7272 matches found
Dell PowerProtect Data Manager Reporting 安全漏洞
Dell PowerProtect Data Manager Reporting is a data protection management software. An information disclosure vulnerability exists in Dell PowerProtect Data Manager Reporting, which arises from the program's failure to properly handle template input and can be exploited by an attacker to obtain...
Dell PowerProtect Data Manager Reporting 安全漏洞
Dell PowerProtect Data Manager Reporting is a data protection management software. An elevation of privilege vulnerability exists in Dell PowerProtect Data Manager Reporting, which can be exploited by an attacker to gain elevated privileges because the program fails to properly restrict API...
Dell PowerProtect Data Manager Reporting 安全漏洞
Dell PowerProtect Data Manager Reporting is a data protection management software. Dell PowerProtect Data Manager Reporting suffers from an improper escape vulnerability that stems from the program's failure to properly process output, no details of the vulnerability are available at this time...
Fedora 41 : java-17-openjdk (2025-22226bdb44)
The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-22226bdb44 advisory. April 2025 CPU Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this iss...
CVE-2022-47111
7-Zip 22.01 does not report an error for certain invalid xz files, involving block flags and reserved bits. Some later versions are unaffected...
Frogy2.0 - An Automated External Reconnaissance And Attack Surface Management (ASM) Toolkit
Frogy 2.0 is an automated external reconnaissance and Attack Surface Management ASM toolkit designed to map out an organization's entire internet presence. It identifies assets, IP addresses, web applications, and other metadata across the public internet and then smartly prioritizes them with...
Exploit for Code Injection in Foxcms
CVE-2025-29306 - FoxCMS Remote Code Execution Exploit !Pytho...
NetScout nGeniusONE 安全漏洞
NetScout nGeniusONE is a centralized application management and network performance solution from NetScout, Inc. A security vulnerability exists in NetScout nGeniusONE versions prior to 6.4.0 b2350 that stems from an authorization mode flaw in the reporting module...
CVE-2025-43864
creationtimestamp| type| source ---|---|--- 2025-04-24 14:55:06+00:00| published-proof-of-concept| https://github.com/remix-run/react-router/security/advisories/GHSA-f46r-rw29-r322 2025-04-25 01:10:56+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13367 2025-04-25...
CVE-2025-2543
creationtimestamp| type| source ---|---|--- 2025-04-24 09:12:20+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13206 2025-04-24 13:03:54+00:00| seen| https://t.me/cvedetector/23666 2025-04-24 14:19:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnkvnu3mu724...
CVE-2025-3761
creationtimestamp| type| source ---|---|--- 2025-04-24 07:19:21+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13192 2025-04-24 09:15:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnkenug2qx2r 2025-04-24 09:48:18+00:00| seen|...
ALBEDO Telecom Net.Time - PTP/NTP clock
RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to transmit passwords over unencrypted connections, resulting in the product becoming vulnerable to interception. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of...
marwer.gr Cross Site Scripting vulnerability OBB-4048936
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Infinite loop condition in Amazon.IonDotnet
Summary Amazon.IonDotnet ion-dotnet is a .NET library with an implementation of the Ion data serialization format. An issue exists in Amazon.IonDotnet and the RawBinaryReader class where, under certain conditions, an actor could trigger an infinite loop condition. Impact When reading binary Ion...
Fedora 40 : rpki-client (2025-d5fdbedb7f)
The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-d5fdbedb7f advisory. rpki-client 9.5 - rpki-client now includes arin.tal which is no longer legally encumbered. See https://www.arin.net/announcements/20250116-tal/ - rpki-client...
jobs.careerxperts.com Cross Site Scripting vulnerability OBB-4047584
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
isonewswire.com Cross Site Scripting vulnerability OBB-4047524
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2022-47112
7-Zip 22.01 is affected by CVE-2022-47112: it does not report an error for certain invalid xz files due to issues with stream flags and reserved bits. Some later versions are unaffected. Affected product: 7-Zip 22.01; root cause: inability to report errors for specific malformed xz inputs. Impact...
From Cyber Security Incident Management to Cyber Security Crisis Management in the European Union
Incident management is a classical topic in cyber security. Recently, the European Union EU has started to consider also the relation between cyber security incidents and cyber security crises. These considerations and preparations, including those specified in the EU's new cyber security laws,...
