a result of cybersecurity attacks, organizations can experience downtime, financial losse...

Intel Rapid Storage Technology Privilege Escalation

The vulnerability of the Intel Rapid Storage Technology implementation is related to access control errors. Exploiting this vulnerability can allow attackers to enhance their privileges...

Why a Cisco Talos Incident Response Retainer is a game-changer

In today's hyper-connected world, cyber attacks are not a matter of if but when. Ransomware, phishing and data breaches dominate headlines. For any organization, the stakes are high and the impact can be wide. A cybersecurity breach can impact your organization's ability to conduct normal busines...

HTTP/2 2.0 - Denial Of Service (DOS)

!/usr/bin/env python3 """ Exploit Title: HTTP/2 2.0 - Denial Of Service DOS Google Dork: -NA- Date: 29th August 2025 Exploit Author: Madhusudhan Rajappa Vendor Homepage: -NA- Software Link: -NA- Version: HTTP/2.0 Tested on: -NA- CVE : CVE-2023-44487 """ import asyncio import ssl import time impor...

When You’re Always Under #DDoS Attack

We recently mitigated a 1.55 terabit per second Tbps, DDoS attack for a steady customer of ours. This particular customer is a reputable domain name service DNS provider. I’ve personally used them for over a decade to register domains for all the projects I will never complete or, tbh, start. But...

rapid-router (>=1.0.0.post0.dev406, <=1.0.0.post0.dev408) potentially affected by CVE-2025-57833 via django (1.8.3)

django PYPI version 1.8.3 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - rapid-router =1.0.0.post0.dev406, =1.0.0.post0.dev408 Source cves: CVE-2025-57833 Source advisory: OSV:GHSA-6W2R-R2M5-XQ5W...

aimmo (>=0.69.7b417, <=0.69.8), cfl-common (>=4.30.7, <=4.30.8) +2 more potentially affected by CVE-2025-57833 via django (2.2.21)

django PYPI version 2.2.21 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - aimmo =0.69.7b417, =4.30.7, =4.30.7, =4.30.8 - rapid-router 2.7.5 Source cves: CVE-2025-57833 Source advisory: OSV:GHSA-6W2R-R2M5-XQ5W...

rapid-router (>=1.0.0.post0.dev74, <=1.0.0.post0.dev405) potentially affected by CVE-2025-57833 via django (1.8.2)

django PYPI version 1.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - rapid-router =1.0.0.post0.dev74, =1.0.0.post0.dev405 Source cves: CVE-2025-57833 Source advisory: OSV:GHSA-6W2R-R2M5-XQ5W...

Stopping ransomware before it starts: Lessons from Cisco Talos Incident Response

Over the past two and a half years January 2023 through June 2025, Cisco Talos Incident Response Talos IR has responded to numerous engagements that we classified as pre-ransomware incidents. Talos looked back to analyze what key security measures were credited with deterring ransomware deploymen...

Friday Squid Blogging: The Origin and Propagation of Squid

New research paywalled: Editor 's summary: Cephalopods are one of the most successful marine invertebrates in modern oceans, and they have a 500-million-year-old history. However, we know very little about their evolution because soft-bodied animals rarely fossilize. Ikegami et al. developed an...

Malicious code in rapid-speedy-cspgen (npm)

The package rapid-speedy-cspgen was found to contain malicious code...

MAL-2025-31626 Malicious code in rapid-speedy-cspgen (npm)

The package rapid-speedy-cspgen was found to contain malicious code...

CVE-2025-20099

Improper access control for some IntelR Rapid Storage Technology installation software may allow an authenticated user to potentially enable escalation of privilege via local access...

FreeBSD : www/varnish7 -- Denial of Service in HTTP/2 (e2d49973-785a-11f0-a1c0-0050569f0b83)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the e2d49973-785a-11f0-a1c0-0050569f0b83 advisory. Varnish Development Team reports: A denial of service attack can be performed on Varnish Cache servers...