CVE-2025-43316

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26, visionOS 26. A malicious app may be able to gain root privileges...

CVE-2025-31269

A permissions issue in Apple macOS allows an application to potentially access protected user data due to insufficient privilege limitations. This vulnerability affects versions of macOS Sonoma prior to 14.8 and macOS Tahoe prior to 26 . The issue was addressed by implementing additional restrict...

Important: Red Hat Security Advisory: Red Hat Enterprise Linux AI 1.5 (NVIDIA)

Red Hat Enterprise Linux AI 1.5 NVIDIA is now available. Red Hat® Enterprise Linux® AI is a foundation model platform to seamlessly develop, test, and run Granite family large language models LLMs for enterprise applications...

6 Browser-Based Attacks Security Teams Need to Prepare For Right Now

Attacks that target users in their web browsers have seen an unprecedented rise in recent years. In this article, we'll explore what a "browser-based attack" is, and why they're proving to be so effective. What is a browser-based attack? First, it's important to establish what a browser-based...

CVE-2025-58172: Improper Neutralization of Input During Web Page Generation

drawnix is an all in one open-source whiteboard tool. In drawnix versions through 0.2.1, a cross-site scripting XSS vulnerability exists in the debug logging functionality. User controlled content is inserted directly into the DOM via innerHTML without sanitization when the global function...

PT-2025-37823

Name of the Vulnerable Software and Affected Versions: macOS versions prior to Tahoe 26 Description: An application with root privileges may be able to access private information due to missing entitlement checks. Recommendations: Update to macOS Tahoe 26...

CVE-2025-59363

In One Identity OneLogin before 2025.3.0, a request returns the OIDC client secret with GET Apps API v2 even though this secret should only be returned when an App is first created,...

sinatra

This is a Sinatra repository, a DSL for creating web applications in Ruby with minimal effort. The repository contains various files, including a .github/workflows/test.yml file that defines a GitHub Actions workflow for testing, and a Gemfile that lists dependencies for the project. The Gemfile...

CVE-2025-59363

In One Identity OneLogin prior to 2025.3.0, the GET /api/2/apps endpoint returned OIDC client_secret values alongside app metadata, enabling disclosure of sensitive credentials. This is caused by excessive data being returned by the Apps API v2 and constitutes a breach of confidentiality for OIDC...

CVE-2025-59363: Incorrect Resource Transfer Between Spheres

In One Identity OneLogin before 2025.3.0, a request returns the OIDC client secret with GET Apps API v2 even though this secret should only be returned when an App is first created,...

Microsoft Office Memory Use Code Execution

Vulnerabilities of Microsoft Office packages, 365 Apps for Enterprise, and Microsoft PowerPoint presentation software are related to the use of memory after it is released. Exploiting these vulnerabilities can allow attackers to execute arbitrary code...

Microsoft Office Memory Use After Free

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages relates to the ability to utilize memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Microsoft Visio Office 365 Apps for Enterprise Buffer Overflow

The vulnerability of Microsoft Visio graphical editors, Microsoft Office programs, and 365 Apps for Enterprise is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Microsoft Office Memory Use After Free

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages relates to the ability to utilize memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Microsoft Office Memory Use After Free

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages relates to the ability to utilize memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Microsoft Word Office Suites Microsoft 365 Apps Disclosure

The vulnerability of Microsoft Word, the Microsoft Office suite, and Microsoft 365 Apps for Enterprise is related to the misuse of a non-trusted pointer. Exploiting this vulnerability can allow an attacker to disclose protected information...

Malware in polkadot-apps

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious Package

Overview polkadot-apps is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2025-47100 Malicious code in polkadot-apps (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 59092b31b08f13b01c42d1e03ec24bdaf044459cc73c90f1ac4c458dbb5817a0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in polkadot-apps (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 59092b31b08f13b01c42d1e03ec24bdaf044459cc73c90f1ac4c458dbb5817a0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...