CVE-2025-52054

An issue was discovered in Tenda AC8 v4.0 AC1200 Dual-band Gigabit Wireless Router AC8v4.0 Firmware 16.03.33.05. The root password of the device is calculated with a static string and the last two octets of the MAC address of the device. This allows an unauthenticated attacker to authenticate wit...

PT-2025-35121

Name of the Vulnerable Software and Affected Versions AIML Solutions for HCL SX affected versions not specified Description AIML Solutions for HCL SX is susceptible to a URL validation issue that could allow attackers to perform a server-side request forgery SSRF attack. This may enable...

JetBrains IDE Services 安全漏洞

JetBrains IDE Services is a software from the Czech company JetBrains for managing JetBrains' development tools and AI features. A security vulnerability exists in JetBrains IDE Services versions prior to 2025.5.0.1086 and prior to 2025.4.2.2164, which stems from an improper assignment of...

PT-2025-35114

Name of the Vulnerable Software and Affected Versions: JetBrains IDE Services versions prior to 2025.5.0.1086 JetBrains IDE Services versions prior to 2025.4.2.2164 Description: Users without appropriate permissions could assign high-privileged roles to themselves. Recommendations: Update JetBrai...

Anthropic Disrupts AI-Powered Cyberattacks Automating Theft and Extortion Across Critical Sectors

Anthropic on Wednesday revealed that it disrupted a sophisticated operation that weaponized its artificial intelligence AI-powered chatbot Claude to conduct large-scale theft and extortion of personal data in July 2025. "The actor targeted at least 17 distinct organizations, including in...

CVE-2025-30037

Technical details about CVE-2025-30037 are not publicly provided in the connected documents. The available sources describe exposure of internal endpoints but do not include affected products, versions, or fixes. Monitor for updates.

Our New Premium Managed Databases Plan for Resource-Intensive Workloads

...

Blind Eagle’s Five Clusters Target Colombia Using RATs, Phishing Lures, and Dynamic DNS Infra

Cybersecurity researchers have discovered five distinct activity clusters linked to a persistent threat actor known as Blind Eagle between May 2024 and July 2025. These attacks, observed by Recorded Future Insikt Group, targeted various victims, but primarily within the Colombian government acros...

Malicious code in @flight-common/services (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9f79d53932b1163ec8f1f13fbb18de9439278bcf7ee1fe90dcd53d0349d24b72 The OpenSSF Package Analysis project identified '@flight-common/services' @ 1.2.9213 npm as malicious. It is considered malicious because: - The...

MAL-2025-42124 Malicious code in @flight-common/services (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9f79d53932b1163ec8f1f13fbb18de9439278bcf7ee1fe90dcd53d0349d24b72 The OpenSSF Package Analysis project identified '@flight-common/services' @ 1.2.9213 npm as malicious. It is considered malicious because: - The...

MAL-2025-42125 Malicious code in @liquid-web/core-services (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2f9afbcbd82f8b0c7374b5e9edb81329aa506296ef39a5a63d70d59af7591e74 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @liquid-web/core-services (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2f9afbcbd82f8b0c7374b5e9edb81329aa506296ef39a5a63d70d59af7591e74 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Linux Distros Unpatched Vulnerability : CVE-2022-0123

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered affecting GitLab versions prior to 14.4.5, between 14.5.0 and 14.5.3, and between 14.6.0 and 14.6.1. GitLab does not validate SSL...

Linux Distros Unpatched Vulnerability : CVE-2020-8558

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Kubelet and kube-proxy components in versions 1.1.0-1.16.10, 1.17.0-1.17.6, and 1.18.0-1.18.3 were found to contain a security issue which allows adjacent...

The vulnerability of the copy function for graphic interface files of the Cisco Identity Services Engine allows a perpetrator to download arbitrary files.

The vulnerability of the copy function for graphic interface files of the Cisco Identity Services Engine is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to download arbitrary files remotely...

Hyundai Navigation App 安全漏洞

Hyundai Navigation App is a mobile application for navigation and Telematics services from Hyundai Motor Hyundai, South Korea. A security vulnerability exists in Hyundai Navigation App that stems from improper handling of the profile name field, which could lead to HTML injection...

JetBrains TeamCity Information Disclosure Vulnerability

JetBrains TeamCity is a Continuous Integration/Continuous Deployment CI/CD tool developed by JetBrains to automate the software build, test, and deployment process with support for multiple programming languages and tools. JetBrains TeamCity suffers from an information disclosure vulnerability th...

Linux Distros Unpatched Vulnerability : CVE-2022-2582

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The AWS S3 Crypto SDK sends an unencrypted hash of the plaintext alongside the ciphertext as a metadata field. This hash can be used to brute force the plaintex...

PT-2025-34844 · Cgm · Cgm Clininet

Name of the Vulnerable Software and Affected Versions: affected versions not specified Description: The system exposes several endpoints, typically including /int/ in their path, that should be restricted to internal services but are publicly accessible without authentication to any host able to...

CVE-2025-23312

NVIDIA NeMo Framework for all platforms contains a vulnerability in the retrieval services component, where malicious data created by an attacker could cause a code injection. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure...