GNU Transport Layer Security Library 3.8.10

GnuTLS is a secure communications library implementing the SSL and TLS protocols and technologies around them. It provides a simple C language application programming interface API to access the secure communications protocols, as well as APIs to parse and write X.509, PKCS 12, OpenPGP, and other...

AdeptHEQ-FL: Adaptive Homomorphic Encryption for Federated Learning of Hybrid Classical-Quantum Models with Dynamic Layer Sparing

Federated Learning FL faces inherent challenges in balancing model performance, privacy preservation, and communication efficiency, especially in non-IID decentralized environments. Recent approaches either sacrifice formal privacy guarantees, incur high overheads, or overlook quantum-enhanced...

PT-2025-28897 · Tenda · Tenda Cp3 Pro

Name of the Vulnerable Software and Affected Versions: Tenda CP3 Pro version 22.5.4.93 Description: An insecure permissions issue exists in the Tenda CP3 Pro firmware. The telnet service telnetd is enabled by default during boot via the initialization script /etc/init.d/eth.sh. This allows remote...

Cisco Secure Endpoint Connector Installed (Linux)

Binary data ciscosecureendpointconnectornixinstalled.nbin...

PT-2025-28962 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: Kaseya Rapid Fire Tools Network Detective version 2.0.16.0 Description: Kaseya Rapid Fire Tools Network Detective stores unencrypted credentials for privileged access in the collector.txt configuration file. Recommendations: Ensure the...

Enhancing Microsoft 365 security by eliminating high-privilege access

In this blog you will hear directly from Microsoft’s Deputy Chief Information Security Officer CISO for Experiences and Devices, Naresh Kannan, about eliminating high-privileged access across all Microsoft 365 applications. This blog is part of an ongoing series where our Deputy CISOs share their...

CVE-2025-48810

Processor optimization removal or modification of security-critical code in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally...

CVE-2025-48810

Processor optimization removal or modification of security-critical code in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally...

CVE-2025-48810 Windows Secure Kernel Mode Information Disclosure Vulnerability

...

CVE-2025-48810 Windows Secure Kernel Mode Information Disclosure Vulnerability

...

CVE-2025-48810

CVE-2025-48810 : Windows Secure Kernel Mode information disclosure via processor optimization/removal or modification of security-critical code. Affects Windows Secure Kernel Mode; CVE entry indicates local (L) access, with low privileges required and no user interaction, and a base score of 5.5 ...

CVE-2025-48809 Windows Secure Kernel Mode Information Disclosure Vulnerability

...

CVE-2025-47996 Windows MBT Transport Driver Elevation of Privilege Vulnerability

...

CVE-2025-5464

Insertion of sensitive information into a log file in Ivanti Connect Secure before version 22.7R2.8 allows a local authenticated attacker to obtain that information...

CVE-2025-5464

Insertion of sensitive information into a log file in Ivanti Connect Secure before version 22.7R2.8 allows a local authenticated attacker to obtain that information...

CVE-2025-0293

CLRF injection in Ivanti Connect Secure before version 22.7R2.8 and Ivanti Policy Secure before version 22.7R1.5 allows a remote authenticated attacker with admin rights to write to a protected configuration file on disk...

CVE-2025-0293

CLRF injection in Ivanti Connect Secure before version 22.7R2.8 and Ivanti Policy Secure before version 22.7R1.5 allows a remote authenticated attacker with admin rights to write to a protected configuration file on disk...

CVE-2025-0292

SSRF in Ivanti Connect Secure before version 22.7R2.8 and Ivanti Policy Secure before version 22.7R1.5 allows a remote authenticated attacker with admin rights to access internal network services...

CVE-2025-0292

SSRF in Ivanti Connect Secure before version 22.7R2.8 and Ivanti Policy Secure before version 22.7R1.5 allows a remote authenticated attacker with admin rights to access internal network services...

CVE-2025-0292

CVE-2025-0292 affects Ivanti Connect Secure (ICS) and Ivanti Policy Secure (IPS). A Server-Side Request Forgery (SSRF) flaw allows a remote authenticated attacker with admin rights to access internal network services. Affected versions are ICS prior to 22.7R2.8 and IPS prior to 22.7R1.5. Mitigati...