Security Bulletin: Vulnerability in Flask-Cors affects IBM Cloud Pak for Data System 1.0(CPDS 1.0)[CVE-2024-6221].

Summary The FlaskCors package is used by IBM Cloud Pak for Data System 1.0. IBM Cloud Pak for Data System 1.0 has addressed the applicable CVE CVE-2024-6221. Vulnerability Details CVEID:CVE-2024-6221 DESCRIPTION: A vulnerability in corydolphin/flask-cors version 4.0.1 allows the...

Security Bulletin: Multiple Vulnerabilities in IBM Cloud Pak for Network Automation

Summary Multiple vulnerabilities were addressed in IBM Cloud Pak for Network Automation 2.7.8 Vulnerability Details CVEID:CVE-2024-24790 DESCRIPTION: An unspecified error related to various Is methods IsPrivate, IsLoopback, etc did not work as expected for IPv4-mapped IPv6 addresses in the...

Billions of Apple Devices at Risk from “AirBorne” AirPlay Vulnerabilities

Oligo Security uncovers "AirBorne," a set of 23 vulnerabilities in Apple AirPlay affecting billions of devices. Learn how…...

BELL-CVE-2025-37771

Bulletin has no description...

CVE-2023-53122

Removed by vendor...

MAL-2025-3590 Malicious code in vanjavajs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a8417f1ff2ac3cbdce79373e2e75ebb7a69e5c4e64fdffb9627ebd274a15dfe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2025-18775 · WordPress · Ultimate Auction Pro

Name of the Vulnerable Software and Affected Versions: Ultimate Auction Pro plugin for WordPress versions up to, and including, 1.5.2 Description: The issue is related to SQL Injection via the auction id parameter due to insufficient escaping on the user-supplied parameter and lack of sufficient...

CVE-2025-23179

CWE-798: Use of Hard-coded Credentials...

GHSA-32H7-7J94-8FC2 vulnerabilities

Vulnerabilities for packages: mattermost-fips...

GHSA-H4RR-F37J-4HH7 vulnerabilities

Vulnerabilities for packages: mattermost-fips...

GHSA-MJ2P-V2C2-VH4V vulnerabilities

Vulnerabilities for packages: mattermost-fips...

KLA83533 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to gain privileges, bypass security restrictions, execute arbitrary code. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Azure Bot Framework SDK ca...

PT-2025-18330 · Hcl · Hcl Domino Volt

Name of the Vulnerable Software and Affected Versions: HCL Domino Volt affected versions not specified Description: The issue concerns an unsafe default file type filter policy that allows the upload of .html files and the execution of unsafe JavaScript in deployed applications. This could...

Scattered Spider Suspected in Major M&S Cyberattack

The cyberattack on Marks & Spencer M&S is linked to the notorious Scattered Spider group. Explore the severe…...

CVE-2025-23181

CWE-250: Execution with Unnecessary Privileges...

CVE-2025-23180

CVE-2025-23180 affects Ribbon Communications Apollo 9608 SBC; exposed vulnerability stems from an unnecessary privileged operation in v9.6R3. Reported by CNNVD/PT-Security and corroborated in Red Hat/NVD-style feeds. Impact per sources: CWE-250 (Execution with Unnecessary Privileges); CVSSv3.1 ba...

Mozilla Firefox < 138.0

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 138.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-28 advisory. - Memory safety bugs present in Firefox 137, Thunderbird 137, Firefox ESR 128.9, and Thunderbird 128.9. Some o...

MAL-2025-5140 Malicious code in trongridlib (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 810f3d44ffd0654acef07cf5bc57e4c1c8daa207332751a60c14f29f64832560 Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...

MAL-2025-4246 Malicious code in tronlibpy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 3830f2a3daeaf5ef1da928f6700860805f4fb3b0f955ab814f4742b334ca7868 Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...

The API Imperative: Securing Agentic AI and Beyond

We recently released The Rise of Agentic AI, our API ThreatStats report for Q1 2025, finding that evolving API threats are fueled by the rise of agentic AI systems, growing complexity in cloud-native infrastructure, and a surge in software supply chain risks, and uncovered patterns and actionable...