351 matches found
PT-2026-1555
Name of the Vulnerable Software and Affected Versions Fujitsu Security Solution AuthConductor Client Basic V2 versions 2.0.25.0 and earlier Description An origin validation error exists in the software. Successful exploitation could allow an attacker who has access to the Windows system where the...
EUVD-2023-59287
Malicious code in bioql PyPI...
Moodle XSS Vulnerability (MSA-25-0029)
Moodle is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:moodle:moodle";...
WordPress Maya Business <= 1.2.0 - Insecure Direct Object References (IDOR) Vulnerability
Insecure Direct Object References IDOR Vulnerability discovered by ch4r0n in WordPress Plugin Maya Business versions = 1.2.0...
LiSec-RTF: Reinforcing RPL Resilience against Routing Table Falsification Attack in 6LoWPAN
Routing Protocol for Low-Power and Lossy Networks RPL is an energy-efficient routing solution for IPv6 over Low-Power Wireless Personal Area Networks 6LoWPAN, recommended for resource-constrained devices. While RPL offers significant benefits, its security vulnerabilities pose challenges,...
Google Chrome Security Update (stable-channel-update-for-desktop_10-2025-06) - Mac OS X
Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...
WordPress eForm - WordPress Form Builder < 4.19.1 - Cross Site Scripting (XSS) Vulnerability
WordPress eForm - WordPress Form Builder 4.19.1 - Cross Site Scripting XSS Vulnerability discovered by Dave Jong Patchstack in WordPress Plugin eForm - WordPress Form Builder versions 4.19.1...
.NET Core RCE Vulnerability (Jun 2025)
This host is missing an important security update according to Microsoft security update June 2025. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
Google Chrome Security Update (stable-channel-update-for-desktop-2025-06) - Mac OS X
Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...
FlatPress <= 1.3.1 XSS Vulnerability (CVE-2025-44108)
FlatPress is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Node.js < 20.19.2, 21.x < 22.15.1, 23.x < 23.11.1, 24.x < 24.0.2 DoS Vulnerability - Mac OS X
Node.js is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:nodejs:node.js";...
Debian: Security Advisory (DSA-5919-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Tenable Nessus Agent Privilege Escalation Vulnerability (TNS-2025-02, TNS-2025-03)
Tenable Nessus Agent is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Linux Distros Unpatched Vulnerability : CVE-2023-52818
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/amd: Fix UBSAN array-index-out-of- bounds for SMU7 For pptable structs that use flexible...
Siemens APOGEE PXC and TALON TC Series Out-of-Bounds Read (CVE-2024-54090)
Affected devices contain an out-of-bounds read in the memory dump function. This could allow an attacker with Medium MED or higher privileges to cause the device to enter an insecure cold start state. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot...
Siemens SIPROTEC 5 Devices Use of Default Credentials (CVE-2024-54015)
Affected devices do not properly validate SNMP GET requests. This could allow an unauthenticated, remote attacker to retrieve sensitive information of the affected devices with SNMPv2 GET requests using default credentials. This plugin only works with Tenable.ot. Please visit...
Fortinet FortiClientMac Authorization Issues Vulnerability (CNVD-2025-03517)
Fortinet FortiClientMac is a mobile endpoint security solution from Fortinet. The solution provides IPsec and SSL encryption, WAN optimization, endpoint compliance and two-factor authentication when connected to a FortiGate firewall appliance. Fortinet FortiClientMac suffers from an authorization...
Malicious code in security_solution (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-866 Malicious code in security_solution (npm)
--- -= Per source details. Do not edit below this line.=-...
A week in security (November 25 – December 1)
Last week on Malwarebytes Labs: Printer problems? Beware the bogus help Data broker exposes 600,000 sensitive files including background checks Medical testing company LifeLabs failed to protect customer data, report finds Explained: the Microsoft connected experiences controversy Spotify, Audibl...