12860 matches found
4C Strategies Exonaut 安全漏洞
4C Strategies Exonaut is a training, exercise and readiness management platform from the Swedish company 4C Strategies. A security vulnerability exists in versions prior to 4C Strategies Exonaut v22.4, which stems from improperly set permissions...
PT-2025-32206 · 4C Strategies · 4C Strategies Exonaut
Name of the Vulnerable Software and Affected Versions: 4C Strategies Exonaut versions prior to 22.4 Description: The 4C Strategies Exonaut software was found to have insecure permissions. Recommendations: Update to version 22.4 or later...
CVE-2025-46658
An issue was discovered in ExonautWeb in 4C Strategies Exonaut 21.6. There are verbose error messages...
CVE-2025-44964
A lack of SSL certificate validation in BlueStacks v5.20 allows attackers to execute a man-it-the-middle attack and obtain sensitive information...
BlueStacks 安全漏洞
BlueStacks is an Android emulator on Windows from BlueStacks, Inc. in the United States. A security vulnerability exists in BlueStacks version v5.20, which stems from a lack of SSL certificate validation and could lead to a man-in-the-middle attack...
4C Strategies Exonaut 安全漏洞
4C Strategies Exonaut is a training, exercise and readiness management platform from the Swedish company 4C Strategies. A security vulnerability exists in 4C Strategies Exonaut version 21.6, which stems from a detailed error message in ExonautWeb...
CVE-2025-44964
A lack of SSL certificate validation in BlueStacks v5.20 allows attackers to execute a man-it-the-middle attack and obtain sensitive information...
CVE-2025-50340
An Insecure Direct Object Reference IDOR vulnerability was discovered in SOGo Webmail thru 5.6.0, allowing an authenticated user to send emails on behalf of other users by manipulating a user-controlled identifier in the email-sending request. The server fails to verify whether the authenticated...
Security update for java-21-openjdk
This update for java-21-openjdk fixes the following issues: Update to upstream tag jdk-21.0.8+9 July 2025 CPU: Security fixes: CVE-2025-30749: several scenarios can lead to heap corruption bsc1246595 CVE-2025-30754: incomplete handshake may lead to weakening TLS protections bsc1246598...
PT-2025-32410
Name of the Vulnerable Software and Affected Versions 7-Zip versions prior to 25.01 Description An issue exists in 7-Zip where symbolic links are not always properly handled during the extraction of archives. This flaw allows a remote attacker to use a specially crafted archive to perform arbitra...
Exploit for CVE-2025-46018
CVE-2025-46018 – CSC Pay Mobile App Payment Authentication Byp...
DEBIAN-CVE-2025-54410
Moby is an open source container framework developed by Docker Inc. that is distributed as Docker Engine, Mirantis Container Runtime, and various other downstream projects/products. A firewalld vulnerability affects Moby releases before 28.0.0. When firewalld reloads, Docker fails to re-create...
OPENSUSE-SU-2025:15395-1 docker-28.3.3_ce-26.1 on GA media
These are all security issues fixed in the docker-28.3.3ce-26.1 package on the GA media of openSUSE Tumbleweed...
CVE-2025-7361
A code injection vulnerability due to an improper initialization check exists in NI LabVIEW that may result in arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI using a CIN node. This vulnerability affects 32-bit NI LabVIEW 2025 Q1...
NI LabVIEW 安全漏洞
NI LabVIEW National Instruments LabVIEW is a graphical program compilation platform from National Instruments NI. A security vulnerability exists in NI LabVIEW 2025 Q1 and prior versions that stems from improper error handling and could lead to arbitrary code execution...
BeyondTrust Privilege Management for Windows 安全漏洞
BeyondTrust Privilege Management for Windows is a software for restricting user privileges by BeyondTrust USA. A security vulnerability exists in BeyondTrust Privilege Management for Windows prior to version 25.4.270.0, which originates in wmic.exe could lead to an anti-tamper protection bypass...
Invision Community 安全漏洞
Invision Community is a software for designing and developing mobile application UI from Invision USA. A security vulnerability exists in Invision Community versions 4.7.20 and earlier, which stems from improper input cleanup and is susceptible to SQL injection attacks...
GHSA-8HC4-VH64-CXMJ
creationtimestamp| type| source ---|---|--- 2025-07-25 17:22:08+00:00| seen| https://gist.github.com/jporzucek/063a1bfdceba2cb9dbbdc9dfbbef6ef5 2026-01-24 21:24:31+00:00| seen| https://gist.github.com/alon710/1d19d243e6bf504868628ee2d5498eb0 2026-01-24 22:31:28+00:00| seen|...
