CVE-2025-30126

CVE-2025-30126 concerns Marbella KR8s Dashcam FF 2.0.8. The vulnerability allows a remote attacker to access port 7777 without pairing or physical interaction and modify settings to disable recording, delete recordings, or disable battery protection, which can lead to a flat battery and the car b...

CVE-2025-38447

In the Linux kernel, the following vulnerability has been resolved: mm/rmap: fix potential out-of-bounds page table access during batched unmap As pointed out by David1, the batched unmap logic in trytounmapone may read past the end of a PTE table when a large folio's PTE mappings are not fully...

xonPlus Launches Real-Time Breach Alerting Platform for Enterprise Credential Exposure

Chennai, India, 25th July 2025, CyberNewsWire...

Hackers Exploit Microsoft SharePoint Flaws in Global Breaches

Hackers are exploiting critical SharePoint flaws CVE-2025-53770/53771 to breach global targets, including governments and corporations. Microsoft urges immediate action. Learn about the active attacks and how to protect your network from credential theft and backdoors...

ToolShell: Details of CVEs affecting SharePoint servers

Update 2025/07/22: Microsoft has released a security update for Sharepoint Enterprise Server 2016. The update, with the ID KB5002760, is available in the following link . Cisco Talos is aware of the ongoing exploitation of CVE-2025-53770 and CVE-2025-53771 in the wild. These are path traversal...

Exploit for Deserialization of Untrusted Data in Microsoft

CVE-2025-53770 SharePoint Vulnerability Scanner 100% hacked t...

CGA-CQC9-MWRX-WC3F

Bulletin has no description...

CERTFR-2025-ACT-030

creationtimestamp| type| source ---|---|--- 2025-07-21 15:08:30+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3luibgnek2y2r 2025-07-21 15:08:31+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/114891850304807565 2025-07-21 15:25:54+00:00| seen|...

CERTFR-2025-ALE-010

creationtimestamp| type| source ---|---|--- 2025-07-21 10:49:38+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/114890832342268921 2025-07-21 11:22:58+00:00| seen| https://bsky.app/profile/cti-news.bsky.social/post/3luhutcpmuy22...

Debian: Security Advisory (DLA-4242-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-53909

mailcow: dockerized is an open source groupware/email suite based on docker. A Server-Side Template Injection SSTI vulnerability exists in versions prior to 2025-07 in the notification template system used by mailcow for sending quota and quarantine alerts. The template rendering engine allows...

CERT-UA Discovers LAMEHUG Malware Linked to APT28, Using LLM for Phishing Campaign

The Computer Emergency Response Team of Ukraine CERT-UA has disclosed details of a phishing campaign that's designed to deliver a malware codenamed LAMEHUG. "An obvious feature of LAMEHUG is the use of LLM large language model, used to generate commands based on their textual representation...

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization via the DingDing alert integration. An attacker can access sensitive information by leveraging Viewer-level permissions to interact with the integration. Remediation Upgrade...

Detecting and Visualizing Lateral Movement Attacks with Trellix Helix Connect

Detecting and Visualizing Lateral Movement Attacks with Trellix Helix Connect By Maulik Maheta and Adithya Chandra · July 17, 2025 Executive summary This blog marks the third installment in our series on detecting and visualizing lateral movement attacks with Trellix Helix Connect. A lateral...

GHSA-MVR2-9PJ6-7W5J

creationtimestamp| type| source ---|---|--- 2025-07-16 03:17:48+00:00| seen| https://gist.github.com/safer-bot/f321679cb659096c5eb6a7cca02b46cc 2025-07-16 03:44:39+00:00| seen| https://gist.github.com/safer-bot/a2f85bb3abd40ab169cfae05635f3231 2025-07-16 04:20:43+00:00| seen|...

GHSA-7R82-7XV7-XCPJ

creationtimestamp| type| source ---|---|--- 2025-07-16 03:12:23+00:00| seen| https://gist.github.com/safer-bot/79174d0c201539d79b25fe0f667fa43e 2025-07-16 03:23:26+00:00| seen| https://gist.github.com/safer-bot/b741dde9ba07c0f12e52ef92e8b23ee0 2025-07-16 03:39:54+00:00| seen|...

GHSA-3VQJ-43W4-2Q58

creationtimestamp| type| source ---|---|--- 2025-07-16 03:12:23+00:00| seen| https://gist.github.com/safer-bot/79174d0c201539d79b25fe0f667fa43e 2025-07-16 03:39:54+00:00| seen| https://gist.github.com/safer-bot/2d5f96fb1f5118b0adf472cee7a0dff8 2025-07-16 04:37:01+00:00| seen|...

CGA-MHG4-342V-W7XQ

Bulletin has no description...

BELL-CVE-2025-38347

Bulletin has no description...

How To Automate Ticket Creation, Device Identification and Threat Triage With Tines

Run by the team at workflow orchestration and AI platform Tines, the Tines library features over 1,000 pre-built workflows shared by security practitioners from across the community - all free to import and deploy through the platform's Community Edition. A recent standout is a workflow that...