The vulnerability of the software client service for Cisco WebEx Meetings allows a perpetrator to compromise the integrity of the protected information.

The vulnerability of Cisco Webex Meetings software client services relates to the loading of unreliable external data alongside reliable data. Exploiting this vulnerability allows a malicious actor to compromise the integrity of protected information...

The vulnerability of the FactoryTalk Services Platform, related to buffer overflows in dynamic memory, can lead to service failures.

The vulnerability of the FactoryTalk Services Platform lies in the overflow of memory buffer in dynamic memory. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

CVE-2025-29828

Missing release of memory after effective lifetime in Windows Cryptographic Services allows an unauthorized attacker to execute code over a network...

CVE-2025-40585

A vulnerability has been identified in Energy Services All versions with G5DFR. Affected solutions using G5DFR contain default credentials. This could allow an attacker to gain control of G5DFR component and tamper with outputs from the device...

PT-2025-25307

Name of the Vulnerable Software and Affected Versions libxml2 affected versions not specified Red Hat Enterprise Linux versions 6 through 10 Red Hat JBoss Core Services affected versions not specified Red Hat OpenShift Container Platform 4 affected versions not specified Description A flaw was...

[SECURITY] Fedora 42 Update: qt6-qtlocation-6.9.1-1.fc42

The Qt Location API helps you create viable mapping solutions using the data available from some of the popular location services...

PT-2025-25273 · Trend Micro · Trend Micro Worry-Free Business Security Services

Name of the Vulnerable Software and Affected Versions: Trend Micro Worry-Free Business Security Services WFBSS SaaS client version affected versions not specified Description: The issue is related to an uncontrolled search path vulnerability in the WFBSS agent, which could allow an attacker with...

Huawei EulerOS: Security Advisory for krb5 (EulerOS-SA-2025-1619)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the Chatbot component of Oracle Financial Services’ Revenue Management and Billing system allows a hacker to gain unauthorized access to read, add, modify, or delete data.

The vulnerability of the Chatbot component of Oracle Financial Services’ Revenue Management and Billing system is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to read, add, modify, or delete...

Microsoft Patch Tuesday for June 2025 — Snort rules and prominent vulnerabilities

Update 6/12/2025: Microsoft released an additional CVE CVE-2025-32717 . Details and SIDs have been reflected to include this additional vulnerability. Microsoft has released its monthly security update for June 2025, which includes 66 vulnerabilities affecting a range of products, including 10 th...

CVE-2025-32710

Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network...

CVE-2025-29828

Missing release of memory after effective lifetime in Windows Cryptographic Services allows an unauthorized attacker to execute code over a network...

CVE-2025-29828

Missing release of memory after effective lifetime in Windows Cryptographic Services allows an unauthorized attacker to execute code over a network...

CVE-2025-32710 Windows Remote Desktop Services Remote Code Execution Vulnerability

...

CVE-2025-32710

CVE-2025-32710 refers to a Use-After-Free vulnerability in Windows Remote Desktop Services that allows a network-based attacker to execute code on affected systems. The CVE is linked to Windows RDS components; the Nessus plugin notes it alongside CVE-2025-32715, and an exploit repo exists, but ex...

CVE-2025-40585

A vulnerability has been identified in Energy Services All versions with G5DFR. Affected solutions using G5DFR contain default credentials. This could allow an attacker to gain control of G5DFR component and tamper with outputs from the device...

CVE-2025-40585

Summary: CVE-2025-40585 affects Siemens Energy Services for all versions using the G5DFR component, where default credentials enable an attacker to gain control of G5DFR and tamper with device outputs. What’s affected: Energy Services with G5DFR (default credentials exist). Cause: Use of default ...

CVE-2025-40585

A vulnerability has been identified in Energy Services All versions with G5DFR. Affected solutions using G5DFR contain default credentials. This could allow an attacker to gain control of G5DFR component and tamper with outputs from the device...

CVE-2025-40585

A vulnerability has been identified in Energy Services All versions with G5DFR. Affected solutions using G5DFR contain default credentials. This could allow an attacker to gain control of G5DFR component and tamper with outputs from the device...

The Hidden Threat in Your Stack: Why Non-Human Identity Management is the Next Cybersecurity Frontier

Modern enterprise networks are highly complex environments that rely on hundreds of apps and infrastructure services. These systems need to interact securely and efficiently without constant human oversight, which is where non-human identities NHIs come in. NHIs — including application secrets, A...