17551 matches found
CVE-2025-58426
desknet's NEO V4.0R1.0 to V9.0R2.0 contains a hard-coded cryptographic key, which allows an attacker to create malicious AppSuite applications...
PT-2025-42457
Name of the Vulnerable Software and Affected Versions desknet NEO AppSuite versions 4.0R1.0 through 9.0R2.0 Description An issue exists in the AppSuite component of desknet's NEO that relates to improper protection of alternate paths. This allows an attacker to create malicious AppSuite...
PT-2025-42458
Name of the Vulnerable Software and Affected Versions desknet's NEO versions 4.0R1.0 through 9.0R2.0 Description desknet's NEO contains a hard-coded cryptographic key. This allows an attacker to create malicious AppSuite applications. Recommendations Update to a version later than 9.0R2.0...
GHSA-HWMC-4C8J-XXJ7 `sveltekit-superforms` has Prototype Pollution in `parseFormData` function of `formData.js`
Summary sveltekit-superforms v2.27.3 and prior are susceptible to a prototype pollution vulnerability within the parseFormData function of formData.js. An attacker can inject string and array properties into Object.prototype, leading to denial of service, type confusion, and potential remote code...
[SECURITY] Fedora 42 Update: rust-prometheus-0.14.0-1.fc42
Prometheus instrumentation library for Rust applications...
XWiki Platform CSRF
The vulnerability of the software interface of the XWiki Platform for creating collaborative web applications is related to insufficient verification of the authenticity of executed requests. Exploiting this vulnerability can allow a malicious actor to carry out a CSRF attack remotely...
UBUNTU-CVE-2025-11716
Links in a sandboxed iframe could open an external app on Android without the required "allow-" permission. This vulnerability affects Firefox 144 and Thunderbird 144...
Microsoft Windows PrintWorkflowUserSvc resource management error vulnerability
Microsoft Windows PrintWorkflowUserSvc is a Windows service from Microsoft Corporation USA that provides support for print workflow applications. A resource management error vulnerability exists in Microsoft Windows PrintWorkflowUserSvc, which stems from an attacker's ability to elevate privilege...
OpenJDK Insecure Search Path
The vulnerability of the OpenJDK library for desktop applications in JetBrains Runtime relates to the use of an insecure search path. Exploiting this vulnerability could allow attackers to compromise the confidentiality and integrity of the protected information...
XSS-Payloads-to-Bypass-WAFs
PoC exploit for XSS payloads to bypass WAFs, specifically target...
Exploit for Missing Authentication for Critical Function in Flowiseai Flowise
It is an offensive tool for web application exploitation. This r...
Securing agentic AI: Your guide to the Microsoft Ignite sessions catalog
Security is a core focus at Microsoft Ignite 2025, reflected in dedicated sessions and hands-on experiences designed for security professionals and leaders. Whether you’re shaping strategy or working on the front lines, Microsoft Ignite offers direct access to the latest advancements and practica...
nightmare-exploits
It is an offensive tool for web applications. Exploits targeting...
SaaS Breaches Start with Tokens - What Security Teams Must Watch
Token theft is a leading cause of SaaS breaches. Discover why OAuth and API tokens are often overlooked and how security teams can strengthen token hygiene to prevent attacks. Most companies in 2025 rely on a whole range of software-as-a-service SaaS applications to run their operations. However,...
ANCORA: Accurate Intrusion Recovery for Web Applications
Modern web application recovery presents a critical dilemma. Coarse-grained snapshot rollbacks cause unacceptable data loss for legitimate users. Surgically removing an attack's impact is hindered by a fundamental challenge in high-concurrency environments: it is difficult to attribute resulting...
BIG-IP Local Traffic Manager SSL Profile Handler DoS
The vulnerability of the SSL profile handler function of the BIG-IP Local Traffic Manager client controller application relates to the swapping of pointers. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
EUVD-2025-31861
A vulnerability was detected in code-projects E-Commerce Website 1.0. Impacted is an unknown function of the file /pages/editorderdetails.php. The manipulation of the argument orderid results in sql injection. The attack may be launched remotely. The exploit is now public and may be used...
Disrupting threats targeting Microsoft Teams
The extensive collaboration features and global adoption of Microsoft Teams make it a high-value target for both cybercriminals and state-sponsored actors. Threat actors abuse its core capabilities – messaging chat, calls and meetings, and video-based screen-sharing – at different points along th...