CVE-2024-44598

creationtimestamp| type| source ---|---|--- 2025-12-13 18:41:11+00:00| seen| https://gist.github.com/ZeroBreach-GmbH/e957dc32e72b366894565b7ff03659a4...

UK’s ICO Fine LastPass £1.2 Million Over 2022 Security Breach

UK's ICO fines LastPass £1.2M for the 2022 data breach that exposed 1.6 million users’ data. Learn how a flaw in an employee's personal PC led to the massive security failure...

The 5 Stages of Continuous Threat Exposure Management

Attackers don’t care about your compliance reports or the sheer number of vulnerabilities you have. They look for a single, exploitable path to your most valuable assets. To defend effectively, you need to see your organization through their eyes. This is the core principle behind continuous thre...

Apple macOS 安全漏洞

Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS Tahoe versions prior to 26.1, which stems from an insufficient sandbox restriction that could cause an application to break throug...

Apple macOS 安全漏洞

Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS Sonoma prior to 14.8.3 and Sequoia prior to 15.7.3, which stems from an insufficient check and could result in access to sensitive...

Plesk 安全漏洞

Plesk is a web hosting control panel from the Swiss company Plesk. A security vulnerability exists in Plesk version 18.0 that stems from improper access control...

Apple macOS 安全漏洞

Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS Sonoma prior to 14.8.3 and Sequoia prior to 15.7.3, which stems from a privacy concern and could result in access to protected use...

Vuetify 安全漏洞

vuetify is a material component framework for Vue open sourced by vuetify Germany. A security vulnerability exists in Vuetify version 2.0.0 up to versions prior to 3.0.0, which stems from cross-site scripting in the VDatePicker component that may result in the injection of uncleaned HTML...

Google Pixel 安全漏洞

Google Pixel is a smartphone from Google, an American company. A security vulnerability exists in Google Pixel that stems from a competing condition in PrepareWorkloadBuffers in gxpmainactor.cc, which could lead to local elevation of privilege...

Google Pixel 安全漏洞

Google Pixel is a smartphone from Google, an American company. Google Pixel has a security vulnerability that stems from a privilege bypass in onCreateTasks in CameraActivity.java, which could lead to the disclosure of local information...

Google Pixel 安全漏洞

Google Pixel is a smartphone from Google, an American company. Google Pixel has a security vulnerability that stems from the lack of boundary checking in GetHostAddress in gxpbuffer.h, which could lead to local elevation of privilege...

The vulnerability in the implementation of the IEEE 802.11 protocol in Linux kernel allows a attacker to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Linux operating system’s IEEE 802.11 kernel implementation is related to insufficient verification of data authenticity. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality and integrity of the protected information...

Google Pixel 安全漏洞

Google Pixel is a smartphone from the American company Google Google. Google Pixel has a security vulnerability that can be exploited by an attacker to cause local elevation of privilege...

Vulnerabilities fixed in Adobe ColdFusion

Adobe has fixed vulnerabilities in ColdFusion Specifically for versions 25.4, 23.16, 21.22 and earlier. The vulnerabilities are in the way ColdFusion handles file uploads, input validation, and data access. Users with high privileges can execute unauthorized code or access sensitive data without...

Im Park DijiDemi 安全漏洞

Im Park DijiDemi is an educational software from Im Park Turkey. A security vulnerability exists in Im Park DijiDemi version 28.11.2025 and earlier, which stems from a user control key leading to an authorization bypass that could exploit trusted identifiers...

CVE-2025-65297

The CVE-2025-65297 entry covers Aqara Hub devices (Camera Hub G3 4.1.9_0027; Hub M2 4.3.6_0027; Hub M3 4.3.6_0025) that automatically collect and upload unencrypted sensitive information without disclosure or consent. The connected sources corroborate the same description across Red Hat/CIRA ENIS...

Gogs 安全漏洞

Gogs Go Git Service is a self-service Git hosting service based on the Go language by the Gogs team, which supports creating and migrating public/private repositories, adding and removing repository collaborators, and so on. A security vulnerability exists in Gogs, which stems from the mishandlin...

DataGear 安全漏洞

DataGear is an open source, free data visualization and analysis platform from DataGear, Inc. A security vulnerability exists in DataGear version 5.5.0, which originates from the possibility of arbitrary file deletion...

Build a Proactive Vulnerability Management Program

You wouldn't build a fortress without a blueprint. Yet, many organizations approach cybersecurity by simply buying tools—the digital bricks and mortar—without a clear plan for how they all fit together. This leaves gaps in your defenses that attackers are quick to find. A vulnerability management...

Prompt injection is a problem that may never be fixed, warns NCSC

Prompt injection is shaping up to be one of the most stubborn problems in AI security, and the UK’s National Cyber Security Centre NCSC has warned that it may never be “fixed” in the way SQL injection was. Two years ago, the NCSC said prompt injection might turn out to be the “SQL injection of th...