ManageEngine Exchange Reporter Plus Installed (Windows)

Binary data manageengineexchangereporterpluswininstalled.nbin...

Kibana 7.17.29, 8.17.8, 8.18.3, 9.0.3 Security Update (ESA-2025-09)

Kibana Heap Corruption via Crafted HTML Page due to Chromium Type Confusion ESA-2025-09 On March 10, 2025, Google announced CVE-2025-2135, which can lead to heap corruption via a crafted HTML page through a Type Confusion vulnerability. Affected Versions: Kibana versions up to and including...

Between Buzz and Reality: The CTEM Conversation We All Need

I had the honor of hosting the first episode of the Xposure Podcast live from Xposure Summit 2025. And I couldn't have asked for a better kickoff panel: three cybersecurity leaders who don't just talk security, they live it. Let me introduce them. Alex Delay , CISO at IDB Bank, knows what it mean...

MICROSENS NMP Web+

RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to gain system access, overwrite files or execute arbitrary code. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities, such...

CVE-2025-6511

creationtimestamp| type| source ---|---|--- 2025-06-23 09:35:34+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114731996519003743 2025-06-23 16:47:00+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19214 2025-06-23 17:31:42+00:00| published-proof-of-concept|...

The vulnerability of the IBM Verify Identity Access Digital Credentials access control system lies in the shortcomings of its error reporting mechanism, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the IBM Verify Identity Access Digital Credentials access control system is related to deficiencies in the error reporting mechanism. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

CVE-2022-50136

In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Fix duplicated reported IWCMEVENTCONNECTREPLY event If siwrecvmparr returns -EAGAIN, it means that the MPA reply hasn't been received completely, and should not report IWCMEVENTCONNECTREPLY in this case. This may trigge...

CVE-2025-47293

creationtimestamp| type| source ---|---|--- 2025-06-19 21:44:47+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18881 2025-06-19 23:55:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrypwr7obe2o...

CVE-2025-38036

creationtimestamp| type| source ---|---|--- 2025-06-19 13:39:38+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18848 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...

Emission Impossible: Privacy-Preserving Carbon Emissions Claims

Information and Communication Technologies ICT have a significant climate impact, and data centres account for a large proportion of the carbon emissions from ICT. To achieve sustainability goals, it is important that all parties involved in ICT supply chains can track and share accurate carbon...

The vulnerability of the KVv2 plugin for the Vault Community Edition and Vault Enterprise archiving platform allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the KVv2 plugin for the Vault Community Edition and Vault Enterprise archiving platform relates to deficiencies in the error reporting mechanism. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected informatio...

Data Breach Reporting for regulatory requirements with Microsoft Data Security Investigations​​

Seventy-four percent of organizations surveyed experienced at least one data security incident with their business data exposed in the previous year as reported in Microsoft’s Data Security Index: Trends, insights, and strategies to secure data report. Despite the best people, process and...

CVE-2022-50136

In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Fix duplicated reported IWCMEVENTCONNECTREPLY event If siwrecvmparr returns -EAGAIN, it means that the MPA reply hasn't been received completely, and should not report IWCMEVENTCONNECTREPLY in this case. This may trigge...

UBUNTU-CVE-2022-50092

In the Linux kernel, the following vulnerability has been resolved: dm thin: fix use-after-free crash in dmsmregisterthresholdcallback Fault inject on pool metadata device reports: BUG: KASAN: use-after-free in dmpoolregistermetadatathreshold+0x40/0x80 Read of size 8 at addr ffff8881b9d50068 by...

The vulnerability of the IBM InfoSphere Information Server software platform, related to deficiencies in the error reporting mechanism, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the IBM InfoSphere Information Server software platform is related to deficiencies in the error reporting mechanism. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

AVEVA PI Data Archive

RISK EVALUATION Successful exploitation of these vulnerabilities could shut down necessary subsystems and cause a denial-of-service condition. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities, such as: Minimize...

CVE-2025-41662

creationtimestamp| type| source ---|---|--- 2025-06-11 08:04:57+00:00| seen| https://infosec.exchange/users/certvde/statuses/114663692500389345 2025-06-11 08:05:02+00:00| seen| https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3lrcx4ijeuks2 2025-06-11 08:32:31+00:00| seen|...

Online Fire Reporting System /request-details.php File SQL Injection Vulnerability

Online Fire Reporting System is an online fire reporting system. The Online Fire Reporting System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter requestid in the file /request-details.php. An attacker ca...

Traffic Offense Reporting System saveuser.php File Cross-Site Scripting Vulnerability

Traffic Offense Reporting System is a traffic violation reporting system. Traffic Offense Reporting System has a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the saveuser.php file parameters...

Online Fire Reporting System /reporting.php File SQL Injection Vulnerability

Online Fire Reporting System is an online fire reporting system. The Online Fire Reporting System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally entered SQL statement in the parameter fullname in the file /reporting.php. The vulnerability c...